This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa
File:                     3230302e35342e3132302e302f32342d3234203d3e203237383830.roa (raw, json)
Hash identifier:          /kaL83zfg4o8ERApk95tYbmRiTcU1e/E37OPOJbK5OY=
Subject key identifier:   53:75:87:8D:59:03:67:51:E2:1F:98:49:C2:1D:5D:F6:A1:D8:A5:47
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       42F4FBB97B1B57AEA04208F4A5F019D46C279DF5
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa
Signing time:             Tue 06 Jan 2026 19:26:42 +0000
ROA not before:           Tue 06 Jan 2026 19:21:42 +0000
ROA not after:            Tue 05 Jan 2027 19:26:42 +0000
asID:                     27880
IP address blocks:        200.54.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f4:fb:b9:7b:1b:57:ae:a0:42:08:f4:a5:f0:19:d4:6c:27:9d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:42 2026 GMT
            Not After : Jan  5 19:26:42 2027 GMT
        Subject: CN=5375878D59036751E21F9849C21D5DF6A1D8A547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:81:ca:e4:5b:dd:c3:ce:e8:ff:9e:d8:42:
                    61:ce:15:fd:b3:02:95:e7:3f:b9:8b:7a:ed:86:32:
                    1d:f5:57:79:39:b5:09:89:84:53:73:12:6b:a1:6b:
                    6c:74:ed:a9:da:09:78:95:a8:a5:30:78:e9:de:d5:
                    f5:b8:e5:ee:24:cc:e6:34:9c:81:73:49:01:89:bd:
                    a8:71:51:d3:e0:8d:11:8b:00:11:bc:05:c1:3e:8d:
                    94:93:16:fb:ee:81:5f:8f:d0:c1:bd:c8:db:cd:0c:
                    9c:80:f8:31:ee:2b:52:f7:32:4a:61:08:25:ce:ba:
                    f1:da:d0:b4:59:cf:2b:e8:f6:10:79:17:93:2c:8a:
                    e0:27:32:0c:71:78:d9:75:74:98:c5:74:33:91:5e:
                    b6:b8:46:73:8e:73:f5:b9:67:47:dd:28:ff:46:75:
                    b6:de:b7:ef:49:2b:3c:23:bd:56:ae:73:71:1a:26:
                    4f:db:26:89:a0:12:a9:9c:f6:71:90:f3:ee:34:e6:
                    14:d5:94:9c:07:0a:46:42:56:6f:8c:03:74:2f:b9:
                    78:7a:cf:8b:26:ca:a5:5b:29:a3:02:1f:2d:1e:c6:
                    ab:ec:0a:3c:3a:49:2a:b1:04:5b:59:87:71:1b:51:
                    db:23:fa:b3:cf:e6:a9:26:97:0c:58:12:f7:52:e6:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:75:87:8D:59:03:67:51:E2:1F:98:49:C2:1D:5D:F6:A1:D8:A5:47
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132302e302f32342d3234203d3e203237383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e3:c9:bf:3a:6d:67:cd:63:50:6f:0f:5e:5f:cf:7c:d8:f4:
         fa:d3:fe:6a:fd:21:17:65:8c:57:23:80:97:51:22:8d:48:b0:
         f2:77:a6:5c:8c:27:45:fa:67:13:83:53:c7:76:b9:fd:c1:c8:
         ff:3b:81:e1:bd:2c:d8:37:6e:1a:44:61:3d:6b:2b:5f:96:d5:
         35:6f:23:7e:0b:4b:36:6f:f9:da:42:61:a6:ce:0f:93:61:8b:
         dc:ef:d8:b1:da:c6:d1:ff:1c:5c:b8:46:22:31:4f:6d:31:c7:
         53:bf:ec:96:42:8f:75:0f:60:bd:f7:23:ab:fe:69:2d:59:16:
         82:c6:d7:3d:7b:3b:e9:36:4a:1f:77:b2:b9:99:3d:07:95:80:
         94:1a:9b:27:8d:f4:0c:6a:4d:da:01:6b:c1:48:dd:a6:eb:76:
         ea:3e:10:ac:1c:49:28:5e:0f:44:3a:88:2e:63:1a:be:6b:2e:
         34:ac:83:2f:4d:4d:00:9f:b0:c5:02:7d:34:10:d6:f4:ab:27:
         42:bb:97:88:15:43:7d:dd:9c:50:45:bb:69:65:03:f9:8b:4a:
         a9:62:c7:7c:0d:25:5d:1a:e6:48:6c:b0:11:c0:16:2b:10:95:
         96:43:1f:1e:50:90:b9:fb:1c:43:e9:95:fe:21:5a:8a:5a:04:
         28:9f:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:28 2026 by rpki-client