This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3232312e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          Pph7OWHzxeXXWhpoQP8OpIuGO+vhcUG2P9mbcLmZ3kg=
Subject key identifier:   B6:D5:AC:A5:AD:51:8E:D0:55:A4:AC:1F:E9:1E:21:6D:A0:92:78:3F
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       2FCCA3F11F2C792ACE91D34C35E9DF035A6740A9
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:17 +0000
ROA not before:           Tue 06 Jan 2026 19:04:17 +0000
ROA not after:            Tue 05 Jan 2027 19:09:17 +0000
asID:                     10269
IP address blocks:        200.32.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cc:a3:f1:1f:2c:79:2a:ce:91:d3:4c:35:e9:df:03:5a:67:40:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:17 2026 GMT
            Not After : Jan  5 19:09:17 2027 GMT
        Subject: CN=B6D5ACA5AD518ED055A4AC1FE91E216DA092783F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:b8:96:66:62:fb:a2:d8:64:e0:13:97:07:
                    b6:eb:51:36:f3:69:24:94:a8:a1:68:ea:dd:87:79:
                    02:51:d1:7e:f0:06:e8:1c:51:f9:93:02:39:08:91:
                    db:1f:c1:c5:9c:ef:56:6c:20:45:a5:8e:1e:04:5e:
                    70:0a:12:b0:58:b2:81:de:e8:46:9e:f1:70:0e:b0:
                    55:dc:c8:58:06:28:90:c9:75:fd:e7:73:fd:50:9a:
                    1d:82:9d:40:f8:b3:89:d3:28:10:c8:b6:21:7e:4a:
                    46:49:db:eb:bd:57:49:65:c7:7e:b9:7b:b9:76:33:
                    cd:ad:eb:7b:4b:e5:e0:f7:2a:b1:bf:03:23:67:dd:
                    d0:56:08:2f:fe:08:ff:df:b9:9c:07:5f:37:4a:e1:
                    a3:58:45:c1:21:d0:cf:3c:30:40:d7:7d:3d:be:94:
                    8f:cf:7d:39:ee:31:e9:ec:8a:d7:da:b4:b4:44:85:
                    76:3e:a1:13:b8:49:31:15:5f:ed:08:56:68:30:9d:
                    da:25:99:22:a1:59:03:67:93:76:ea:66:bf:e4:81:
                    3a:df:3a:1b:12:f0:c0:56:b8:bd:44:4d:2d:8c:e8:
                    85:7c:8f:65:35:d7:6f:35:4b:ec:8d:c6:6f:9d:ba:
                    05:ce:04:73:66:b7:19:92:7a:e5:f7:f3:bf:eb:ef:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:AC:A5:AD:51:8E:D0:55:A4:AC:1F:E9:1E:21:6D:A0:92:78:3F
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232312e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:7c:23:3f:2b:84:e0:bd:f8:a6:49:0f:ce:95:28:84:12:
         af:c1:55:42:00:d8:48:c7:39:50:8d:1b:64:95:99:49:56:b2:
         87:62:ee:a9:47:5c:2c:86:48:bd:e1:e3:b7:c6:1c:e6:14:5d:
         6a:3d:49:00:e6:a6:64:39:c8:cd:06:f1:93:35:b5:8d:97:3f:
         2a:8d:9b:7a:8b:d0:b8:97:2a:d1:b1:af:f8:0a:9c:cf:40:05:
         b1:bf:15:d3:e8:93:c7:52:e8:c7:bd:72:a8:03:dc:fc:00:ed:
         3f:a2:96:ba:3b:bc:06:a4:47:04:2a:2c:c8:cd:c4:54:fc:a5:
         0a:92:12:f5:51:71:1d:7c:c4:04:7c:00:3b:f6:50:c8:43:c1:
         d7:43:69:4c:9e:01:b2:11:75:eb:56:5d:0f:43:bd:d2:a7:4e:
         5c:63:4f:13:01:23:80:8e:6a:a6:49:1a:aa:17:11:50:fe:fb:
         71:53:31:e2:5d:6b:c3:0e:36:62:15:da:76:b3:f0:45:93:dd:
         5e:6c:27:e7:aa:cc:25:0a:47:80:2c:e1:01:69:b0:6b:bb:a3:
         95:10:4a:a1:2c:16:ad:d6:54:90:16:cb:97:23:a5:ce:d5:31:
         67:42:b2:77:94:20:a7:89:91:39:a3:0c:e5:d6:de:5c:4b:d1:
         d6:58:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:09 2026 by rpki-client