This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa
File:                     3230302e35342e3135362e302f32322d3234203d3e203135333131.roa (raw, json)
Hash identifier:          KKfiSiCKkTSJBQ10/mzeIvC93RH5xFONEav7wIaGkhU=
Subject key identifier:   FC:B4:61:9A:22:4F:C5:5B:AE:2F:D2:1B:BA:65:CA:70:5A:ED:F6:46
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       289A3CE4348DA56F498C09044402B9F62F137FC8
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa
Signing time:             Tue 06 Jan 2026 19:26:42 +0000
ROA not before:           Tue 06 Jan 2026 19:21:42 +0000
ROA not after:            Tue 05 Jan 2027 19:26:42 +0000
asID:                     15311
IP address blocks:        200.54.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9a:3c:e4:34:8d:a5:6f:49:8c:09:04:44:02:b9:f6:2f:13:7f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:42 2026 GMT
            Not After : Jan  5 19:26:42 2027 GMT
        Subject: CN=FCB4619A224FC55BAE2FD21BBA65CA705AEDF646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:ea:fd:e2:62:25:d1:24:28:f4:72:4f:01:
                    82:ab:0f:1f:04:d4:97:77:90:38:fc:da:9f:c2:0f:
                    af:71:04:32:ea:36:fa:5f:d9:d0:f1:a3:a8:dc:67:
                    f2:96:cd:22:46:a7:84:e4:94:d8:a1:e2:0a:6f:0f:
                    02:ac:55:0e:a3:69:93:bf:dc:50:f2:be:ec:9b:dc:
                    13:81:a1:d5:76:28:f5:3e:dd:df:e2:66:f6:25:57:
                    34:c6:0e:66:df:66:0a:66:b9:ff:e2:07:4c:dc:a1:
                    04:16:7c:bc:3f:20:9c:59:86:ad:06:ee:78:5e:ac:
                    70:c2:d8:f7:31:bc:53:00:da:3c:44:be:c9:a1:8c:
                    9b:46:1a:b2:6b:33:c0:1b:83:43:de:22:4a:9b:b5:
                    0f:a9:78:92:9d:51:f0:bf:d1:7a:d2:0c:45:05:b4:
                    62:0e:83:e2:33:6c:04:1b:7d:3f:13:ef:5b:1b:a0:
                    4a:dd:1a:3d:3b:d2:55:1f:c1:65:67:0a:4b:96:ac:
                    52:96:28:1a:5c:e5:f9:da:8c:f2:35:51:a8:d1:20:
                    67:76:b6:17:86:2f:c5:53:f9:fa:a0:26:50:83:bc:
                    9c:be:ba:3c:9c:57:2f:95:3b:b1:00:0e:89:37:be:
                    a1:a8:b7:9c:c5:73:f8:69:9b:10:b9:ad:a7:38:c8:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:61:9A:22:4F:C5:5B:AE:2F:D2:1B:BA:65:CA:70:5A:ED:F6:46
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3135362e302f32322d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:c6:34:91:71:9c:76:a3:72:d4:bd:90:17:d3:40:ea:48:
         ae:b8:51:7e:17:99:aa:db:98:c3:d6:dc:a0:8b:cf:5e:fa:a3:
         b5:90:3b:b6:ea:8d:c8:8a:cf:f6:0f:be:86:9d:a1:ec:d8:50:
         78:8a:9a:fb:09:20:3a:99:97:61:d1:5b:97:27:8e:85:f8:8b:
         e7:dc:66:ab:60:4d:1a:5e:7f:f7:13:32:65:5b:f0:75:8e:85:
         bb:ee:0a:94:ed:67:b8:cb:79:49:f8:62:b1:5d:7c:36:c0:6e:
         63:fe:97:89:0b:88:49:42:6f:ae:13:44:b7:a6:20:fe:09:b1:
         3b:3a:04:15:b6:35:be:c3:50:91:46:d2:da:21:3c:9e:f6:72:
         bd:21:eb:bc:f2:40:f8:8b:9a:89:62:7c:94:80:32:de:6c:8f:
         61:1c:ed:0a:d0:66:c5:3e:80:5e:25:63:52:69:51:09:d5:a5:
         ed:5f:1e:5b:e7:05:7e:ea:bb:45:88:97:6a:af:75:93:a3:9a:
         f6:a9:10:35:1b:7d:0b:b2:a8:0e:e9:bf:41:06:10:eb:c7:27:
         af:1f:7e:9d:7f:52:d6:1c:63:6d:c6:ea:09:5d:d0:8e:b5:e4:
         d3:17:07:9c:0f:0e:39:1b:60:fd:22:76:53:91:06:ed:26:6f:
         53:04:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:20 2026 by rpki-client