This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
File:                     3230302e3131352e39312e302f32342d3234203d3e203532343033.roa (raw, json)
Hash identifier:          FI3q48OwXIDQQQTv68/6NY5h9rIoMlZgQqkYd2j876w=
Subject key identifier:   67:20:02:76:18:16:23:83:80:D4:AA:4F:AA:82:21:19:EE:1C:16:13
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4327E9936A674726A4BFD3E1A99AA4FF27112778
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa
Signing time:             Tue 06 Jan 2026 19:29:30 +0000
ROA not before:           Tue 06 Jan 2026 19:24:30 +0000
ROA not after:            Tue 05 Jan 2027 19:29:30 +0000
asID:                     52403
IP address blocks:        200.115.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:e9:93:6a:67:47:26:a4:bf:d3:e1:a9:9a:a4:ff:27:11:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:30 2026 GMT
            Not After : Jan  5 19:29:30 2027 GMT
        Subject: CN=672002761816238380D4AA4FAA822119EE1C1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:2e:99:09:03:34:aa:8e:71:ff:96:57:d1:
                    42:55:9c:8a:f7:ee:fd:b1:30:f8:3b:a0:d8:66:92:
                    47:6a:33:48:09:fb:0a:c4:20:df:ea:ec:79:22:44:
                    e9:5e:80:3d:ad:b9:76:ae:db:01:d0:34:a8:ff:49:
                    05:f0:b2:d3:85:d0:07:87:df:ed:b0:72:ea:9e:ea:
                    f9:7c:9b:81:03:ab:8b:b9:34:d3:03:71:9d:cd:21:
                    b5:d5:67:a5:48:b5:3d:a8:aa:6c:0f:d5:27:8b:7a:
                    e0:1a:3f:f8:5f:c8:cb:8a:2f:8a:f4:a2:88:c8:f9:
                    f1:be:85:e9:bf:75:76:ab:9b:43:6e:1d:ba:57:dc:
                    48:f1:7b:3e:d3:66:65:b4:60:5d:11:87:68:ae:ac:
                    63:72:ef:77:b7:53:d3:84:7b:eb:a2:61:e2:a2:45:
                    a2:65:82:dc:3f:ca:1b:07:ea:64:cc:88:0e:c6:42:
                    9f:90:2b:7f:cf:20:df:b8:6d:2f:12:20:4c:1b:bb:
                    87:a6:cc:e6:1c:e0:0b:74:0a:83:e5:20:05:0e:af:
                    ed:2d:03:9e:94:cf:6b:8e:c2:f1:33:7d:68:74:62:
                    08:81:ab:9f:35:33:38:19:c3:28:95:8b:34:20:18:
                    e0:90:68:7e:3c:86:fe:68:f0:8f:dc:3f:e3:b0:6b:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:02:76:18:16:23:83:80:D4:AA:4F:AA:82:21:19:EE:1C:16:13
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39312e302f32342d3234203d3e203532343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:d9:94:32:69:6f:78:98:06:68:25:47:3f:66:0c:2d:78:67:
         00:9a:92:88:a7:28:0a:11:90:1b:3e:f0:76:b7:4b:0d:e5:aa:
         28:dc:4f:00:1e:a9:b4:c8:5b:56:3f:fa:5e:29:03:2e:2d:08:
         a7:16:d7:61:99:5f:05:c1:87:9e:8c:b2:25:40:d4:d4:80:9a:
         cd:e8:22:b1:e3:41:6d:09:1f:46:7c:85:5b:fc:b1:a5:2b:4b:
         8f:5f:98:ba:fa:c5:c4:4a:8f:68:9c:d0:de:50:dc:ed:ee:fc:
         41:0f:b4:7b:d1:98:e8:33:cc:d0:d1:41:9b:f6:d9:5d:ca:cc:
         63:a0:be:77:90:1c:c7:14:77:de:75:33:72:a3:7c:a5:11:67:
         c7:9b:31:51:ed:07:78:5b:54:ee:cd:66:26:98:22:6d:e1:fa:
         4e:24:80:c6:ee:52:4e:a1:4d:c5:62:ac:db:37:90:4c:0a:07:
         89:1c:08:fc:dc:55:4b:6f:9a:33:4e:a7:05:ff:13:bb:ea:6e:
         0e:5e:1c:6c:3c:50:da:93:91:88:03:6d:b1:32:e9:89:f5:4e:
         89:00:56:41:fe:d7:8d:72:7e:39:fe:37:b9:e7:ce:3f:59:28:
         6e:c1:cb:fc:74:a1:37:4f:6d:69:2e:a7:21:49:e8:f0:ae:54:
         48:26:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:36 2026 by rpki-client