This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa
File:                     3230302e35342e3132352e302f32342d3234203d3e203532333936.roa (raw, json)
Hash identifier:          vOe19JJ4v3oLPBvIRtEyxVceFmGDjluw4TSKFsF4iis=
Subject key identifier:   31:09:22:D8:66:B1:25:49:C0:41:BE:B7:33:0B:65:F7:41:CE:D5:41
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0300E26F05294B946A2682D27F68490676B7794D
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa
Signing time:             Tue 06 Jan 2026 19:26:35 +0000
ROA not before:           Tue 06 Jan 2026 19:21:35 +0000
ROA not after:            Tue 05 Jan 2027 19:26:35 +0000
asID:                     52396
IP address blocks:        200.54.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:00:e2:6f:05:29:4b:94:6a:26:82:d2:7f:68:49:06:76:b7:79:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:35 2026 GMT
            Not After : Jan  5 19:26:35 2027 GMT
        Subject: CN=310922D866B12549C041BEB7330B65F741CED541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:9d:3f:3d:f5:4d:4f:0f:73:15:90:43:ea:
                    b2:c7:b5:a2:c6:57:36:3d:04:a5:52:68:af:c4:a9:
                    c1:9d:f0:b0:63:6c:43:27:f4:73:03:25:44:7f:6c:
                    fb:fa:41:4e:cd:a6:8f:2b:e9:5a:d3:fa:0d:7b:19:
                    ec:85:46:39:18:5c:5a:51:64:89:d6:34:f7:cb:b7:
                    69:d4:68:b9:6f:6a:1b:4b:b5:be:b3:10:2a:f6:92:
                    f2:2f:fd:d2:05:b0:e3:cb:d4:ab:60:2d:d5:14:9b:
                    98:11:f4:6d:50:2d:86:d3:e5:96:ca:0a:86:5b:0a:
                    da:f6:47:72:11:0a:27:c3:2b:f7:90:4c:5b:f2:a8:
                    9f:cd:c4:fc:0a:08:8d:d8:85:9b:4e:42:c2:a8:c0:
                    08:98:ef:1c:03:7f:1f:ef:e9:61:c6:54:df:42:bf:
                    36:25:b3:69:48:67:fa:2a:1e:d4:c9:fa:96:71:e9:
                    2c:7b:35:c6:bc:77:d3:df:94:68:0c:55:3f:88:5d:
                    84:d5:5c:78:7a:a3:82:30:8d:a3:36:e9:47:46:58:
                    08:98:72:99:fa:6a:07:f9:5a:83:1c:5e:d5:b0:b4:
                    07:d2:30:7f:71:24:09:d5:c5:62:82:6d:da:0e:41:
                    21:69:05:40:66:f4:26:6d:50:b1:ac:31:14:e1:fc:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:22:D8:66:B1:25:49:C0:41:BE:B7:33:0B:65:F7:41:CE:D5:41
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132352e302f32342d3234203d3e203532333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:82:40:5c:95:68:10:88:ab:47:1e:d3:03:3f:10:12:2d:75:
         8d:dd:5c:a9:ac:c6:24:39:4e:51:7a:22:9d:10:c7:58:55:61:
         dd:25:0a:81:ff:99:92:2a:6b:02:01:50:e3:6a:7e:5c:1e:ca:
         ed:47:90:9e:d4:bb:1e:e0:82:2c:05:1d:01:70:66:38:87:db:
         dc:33:bb:b6:28:70:8c:a7:8f:4a:b1:6d:1a:cb:97:4e:b2:c7:
         66:c7:c9:51:f0:0a:d3:db:79:a2:12:e7:f8:0a:c7:a9:f6:ae:
         b0:c1:71:1a:dd:1e:ab:c5:de:ea:4e:51:51:5b:9c:b9:71:df:
         c6:f5:42:e8:d7:8f:4a:ae:66:ee:b6:f1:4e:1a:30:31:a5:22:
         3f:c7:13:a7:5b:99:38:18:de:93:92:a8:73:87:cf:70:b6:84:
         6d:3a:fc:46:e1:bf:80:bc:4f:20:0b:30:57:76:28:73:16:7d:
         20:58:b5:96:06:93:e8:ca:5d:c1:7d:f6:aa:9e:6f:c5:59:aa:
         c6:95:17:6d:33:91:5d:71:41:f6:b4:0f:ff:df:61:10:26:76:
         4d:81:94:9a:7b:ec:89:fb:18:ee:83:9f:c3:84:aa:70:93:e2:
         74:cf:9d:19:e4:d9:bf:67:f8:17:2a:c2:b1:74:ea:a0:9b:c3:
         1c:dd:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:24 2026 by rpki-client