This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34392e302f32342d3234203d3e203237373235.roa
File:                     3230302e31342e34392e302f32342d3234203d3e203237373235.roa (raw, json)
Hash identifier:          io8kd8LudjvKjDC4wVxK8Ia8m6S3tuW2CvOQOeTQnTc=
Subject key identifier:   EE:25:AB:6D:53:F4:ED:D5:0B:00:11:80:1C:C7:F2:8D:9D:2D:E8:A0
Certificate issuer:       /CN=0853D584282A848F37AB7DF143D8977A037C0B75
Certificate serial:       5C95CA2462D477791CDF89A0A1C1E3EF70CDCA47
Authority key identifier: 08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34392e302f32342d3234203d3e203237373235.roa
Signing time:             Tue 06 Jan 2026 19:01:36 +0000
ROA not before:           Tue 06 Jan 2026 18:56:36 +0000
ROA not after:            Tue 05 Jan 2027 19:01:36 +0000
asID:                     27725
IP address blocks:        200.14.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:95:ca:24:62:d4:77:79:1c:df:89:a0:a1:c1:e3:ef:70:cd:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0853D584282A848F37AB7DF143D8977A037C0B75
        Validity
            Not Before: Jan  6 18:56:36 2026 GMT
            Not After : Jan  5 19:01:36 2027 GMT
        Subject: CN=EE25AB6D53F4EDD50B0011801CC7F28D9D2DE8A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:91:cb:06:c3:e7:d0:9e:09:1b:c5:87:f3:
                    47:a5:8e:1f:0f:d6:fa:a6:6b:a0:51:37:8a:e5:81:
                    6a:55:88:92:3e:7a:53:67:76:bf:c2:48:67:71:4b:
                    94:a9:4f:44:12:ff:98:bd:67:06:cc:09:c3:aa:f2:
                    89:9c:50:22:b9:79:13:f3:7e:84:08:c4:8c:da:81:
                    2d:52:3c:6a:21:29:f3:9f:a6:08:bb:8b:ab:a2:92:
                    5f:50:a1:fc:aa:f9:81:89:00:6f:bb:23:61:ee:ae:
                    e7:c1:e1:45:de:a6:c7:d8:f7:ef:9c:1d:6c:82:8f:
                    6b:d5:52:8c:2b:38:6a:0c:d4:aa:b7:5e:b8:45:16:
                    bd:98:c9:39:aa:0d:ac:de:b8:04:ac:f2:c1:bd:b2:
                    6a:90:4f:79:c5:ba:68:c8:1f:23:db:b6:da:80:0b:
                    4b:9d:2c:87:c4:eb:d3:b4:68:a6:f1:0d:8c:2c:52:
                    46:df:61:67:33:7b:89:ab:06:aa:85:0e:0e:21:1d:
                    5a:94:5b:10:77:3d:1f:4a:d1:dc:c9:1d:73:62:13:
                    fd:0a:68:6e:a0:dc:a7:60:df:da:63:c4:e7:b1:78:
                    41:1a:10:6e:f4:03:e1:cd:6e:7b:e8:0c:5b:d6:21:
                    28:42:82:d8:bb:8c:62:f1:84:bf:cf:6f:2b:68:f9:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:25:AB:6D:53:F4:ED:D5:0B:00:11:80:1C:C7:F2:8D:9D:2D:E8:A0
            X509v3 Authority Key Identifier:
                keyid:08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e34392e302f32342d3234203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:73:53:55:91:a3:ef:8c:4c:35:4d:2a:e7:3b:4f:34:47:42:
