This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
File:                     3230302e35342e3132382e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          uaA9PW8amEE0d/gg18R+hJrLe8wMOuMF9AyDi/bfFKw=
Subject key identifier:   B4:A2:98:E0:E5:D2:5C:F1:0C:C0:D9:D1:23:0D:F3:9E:E0:99:81:94
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       6660F8FF94960BAD90464937E04DDE389043E8B2
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:26:33 +0000
ROA not before:           Tue 06 Jan 2026 19:21:33 +0000
ROA not after:            Tue 05 Jan 2027 19:26:33 +0000
asID:                     16629
IP address blocks:        200.54.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:f8:ff:94:96:0b:ad:90:46:49:37:e0:4d:de:38:90:43:e8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:33 2026 GMT
            Not After : Jan  5 19:26:33 2027 GMT
        Subject: CN=B4A298E0E5D25CF10CC0D9D1230DF39EE0998194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:ef:07:3f:37:43:4e:d2:24:b1:0d:01:0a:
                    38:da:91:9e:74:0a:6c:9f:50:3b:4d:d7:e9:9e:46:
                    19:2b:af:25:5e:f4:4e:33:d9:5f:c9:40:ac:72:47:
                    d3:27:21:c4:79:00:a5:6a:82:1f:50:2c:ff:6c:40:
                    a1:7f:3d:e9:2c:0f:04:35:7a:f1:2c:85:4f:7b:56:
                    1a:8e:64:48:ff:0d:68:8f:02:99:3e:1c:65:c7:f6:
                    7c:d7:36:ea:97:fe:5b:c0:70:b3:20:a1:7b:55:3c:
                    31:f7:e3:ca:04:52:fa:9b:4b:d3:f4:6b:d4:5f:19:
                    84:19:91:ee:33:b1:ac:88:be:00:fd:1b:71:56:b8:
                    fc:f8:9a:2c:b3:dc:07:83:17:30:ee:69:b3:2b:3f:
                    d9:62:c3:fd:8c:54:04:cf:2f:55:6e:3d:ee:ca:53:
                    87:af:24:f5:77:f6:54:5d:53:82:4e:36:d7:fb:c4:
                    13:72:15:d4:ba:a6:5f:d6:aa:6d:60:ce:04:0a:e7:
                    1e:8b:07:01:47:6a:16:b0:b8:15:2f:1c:8d:26:8a:
                    2e:41:a4:a4:2a:20:43:78:92:62:2f:5a:6e:b8:0c:
                    11:8c:7d:5c:aa:32:d3:c5:0e:2b:4d:b5:11:a7:04:
                    0c:b6:60:be:94:2e:19:d4:0f:21:94:a2:7b:d3:84:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:98:E0:E5:D2:5C:F1:0C:C0:D9:D1:23:0D:F3:9E:E0:99:81:94
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3132382e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:12:55:2b:46:c2:20:e2:c4:f3:7a:8c:76:03:a6:7a:1d:92:
         3a:b9:ff:f5:fd:bd:fe:59:21:d4:43:ba:8e:81:2f:2e:60:b3:
         ca:82:bf:84:ce:59:4e:55:a1:df:4a:06:e5:ac:ff:15:6e:79:
         00:e0:0a:96:fe:19:5a:c3:38:be:61:42:cd:e0:87:e3:9f:e3:
         8f:3b:3a:8b:e0:8a:16:f5:4e:b1:2f:69:d7:73:f8:bf:d4:1c:
         4d:f2:69:0d:70:0c:8a:b0:95:8f:12:c8:e3:4c:4e:5a:93:84:
         20:65:19:e5:dd:2f:6e:f9:e4:8c:85:9c:9c:b4:96:52:74:10:
         7d:b9:40:fa:68:3d:b0:01:06:28:3b:5b:2f:45:20:12:dd:cc:
         75:5b:b5:97:32:15:1a:fe:29:5d:81:dc:ee:42:83:04:74:4a:
         d9:bf:ec:82:2a:30:4c:7a:0f:74:fd:f8:60:49:e4:29:31:f6:
         97:ba:33:de:5a:da:9a:31:59:9c:45:08:3e:19:35:c2:e5:05:
         82:c7:7b:97:b5:d6:6f:54:11:78:c7:25:a6:af:e6:19:e7:51:
         1e:e1:09:a3:10:45:fd:47:a0:eb:23:fd:69:96:91:4f:95:c4:
         87:78:25:22:9f:3d:90:97:e5:45:b4:0c:5a:9a:b2:e8:a5:90:
         d4:8d:3a:5c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZmD4/5SWC62QRkk34E3eOJBD6LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNjAxMDYxOTIxMzNaFw0yNzAxMDUxOTI2MzNaMDMxMTAvBgNV
BAMTKEI0QTI5OEUwRTVEMjVDRjEwQ0MwRDlEMTIzMERGMzlFRTA5OTgxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g+8HPzdDTtIksQ0BCjjakZ50
CmyfUDtN1+meRhkrryVe9E4z2V/JQKxyR9MnIcR5AKVqgh9QLP9sQKF/PeksDwQ1
evEshU97VhqOZEj/DWiPApk+HGXH9nzXNuqX/lvAcLMgoXtVPDH348oEUvqbS9P0
a9RfGYQZke4zsayIvgD9G3FWuPz4miyz3AeDFzDuabMrP9liw/2MVATPL1VuPe7K
U4evJPV39lRdU4JONtf7xBNyFdS6pl/Wqm1gzgQK5x6LBwFHahawuBUvHI0mii5B
pKQqIEN4kmIvWm64DBGMfVyqMtPFDitNtRGnBAy2YL6ULhnUDyGUonvThFyHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtKKY4OXSXPEMwNnRIw3znuCZgZQwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzUzNDJlMzEzMjM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMg2gDAN
BgkqhkiG9w0BAQsFAAOCAQEAcxJVK0bCIOLE83qMdgOmeh2SOrn/9f29/lkh1EO6
joEvLmCzyoK/hM5ZTlWh30oG5az/FW55AOAKlv4ZWsM4vmFCzeCH45/jjzs6i+CK
FvVOsS9p13P4v9QcTfJpDXAMirCVjxLI40xOWpOEIGUZ5d0vbvnkjIWcnLSWUnQQ
fblA+mg9sAEGKDtbL0UgEt3MdVu1lzIVGv4pXYHc7kKDBHRK2b/sgiowTHoPdP34
YEnkKTH2l7oz3lramjFZnEUIPhk1wuUFgsd7l7XWb1QReMclpq/mGedRHuEJoxBF
/Ueg6yP9aZaRT5XEh3glIp89kJflRbQMWpqy6KWQ1I06XA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:28 2026 by rpki-client