This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
File:                     3230302e3131352e38392e302f32342d3234203d3e203532333735.roa (raw, json)
Hash identifier:          O4bx6TPCdGmZRJpp/VxaFfhSw3Q/OvgGPih3VS1olhI=
Subject key identifier:   AF:13:1C:5F:EC:3E:10:32:40:E2:24:49:FE:E6:EC:93:D2:78:34:92
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       31E06A16B1F30B5222167BE3FE52CE6D6CF8ED29
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa
Signing time:             Tue 06 Jan 2026 19:29:34 +0000
ROA not before:           Tue 06 Jan 2026 19:24:34 +0000
ROA not after:            Tue 05 Jan 2027 19:29:34 +0000
asID:                     52375
IP address blocks:        200.115.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e0:6a:16:b1:f3:0b:52:22:16:7b:e3:fe:52:ce:6d:6c:f8:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:34 2026 GMT
            Not After : Jan  5 19:29:34 2027 GMT
        Subject: CN=AF131C5FEC3E103240E22449FEE6EC93D2783492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:88:bb:3a:a2:4e:5f:bc:7e:d7:f7:b9:f5:
                    fd:53:51:ad:59:94:7e:b7:b6:e2:e9:8d:ab:41:3b:
                    0c:7f:cf:e1:46:50:b1:a1:7b:21:32:2f:df:7e:2f:
                    b9:bb:d5:11:72:fd:6d:06:53:69:7c:4e:93:a8:28:
                    46:0b:2e:b0:b4:c7:85:e8:52:b1:2e:f9:27:11:36:
                    f6:3f:7d:92:46:13:d4:9e:1f:99:a2:7c:5f:59:db:
                    5e:09:52:49:5b:81:4a:5e:de:bd:78:80:15:b1:0b:
                    97:44:7c:6a:68:b7:f3:8a:79:d9:4b:bf:12:5b:76:
                    84:ec:7b:db:ea:a5:58:dd:24:9e:0c:90:1f:c6:a2:
                    e2:b4:8c:5e:06:09:d8:1f:2f:70:56:29:10:e2:8b:
                    48:79:9b:3f:c1:1d:f0:e4:2d:3e:4f:ea:44:16:c3:
                    a5:35:6d:39:97:b0:3b:33:a5:45:92:c0:db:8b:f7:
                    40:0d:bb:ef:c6:7b:8b:21:16:88:5c:35:d6:4b:18:
                    d4:52:68:35:8d:03:29:cd:bb:84:20:b9:ee:bb:0f:
                    d0:21:33:cf:3f:4f:3d:e3:44:0d:b6:b1:30:74:9c:
                    3d:40:15:15:54:46:20:1a:cf:6b:c4:1b:27:0c:18:
                    44:a0:4b:ac:32:0f:8a:00:bc:21:7f:03:14:6a:60:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:1C:5F:EC:3E:10:32:40:E2:24:49:FE:E6:EC:93:D2:78:34:92
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38392e302f32342d3234203d3e203532333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:85:4c:18:cd:dc:a7:92:bf:88:d1:65:12:1c:54:00:43:f9:
         1b:f6:40:5a:ef:4a:a3:25:f3:ae:c1:0f:99:b4:fe:ab:4a:86:
         1e:8b:f4:e5:12:33:9b:89:49:d0:6b:62:70:e0:03:a3:8a:6a:
         b9:e2:2d:85:3c:29:fd:ca:5b:1d:26:0d:ad:f0:43:96:52:39:
         fc:89:b5:6e:bd:ac:df:45:e2:a3:61:14:ff:6c:4d:c4:1c:fe:
         8b:69:56:cf:4c:47:d4:4a:7a:b5:4c:c5:49:80:b4:b0:1d:73:
         d7:ee:31:93:d8:e8:30:86:c3:ae:70:b2:e2:0b:2f:e4:d2:b4:
         e5:80:09:39:ac:f6:4c:63:be:ef:16:80:ce:0e:8f:45:59:81:
         2a:76:52:e2:78:44:60:9a:8c:58:d6:64:be:81:18:ce:04:70:
         82:28:45:f0:4a:c3:97:3f:3d:24:92:87:8c:a4:43:69:28:f2:
         a2:32:b0:b0:4a:c5:1f:2a:1c:73:05:45:d5:37:a6:7a:f6:7c:
         ca:63:e2:82:26:72:66:78:a9:b9:cc:44:70:ed:25:53:9d:f3:
         c0:e6:af:71:d6:03:26:f6:a3:93:8e:72:4b:7f:26:fa:25:cc:
         41:95:12:1b:53:15:a6:ab:a8:26:08:0c:3a:fe:2d:f2:8e:d5:
         a9:21:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:40 2026 by rpki-client