         d1:6c:90:c2:75:7b:4b:52:97:22:df:e7:a8:df:b0:42:84:ea:
         da:73:5f:74:bc:d3:5f:84:87:71:cf:43:2c:71:bc:ac:56:99:
         61:1d:aa:b8:3c:1c:a1:06:67:b2:e7:b7:b3:17:7b:fe:fc:7f:
         da:c6:4f:88:d5:af:2d:ab:fb:93:5f:b0:07:84:82:ea:26:b9:
         f8:ac:1c:bf:a8:8c:74:e2:5a:cb:03:d3:e9:2a:7a:1d:bb:e3:
         a7:fe:94:c7:2d:7d:e2:c2:64:3e:10:6d:a6:39:d6:a0:0b:41:
         68:e0:f4:cb:f0:79:86:79:6c:3f:8b:73:be:dd:11:db:dc:ec:
         68:6e:a3:ae:4a:7c:0a:5b:ac:20:e2:c7:52:00:5c:a6:95:d9:
         31:58:14:36:ef:0e:18:1b:ba:0c:dd:42:72:aa:0b:8b:4a:89:
         cb:b7:ba:d8:33:c2:59:3f:b7:f3:5f:52:4b:48:48:cf:7b:c9:
         4b:ab:72:3d:d5:66:30:62:a6:d8:e3:59:e9:2b:4c:9a:4b:b9:
         73:36:9b:aa:19:6d:01:c0:72:6b:db:e8:f7:7b:6b:85:3e:a5:
         17:71:1e:ac:79:c7:10:32:9b:f7:91:58:d8:31:e1:76:88:5d:
         ca:f8:f2:42
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXJXKJGLUd3kc34mgocHj73DNykcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1M0Q1ODQyODJBODQ4RjM3QUI3REYxNDNEODk3N0Ew
MzdDMEI3NTAeFw0yNjAxMDYxODU2MzZaFw0yNzAxMDUxOTAxMzZaMDMxMTAvBgNV
BAMTKEVFMjVBQjZENTNGNEVERDUwQjAwMTE4MDFDQzdGMjhEOUQyREU4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7JHLBsPn0J4JG8WH80eljh8P
1vqma6BRN4rlgWpViJI+elNndr/CSGdxS5SpT0QS/5i9ZwbMCcOq8omcUCK5eRPz
foQIxIzagS1SPGohKfOfpgi7i6uikl9Qofyq+YGJAG+7I2HurufB4UXepsfY9++c
HWyCj2vVUowrOGoM1Kq3XrhFFr2YyTmqDazeuASs8sG9smqQT3nFumjIHyPbttqA
C0udLIfE69O0aKbxDYwsUkbfYWcze4mrBqqFDg4hHVqUWxB3PR9K0dzJHXNiE/0K
aG6g3Kdg39pjxOexeEEaEG70A+HNbnvoDFvWIShCgti7jGLxhL/Pbyto+R8bAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU7iWrbVP07dULABGAHMfyjZ0t6KAwHwYDVR0j
BBgwFoAUCFPVhCgqhI83q33xQ9iXegN8C3UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTc3MTA1Rjc5RUEwMzVERERCODJGMTdGNENEMzIyRkM5
NjQzMENCMzdCMUUwOTA5Nzk1QjQzMzg4NzRGNjM0LzAvMDg1M0Q1ODQyODJBODQ4
RjM3QUI3REYxNDNEODk3N0EwMzdDMEI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODUzRDU4NDI4MkE4NDhGMzdB
QjdERjE0M0Q4OTc3QTAzN0MwQjc1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3NzEwNUY3OUVBMDM1REREQjgyRjE3RjRDRDMyMkZDOTY0MzBDQjM3
QjFFMDkwOTc5NUI0MzM4ODc0RjYzNC8wLzMyMzAzMDJlMzEzNDJlMzQzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzMyMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDjEwDQYJ
KoZIhvcNAQELBQADggEBAJBzU1WRo++MTDVNKuc7TzRHQtFskMJ1e0tSlyLf56jf
sEKE6tpzX3S801+Eh3HPQyxxvKxWmWEdqrg8HKEGZ7Lnt7MXe/78f9rGT4jVry2r
+5NfsAeEguomufisHL+ojHTiWssD0+kqeh2746f+lMctfeLCZD4QbaY51qALQWjg
9MvweYZ5bD+Lc77dEdvc7Ghuo65KfApbrCDix1IAXKaV2TFYFDbvDhgbugzdQnKq
C4tKicu3utgzwlk/t/NfUktISM97yUurcj3VZjBiptjjWekrTJpLuXM2m6oZbQHA
cmvb6Pd7a4U+pRdxHqx5xxAym/eRWNgx4XaIXcr48kI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:55 2026 by rpki-client