This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3233322e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          UkO1bcNMQSw/RGeu9RPowJDNAGRAAFbima/YAXDxHCE=
Subject key identifier:   7F:8D:28:55:16:B1:FE:1A:85:5C:C8:64:44:DC:FA:2D:A0:D7:AF:80
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       51F7572EA5E010D719547D2FD5757A20DE7A23E3
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:23 +0000
ROA not before:           Tue 06 Jan 2026 19:04:23 +0000
ROA not after:            Tue 05 Jan 2027 19:09:23 +0000
asID:                     10269
IP address blocks:        200.32.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:57:2e:a5:e0:10:d7:19:54:7d:2f:d5:75:7a:20:de:7a:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:23 2026 GMT
            Not After : Jan  5 19:09:23 2027 GMT
        Subject: CN=7F8D285516B1FE1A855CC86444DCFA2DA0D7AF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:68:e4:47:65:bb:f6:90:ac:e9:24:56:b6:
                    51:e5:5d:8b:17:2a:61:e3:4b:46:d7:49:d7:6e:69:
                    47:88:9e:6b:42:83:7a:b8:66:0e:c3:09:1c:90:39:
                    70:00:aa:64:5c:e0:d7:d2:3d:d5:35:4f:93:2a:10:
                    e6:ec:41:67:d4:e3:6e:d8:7c:09:a6:cb:6e:6e:d3:
                    ca:bc:57:87:2b:98:de:3a:1f:3d:47:70:69:1c:03:
                    51:e9:cc:ed:42:36:0f:6e:2c:64:0f:7f:b2:ec:ec:
                    79:d8:26:2d:31:82:e1:a4:53:ad:a9:36:84:79:af:
                    ce:5f:bb:de:50:8b:de:88:87:a1:c0:3a:7e:66:1a:
                    1a:57:11:b8:ed:f5:92:e8:74:09:55:e4:bf:35:f6:
                    e5:dc:68:e8:be:fc:b1:d1:f7:e0:37:a1:71:1c:53:
                    27:12:de:ad:4f:e8:99:5f:b8:40:bf:29:16:3d:d2:
                    65:43:8c:b3:f3:2c:e2:b6:fa:ce:98:ee:41:48:5f:
                    c2:81:53:02:eb:49:a0:66:01:26:b1:e5:2c:61:0b:
                    36:83:41:bb:b0:ec:47:2b:88:27:3e:f3:5f:59:a8:
                    56:7b:70:10:f0:5e:81:87:d3:be:c9:69:10:5f:9e:
                    b1:b7:da:d9:2a:99:34:9a:bc:95:9f:2c:1c:fa:aa:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:28:55:16:B1:FE:1A:85:5C:C8:64:44:DC:FA:2D:A0:D7:AF:80
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3233322e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:27:50:80:a9:d8:b7:47:dd:b1:d6:ae:32:5e:e5:9a:34:
         43:50:dc:ce:fd:0d:26:9a:36:dd:5c:85:36:ca:76:f1:22:95:
         8b:e2:1e:cc:32:31:90:3a:33:c7:64:2f:fb:b2:98:79:48:fb:
         b1:d3:8e:5c:b1:c7:4e:8a:43:de:1d:3a:8a:49:01:8d:77:1c:
         b0:8d:50:88:fe:2c:2e:04:5c:21:3a:68:4c:59:0a:40:36:80:
         01:62:49:f2:e9:d9:9e:c4:d1:80:69:10:cc:28:52:28:b9:b1:
         f5:f6:38:59:e8:f6:c3:04:15:14:bd:d0:61:a9:82:25:8e:50:
         be:80:c5:6f:2c:70:f4:bb:fb:c9:e2:24:b2:aa:63:88:e1:1d:
         15:23:f4:bd:4e:71:0e:6b:ba:c0:ac:78:14:86:47:3b:8c:f0:
         89:99:00:7c:26:f6:b1:4b:16:03:c8:cc:23:63:81:bb:9c:fc:
         ef:b1:03:de:38:26:dd:09:31:7a:c3:c2:8b:4c:3c:c6:f1:2d:
         36:1a:d2:0e:e0:cd:21:c5:ce:e3:d2:b5:b6:1d:6d:4f:27:a6:
         69:d0:81:f5:9d:bb:a6:c9:26:6d:0a:5b:38:0d:45:be:f8:17:
         f2:7f:e9:dd:ef:ee:bb:dc:be:60:ec:64:75:d6:f9:b6:a5:d6:
         9c:d2:03:bd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUfdXLqXgENcZVH0v1XV6IN56I+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNjAxMDYxOTA0MjNaFw0yNzAxMDUxOTA5MjNaMDMxMTAvBgNV
BAMTKDdGOEQyODU1MTZCMUZFMUE4NTVDQzg2NDQ0RENGQTJEQTBEN0FGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvGjkR2W79pCs6SRWtlHlXYsX
KmHjS0bXSdduaUeInmtCg3q4Zg7DCRyQOXAAqmRc4NfSPdU1T5MqEObsQWfU427Y
fAmmy25u08q8V4crmN46Hz1HcGkcA1HpzO1CNg9uLGQPf7Ls7HnYJi0xguGkU62p
NoR5r85fu95Qi96Ih6HAOn5mGhpXEbjt9ZLodAlV5L819uXcaOi+/LHR9+A3oXEc
UycS3q1P6JlfuEC/KRY90mVDjLPzLOK2+s6Y7kFIX8KBUwLrSaBmASax5SxhCzaD
Qbuw7EcriCc+819ZqFZ7cBDwXoGH077JaRBfnrG32tkqmTSavJWfLBz6qoubAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUf40oVRax/hqFXMhkRNz6LaDXr4AwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzMzMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgg6DAN
BgkqhkiG9w0BAQsFAAOCAQEAfawnUICp2LdH3bHWrjJe5Zo0Q1Dczv0NJpo23VyF
Nsp28SKVi+IezDIxkDozx2Qv+7KYeUj7sdOOXLHHTopD3h06ikkBjXccsI1QiP4s
LgRcITpoTFkKQDaAAWJJ8unZnsTRgGkQzChSKLmx9fY4Wej2wwQVFL3QYamCJY5Q
voDFbyxw9Lv7yeIksqpjiOEdFSP0vU5xDmu6wKx4FIZHO4zwiZkAfCb2sUsWA8jM
I2OBu5z877ED3jgm3QkxesPCi0w8xvEtNhrSDuDNIcXO49K1th1tTyemadCB9Z27
pskmbQpbOA1FvvgX8n/p3e/uu9y+YOxkddb5tqXWnNIDvQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:17 2026 by rpki-client