This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa
File:                     3230302e35342e3137362e302f32322d3234203d3e203135333131.roa (raw, json)
Hash identifier:          xZbZ2JQfOevEppLoDlhxJr+CxF0wuhJw4d4y4HpqEWs=
Subject key identifier:   B8:50:75:C9:09:21:19:3F:10:C9:C0:35:C8:A3:ED:5D:C8:27:8E:30
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       6A9A8C97E3E38044A33CD4E2BBCDCB978A33ADBE
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa
Signing time:             Tue 06 Jan 2026 19:26:42 +0000
ROA not before:           Tue 06 Jan 2026 19:21:42 +0000
ROA not after:            Tue 05 Jan 2027 19:26:42 +0000
asID:                     15311
IP address blocks:        200.54.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:8c:97:e3:e3:80:44:a3:3c:d4:e2:bb:cd:cb:97:8a:33:ad:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:42 2026 GMT
            Not After : Jan  5 19:26:42 2027 GMT
        Subject: CN=B85075C90921193F10C9C035C8A3ED5DC8278E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:eb:54:b4:b1:dd:eb:a6:fc:ef:53:95:1b:
                    73:62:f6:40:e0:06:52:3a:ac:da:97:42:fd:d4:01:
                    63:cc:35:2f:36:53:1e:7b:0e:63:50:ac:6f:cb:9c:
                    cd:65:7d:68:e7:18:10:99:a1:36:68:b3:e8:5f:97:
                    b4:9e:0a:11:7e:8e:1c:98:ff:85:f0:6c:12:ee:aa:
                    5e:76:12:74:2b:48:e6:40:0c:01:fd:19:b8:9c:52:
                    6c:59:9c:6f:0e:ac:0e:20:58:58:cd:5e:01:95:71:
                    8f:e5:4b:aa:2f:27:21:3c:2d:e7:00:39:92:ec:39:
                    64:0e:70:b5:f4:99:6b:18:83:6b:56:08:6e:09:0d:
                    65:a9:25:85:89:f1:67:b0:39:88:b7:88:9f:8d:d8:
                    a3:f5:d5:9f:78:33:63:1f:8f:b4:b5:6b:84:f5:74:
                    26:11:77:f5:57:96:de:03:26:a9:60:36:8a:10:89:
                    e6:21:04:9d:8d:c5:71:5f:bb:df:99:01:11:30:64:
                    0b:61:78:d8:c7:29:15:8c:6f:f1:40:d8:ff:9d:50:
                    6a:d5:2a:d6:3e:d4:b5:ea:fa:a1:43:f2:17:d9:33:
                    94:f3:99:85:d0:1d:fc:b2:dd:ae:39:93:02:b8:5e:
                    1a:fe:8e:57:59:56:66:2e:c6:4e:90:dd:94:04:eb:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:75:C9:09:21:19:3F:10:C9:C0:35:C8:A3:ED:5D:C8:27:8E:30
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3137362e302f32322d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:85:5e:1c:b0:70:02:d4:ff:39:01:1e:03:ae:fd:da:7b:
         b3:dd:85:76:2a:5f:fc:a6:25:9e:30:09:7d:7a:a0:95:3e:d2:
         d6:99:be:fb:90:24:0b:f3:2f:71:aa:d4:55:d5:76:41:a7:7d:
         6d:d5:3a:38:3b:aa:e4:05:0b:aa:8d:7d:ef:39:3e:96:38:75:
         c7:1c:44:f5:c1:27:0b:c1:29:91:52:9b:ac:d5:a6:bb:db:45:
         65:a5:f3:95:7a:f5:7d:55:7f:e4:ce:03:04:35:e6:bf:92:05:
         48:9c:61:ea:83:49:4a:17:5c:ac:75:7d:2f:ce:00:27:fb:90:
         d2:d7:53:0d:08:54:56:f7:dc:72:8b:83:d5:09:9a:d7:ff:dc:
         d6:8d:f5:40:f4:9c:ee:53:7b:b3:41:04:bf:11:40:b9:b4:43:
         0c:72:1a:7a:2e:25:c9:72:00:82:66:aa:69:a7:d6:29:89:d2:
         54:24:15:cc:e3:5e:6e:f8:fb:b6:67:48:82:ef:f4:b6:59:ab:
         a7:38:f6:6e:85:b0:81:83:ad:9c:bb:72:5b:8e:f3:70:38:2a:
         05:08:c5:f5:34:b8:da:3c:2f:cd:5e:3c:ce:1e:72:06:24:f0:
         5e:06:b4:72:b2:5b:60:fd:ae:33:f0:23:3f:40:a5:30:d7:1a:
         9a:53:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:18 2026 by rpki-client