This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3139342e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          hkFTRawGMfpHWu9dLGmvchtXMglWcCgGOWsh1s3uzLE=
Subject key identifier:   EB:1C:97:E7:C2:AA:E1:50:28:39:A7:C9:BC:BC:C4:87:10:2F:EC:65
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       49388B50850A1814BE5770FAEBC052A89D82076B
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 06 Jan 2026 19:26:38 +0000
ROA not before:           Tue 06 Jan 2026 19:21:38 +0000
ROA not after:            Tue 05 Jan 2027 19:26:38 +0000
asID:                     15311
IP address blocks:        200.54.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:38:8b:50:85:0a:18:14:be:57:70:fa:eb:c0:52:a8:9d:82:07:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:38 2026 GMT
            Not After : Jan  5 19:26:38 2027 GMT
        Subject: CN=EB1C97E7C2AAE1502839A7C9BCBCC487102FEC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:57:af:03:d4:22:9b:29:29:50:58:a1:b5:
                    36:72:61:60:c5:d0:88:c6:a3:b5:57:e5:63:7a:47:
                    74:d6:a3:e1:76:f5:8d:d0:13:84:7c:97:2c:e4:d7:
                    58:59:05:58:a9:9b:1d:bf:13:d2:7e:c3:a6:6a:da:
                    e6:59:f6:03:fe:f9:1a:a0:83:38:c0:88:fd:41:05:
                    06:ca:52:f3:47:32:63:58:2c:a1:91:1d:f9:db:bb:
                    e7:cd:4f:9a:7e:7c:6c:25:c4:ce:b9:3a:c2:39:fd:
                    cf:c9:0a:7d:90:76:db:b6:dc:b5:3e:0b:d9:31:56:
                    82:a0:6e:31:03:78:e7:fa:0f:63:c0:9a:1c:b4:1c:
                    df:c5:b7:f3:83:46:df:04:eb:77:5e:64:98:27:22:
                    15:d2:45:3c:0a:c0:cf:60:84:0e:89:50:38:a4:94:
                    11:76:c9:60:62:1b:b7:38:c0:dd:47:92:17:dd:f9:
                    0d:3c:f8:d4:32:e1:ed:4a:0a:7f:ef:9a:20:c5:9c:
                    f3:bf:83:2b:b0:4f:a2:ac:1b:85:76:1a:bf:56:85:
                    02:bf:2f:13:e9:e2:38:56:79:9a:bb:de:50:36:2b:
                    db:52:a7:85:2f:fe:13:1f:8a:73:1d:35:eb:8b:4c:
                    66:2b:23:93:73:7d:a5:12:75:9f:ac:eb:8f:eb:43:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:97:E7:C2:AA:E1:50:28:39:A7:C9:BC:BC:C4:87:10:2F:EC:65
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139342e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:63:8b:7d:39:65:f9:74:e0:a5:85:4b:87:c2:c7:74:82:
         1b:ab:03:a9:e7:ca:1e:2c:a4:1f:22:ee:13:bd:da:e1:6b:27:
         fe:21:ac:3b:e3:44:07:ae:b4:b1:61:02:40:6e:52:eb:05:63:
         e8:2e:5d:a0:26:97:8d:63:ca:60:ae:44:cb:08:67:c9:03:47:
         e0:b3:e9:26:81:a9:10:d9:af:40:6e:3a:70:67:12:2b:5c:5b:
         4d:4d:26:d7:ab:b0:b2:b3:75:4f:56:67:83:23:8d:b3:4e:4b:
         36:98:fd:d4:86:ce:5c:e6:c0:89:4c:89:74:ee:8b:2c:d9:06:
         58:a7:c7:5d:0f:4e:6c:16:12:06:86:c5:32:3f:34:1b:c6:cf:
         17:34:d6:87:69:43:70:79:ce:cd:3a:1d:de:86:d0:fd:2e:05:
         8a:67:9b:91:56:4d:ec:57:38:97:1e:c2:d3:17:2e:6c:6f:94:
         71:33:9a:72:ab:ef:48:17:0b:36:d2:9f:2a:a5:b3:96:69:a5:
         32:ee:76:44:4b:b3:f2:fa:04:9b:93:ee:18:c3:df:66:54:24:
         a3:30:32:98:f3:9d:b2:c3:ef:a0:bd:ba:36:a6:04:8a:8e:50:
         16:b1:d1:ee:07:31:4e:b7:25:da:24:fc:ff:d2:73:64:94:8e:
         8f:08:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:20 2026 by rpki-client