This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232322e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3232322e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          0UukZiaWSWC45eHY/jjZB13+HJ61NDzIcTOLD2f2dD4=
Subject key identifier:   7D:2A:B3:3F:47:70:66:B7:2D:44:E3:8A:DF:05:DB:09:E9:1E:66:F8
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       337951797A0B00552A91D0E6958A289EBA2BBAE6
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232322e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:26 +0000
ROA not before:           Tue 06 Jan 2026 19:04:26 +0000
ROA not after:            Tue 05 Jan 2027 19:09:26 +0000
asID:                     10269
IP address blocks:        200.32.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:79:51:79:7a:0b:00:55:2a:91:d0:e6:95:8a:28:9e:ba:2b:ba:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:26 2026 GMT
            Not After : Jan  5 19:09:26 2027 GMT
        Subject: CN=7D2AB33F477066B72D44E38ADF05DB09E91E66F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:77:86:0e:39:0d:af:1d:c1:5c:d3:53:a8:
                    4c:4d:04:57:d8:77:fa:87:5a:95:4d:b0:2d:5c:83:
                    01:07:36:62:08:92:06:8c:0e:32:ed:74:90:06:de:
                    0c:3a:9b:8b:04:03:b7:05:29:ca:94:39:5a:17:eb:
                    38:83:2e:37:ee:b5:99:a6:0e:14:63:67:00:17:f3:
                    fd:01:e2:8f:d8:b4:cd:ad:b4:ef:6c:64:e3:1b:28:
                    12:69:1f:66:49:02:8f:89:49:97:05:3a:66:80:c7:
                    de:38:aa:a5:9c:3a:57:d9:2f:ff:d5:64:61:9e:5f:
                    01:8c:50:29:b3:d8:b8:f1:d9:50:92:7f:3c:d2:ea:
                    29:4e:4a:04:de:96:26:e7:fc:29:fa:44:4b:62:d2:
                    8b:ae:a8:49:93:22:36:69:98:8c:40:63:45:af:96:
                    e7:8b:d2:a7:99:0c:93:b4:8d:90:fe:be:a3:9f:c6:
                    ae:05:2d:50:6a:99:d9:1d:da:be:08:d8:cc:87:1f:
                    81:3e:36:0e:d8:b8:a0:6e:75:7d:92:84:bf:9c:93:
                    9d:e9:80:5e:c2:d9:4f:8c:5d:91:55:2f:e6:e1:3c:
                    34:d9:47:ce:eb:65:53:02:85:91:2f:ec:ce:13:eb:
                    dc:7d:cb:25:03:73:d1:9f:08:72:a3:fc:d1:e6:32:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2A:B3:3F:47:70:66:B7:2D:44:E3:8A:DF:05:DB:09:E9:1E:66:F8
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232322e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:51:d9:17:74:20:7c:e7:09:7d:18:8e:95:81:59:34:07:
         b8:8b:f2:d9:18:8a:1a:a0:b2:1e:05:ac:46:33:45:1c:6c:7a:
         89:a5:79:c2:29:50:c0:4b:47:39:ed:0f:b1:77:44:63:1d:85:
         6b:40:18:2f:27:f9:68:dd:c0:51:71:8f:2e:d1:35:95:85:00:
         c0:ae:69:45:a1:e4:b4:c2:e5:ce:5f:f7:dc:57:33:26:c5:1e:
         b6:c5:58:33:04:3c:63:11:b8:e5:fa:a5:9f:ef:4e:fe:29:3b:
         3f:ba:27:aa:28:ee:5f:12:d8:d8:18:b1:33:a5:20:ea:e9:03:
         7e:93:c8:75:b9:0a:db:09:e3:f8:39:06:79:96:f5:f5:a2:ab:
         c4:64:57:95:19:3e:5c:2c:94:cf:13:7c:76:23:1d:e2:86:d8:
         dc:ed:78:10:dc:6f:9c:db:ed:b5:64:e5:4a:2d:9f:3c:4f:af:
         33:3e:3e:3c:80:8d:c8:49:32:99:bb:a1:97:d5:ac:79:6d:4b:
         6c:c2:3e:4d:5c:46:92:90:2a:bf:7d:7a:0a:f2:3c:90:41:5b:
         3c:18:fa:21:a8:50:d9:1f:85:fc:85:e6:83:51:de:55:b6:58:
         b1:07:3f:b2:54:a5:6f:7f:70:da:25:85:32:5e:71:63:11:40:
         b8:54:7f:85
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM3lReXoLAFUqkdDmlYoonroruuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNjAxMDYxOTA0MjZaFw0yNzAxMDUxOTA5MjZaMDMxMTAvBgNV
BAMTKDdEMkFCMzNGNDc3MDY2QjcyRDQ0RTM4QURGMDVEQjA5RTkxRTY2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9XeGDjkNrx3BXNNTqExNBFfY
d/qHWpVNsC1cgwEHNmIIkgaMDjLtdJAG3gw6m4sEA7cFKcqUOVoX6ziDLjfutZmm
DhRjZwAX8/0B4o/YtM2ttO9sZOMbKBJpH2ZJAo+JSZcFOmaAx944qqWcOlfZL//V
ZGGeXwGMUCmz2Ljx2VCSfzzS6ilOSgTelibn/Cn6REti0ouuqEmTIjZpmIxAY0Wv
lueL0qeZDJO0jZD+vqOfxq4FLVBqmdkd2r4I2MyHH4E+Ng7YuKBudX2ShL+ck53p
gF7C2U+MXZFVL+bhPDTZR87rZVMChZEv7M4T69x9yyUDc9GfCHKj/NHmMkP9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfSqzP0dwZrctROOK3wXbCekeZvgwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzMjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgg3jAN
BgkqhkiG9w0BAQsFAAOCAQEAjI9R2Rd0IHznCX0YjpWBWTQHuIvy2RiKGqCyHgWs
RjNFHGx6iaV5wilQwEtHOe0PsXdEYx2Fa0AYLyf5aN3AUXGPLtE1lYUAwK5pRaHk
tMLlzl/33FczJsUetsVYMwQ8YxG45fqln+9O/ik7P7onqijuXxLY2BixM6Ug6ukD
fpPIdbkK2wnj+DkGeZb19aKrxGRXlRk+XCyUzxN8diMd4obY3O14ENxvnNvttWTl
Si2fPE+vMz4+PICNyEkymbuhl9WseW1LbMI+TVxGkpAqv316CvI8kEFbPBj6IahQ
2R+F/IXmg1HeVbZYsQc/slSlb39w2iWFMl5xYxFAuFR/hQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:03 2026 by rpki-client