This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa
File:                     3230302e33322e3139322e302f31382d3138203d3e203130323639.roa (raw, json)
Hash identifier:          yNxgsOnwUXf5qbWSols8yt7qMWSrGDwuRiLY0eFaTL4=
Subject key identifier:   1C:7B:59:9D:CC:5F:20:A1:46:46:A4:45:39:C0:28:B5:22:B0:9B:BA
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       66966645AC2B17E37DF08B95C0DD9378275D70D1
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:27 +0000
ROA not before:           Tue 06 Jan 2026 19:04:27 +0000
ROA not after:            Tue 05 Jan 2027 19:09:27 +0000
asID:                     10269
IP address blocks:        200.32.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:66:45:ac:2b:17:e3:7d:f0:8b:95:c0:dd:93:78:27:5d:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:27 2026 GMT
            Not After : Jan  5 19:09:27 2027 GMT
        Subject: CN=1C7B599DCC5F20A14646A44539C028B522B09BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:8e:64:67:0b:5a:48:b7:0b:ea:4f:a5:af:
                    83:da:da:aa:b9:44:8d:4f:10:1b:71:73:f3:81:37:
                    14:07:16:21:d7:14:a3:2d:63:05:bd:98:81:57:ca:
                    0e:ca:8f:65:a9:f7:fc:da:25:47:d5:03:cf:b1:a6:
                    00:42:43:59:05:f7:40:87:32:2a:7e:c2:95:0e:5a:
                    f8:90:58:40:48:5f:c8:e2:2e:79:80:1e:ba:a3:75:
                    59:f2:83:98:a5:f7:38:4b:51:68:2d:45:00:b5:f2:
                    9e:d0:8a:23:48:ef:3f:0c:71:58:51:f8:12:bc:06:
                    a6:5d:2d:8c:cc:9a:4c:12:0d:28:83:c0:fc:db:83:
                    c5:d1:65:62:10:44:17:6b:95:5c:3a:e5:0b:49:b0:
                    a5:dd:28:19:1c:ce:30:61:b5:3a:13:32:b4:fa:d8:
                    4b:8d:5b:1e:c1:35:33:5d:94:45:e3:95:d1:8a:26:
                    0f:de:15:c9:08:99:79:93:31:e8:d0:d3:af:59:1b:
                    85:8c:0e:c3:f4:09:b4:90:22:af:4e:6b:56:80:a7:
                    da:2d:34:a0:36:7d:de:ca:29:22:93:b8:15:e1:d7:
                    84:d3:5c:11:e6:2a:94:fd:c5:73:b1:aa:97:2c:3d:
                    42:d5:b6:54:f9:72:f6:7d:e1:2e:48:2a:21:dc:05:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7B:59:9D:CC:5F:20:A1:46:46:A4:45:39:C0:28:B5:22:B0:9B:BA
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31382d3138203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:ec:d0:3c:b3:23:5a:16:a0:6e:cb:b9:d3:aa:34:4b:87:
         40:46:73:64:53:7e:63:e7:ef:d4:21:20:2f:f6:1b:c1:ce:79:
         0d:fc:cd:09:a7:a6:5e:d5:8e:84:24:38:83:97:86:42:3e:81:
         77:c7:eb:bd:b0:4e:8a:9e:5d:29:01:0f:11:b7:c2:5c:f6:9c:
         3c:a3:a0:c6:23:e1:9b:2b:eb:00:6a:57:ec:cb:99:e6:05:51:
         5f:f7:bb:68:63:58:02:c7:f4:3c:63:54:54:f8:f9:72:f0:ff:
         71:b0:0d:68:d5:f0:e9:a1:3a:08:d3:77:6a:0b:70:a9:45:2e:
         73:85:ed:f7:2e:22:b3:49:cd:ea:9e:76:40:68:2a:d2:b3:16:
         51:24:1e:36:f9:62:53:32:26:31:42:dd:79:b1:cd:a2:0b:5b:
         ca:67:51:f8:7f:1a:c3:9d:89:63:54:b0:b0:2e:69:f1:a4:9c:
         7c:f3:bf:4b:c2:b9:d2:4c:31:47:49:a8:94:07:de:11:d1:69:
         57:b8:b1:38:28:f2:5e:f7:29:76:3e:52:82:6b:7f:81:85:66:
         3c:de:11:70:e6:18:70:6f:2a:15:54:33:0f:9a:aa:61:b9:89:
         e7:89:21:b8:d3:d7:4d:4e:cd:cf:f1:f3:d9:75:1f:81:85:a8:
         25:ce:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:14 2026 by rpki-client