This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          NrjnYMaKxysF2jRlRMUhRfEWY3J0j3BXLjGHUge2WVg=
Subject key identifier:   4F:64:A4:25:D7:76:26:DA:F9:BD:CD:8C:05:8B:B2:91:F9:FE:6D:5D
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       652863C17E78D16B0691CEFBD368514BB7584CAF
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 06 Jan 2026 19:31:11 +0000
ROA not before:           Tue 06 Jan 2026 19:26:11 +0000
ROA not after:            Tue 05 Jan 2027 19:31:11 +0000
asID:                     16509
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:63:c1:7e:78:d1:6b:06:91:ce:fb:d3:68:51:4b:b7:58:4c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  6 19:26:11 2026 GMT
            Not After : Jan  5 19:31:11 2027 GMT
        Subject: CN=4F64A425D77626DAF9BDCD8C058BB291F9FE6D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:f0:0e:8a:09:38:81:7c:ae:c1:d6:28:36:
                    80:d6:6c:f1:82:fb:d5:8c:a0:43:16:79:7c:7b:31:
                    d1:d8:76:98:45:1f:1b:9d:8b:e1:0c:2e:e7:f0:69:
                    2a:e9:a7:af:83:fd:e6:36:10:3d:dc:95:92:ba:c4:
                    cb:ed:0f:53:97:87:b0:79:c1:90:59:1c:2d:b6:61:
                    9b:ad:2e:3f:0d:42:e1:32:c1:a8:19:30:60:b6:e7:
                    e5:18:2e:5e:c1:c1:31:52:83:59:57:2f:d1:9c:48:
                    5a:be:a4:5e:2f:1d:a1:e9:43:5b:64:68:c8:e0:88:
                    b5:42:3c:c0:69:88:93:3a:07:f5:91:22:df:9d:de:
                    f2:71:1e:66:6d:63:4d:86:78:e0:50:57:2e:33:a7:
                    c6:6b:c7:1f:af:b9:76:9d:46:2f:92:3b:f0:c2:ee:
                    f4:05:a3:c8:9e:28:61:1e:a0:f8:c0:bc:e3:75:00:
                    8f:a2:6c:f7:f7:64:bc:be:46:54:33:d3:b5:45:70:
                    2d:d0:19:e0:81:02:20:01:49:3f:81:16:53:2d:ed:
                    dc:82:c7:10:46:33:f0:78:d7:da:4c:5d:cd:e9:4b:
                    16:a4:fa:b0:18:ea:c0:12:60:fe:38:fa:ba:6c:7d:
                    fe:19:1a:fb:20:8a:1d:05:58:6b:b8:5d:47:f1:80:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:A4:25:D7:76:26:DA:F9:BD:CD:8C:05:8B:B2:91:F9:FE:6D:5D
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:dc:85:1d:c8:3f:21:3a:43:ce:f0:c3:fc:26:28:00:53:
         bb:ab:5f:b0:d5:32:cd:4c:9a:83:89:99:68:fc:c0:ed:62:59:
         83:e0:d2:88:3b:03:fd:3c:fe:28:95:bc:b9:2a:dd:f2:9c:44:
         c4:54:76:49:fa:45:2b:37:c9:6c:58:5c:c3:7f:d6:f2:40:84:
         d8:71:24:de:2e:17:69:23:f3:98:81:1b:16:8e:86:87:5d:52:
         70:c9:ee:7a:ea:ec:84:1f:0c:a9:6c:83:c6:0d:d7:dc:bc:ef:
         be:89:db:4c:7e:47:3f:03:a7:1e:a5:a8:b1:33:c4:cd:1a:b2:
         78:9d:38:11:25:66:d4:12:1f:bc:53:c8:78:e5:b6:65:53:9e:
         a1:79:40:ef:a5:c5:cc:5b:0d:ee:e3:61:0c:41:23:3f:56:7c:
         6b:29:17:7d:8a:6f:e3:f7:ed:bd:cf:5a:75:da:e0:0d:a0:c9:
         84:4e:d8:72:fa:b5:f6:6b:a3:55:e3:0b:42:c2:56:45:d3:4b:
         a4:10:48:8b:fd:88:f0:cb:40:1c:23:d7:e2:53:dd:8c:45:70:
         01:0c:71:46:a5:70:4a:f8:5d:0e:0c:23:d8:0c:1b:43:b5:50:
         dc:ca:37:9b:56:b5:ee:06:7f:c4:d7:7d:06:05:cc:b3:44:6e:
         7b:2c:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:24:36 2026 by rpki-client