This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139362e302f32332d3234203d3e203135333131.roa
File:                     3230302e35342e3139362e302f32332d3234203d3e203135333131.roa (raw, json)
Hash identifier:          vwqcJWwTJ5wZfmtwhEQf6DwYGVOsXQpRAd0765ZPIDY=
Subject key identifier:   9D:0E:FC:5D:31:B4:02:AE:21:C0:9E:AC:20:B1:85:D3:89:95:19:65
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       36DD198C840E1A86A5D5C8A8B612C11AC33E0B09
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139362e302f32332d3234203d3e203135333131.roa
Signing time:             Tue 06 Jan 2026 19:26:40 +0000
ROA not before:           Tue 06 Jan 2026 19:21:40 +0000
ROA not after:            Tue 05 Jan 2027 19:26:40 +0000
asID:                     15311
IP address blocks:        200.54.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:dd:19:8c:84:0e:1a:86:a5:d5:c8:a8:b6:12:c1:1a:c3:3e:0b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:40 2026 GMT
            Not After : Jan  5 19:26:40 2027 GMT
        Subject: CN=9D0EFC5D31B402AE21C09EAC20B185D389951965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:9f:ab:3b:6d:fe:d0:88:0b:c1:6e:3e:35:
                    96:49:be:8c:11:2c:8a:11:10:56:4e:6b:82:22:9e:
                    a9:41:7e:6f:81:37:7a:a8:23:c4:27:ba:75:42:20:
                    c3:cf:3b:7d:ae:fd:a6:30:b7:5c:e1:ed:d2:fc:d1:
                    3c:67:f9:46:b7:b5:f5:46:b2:e1:e7:61:a3:c5:94:
                    03:82:75:4c:61:ae:ff:fb:52:69:04:c0:35:0d:0c:
                    ac:92:e0:81:bc:bb:bf:f6:ed:3a:0e:20:d8:30:38:
                    6b:85:0a:46:b7:56:9b:20:7a:2a:4b:97:1d:79:5c:
                    12:7c:2e:bf:df:87:ba:20:ec:45:a4:63:e1:81:b5:
                    dd:b2:e9:20:80:01:6a:14:87:fb:2a:8c:04:60:90:
                    44:4d:1d:27:48:1b:02:fb:ae:e2:66:1f:cf:d1:57:
                    11:e8:d1:14:be:77:35:8d:fa:17:b3:0d:86:89:c0:
                    3c:e3:a9:e8:6a:ba:62:0f:19:98:9b:22:a6:c5:97:
                    b8:25:fa:25:32:95:a7:26:ea:be:b5:b4:7a:bc:90:
                    b2:9e:4c:07:13:31:f4:d4:f7:65:7b:05:be:36:4e:
                    84:15:11:bb:8f:96:e8:02:b9:81:c0:9f:40:a1:cc:
                    7f:c4:02:73:5b:87:a3:a8:d0:c1:39:37:50:d9:ca:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:FC:5D:31:B4:02:AE:21:C0:9E:AC:20:B1:85:D3:89:95:19:65
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139362e302f32332d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:6a:c6:d3:a0:99:6b:48:55:e6:c9:78:d0:31:73:cd:3d:
         d1:b4:27:a2:97:ad:76:cc:38:01:7f:5e:97:03:df:eb:ee:80:
         16:ba:a2:9b:75:b5:45:0c:95:64:f4:81:06:a8:e7:96:da:4b:
         cf:d8:5c:0f:5f:0c:72:c5:e7:d2:61:95:a1:00:e9:f8:53:b0:
         46:43:1c:67:d5:99:43:7d:e8:c8:f5:1c:79:12:9a:9e:6d:80:
         7e:f9:b2:e0:13:bd:8b:08:19:bb:c0:f7:e9:e4:9a:7a:16:41:
         ef:40:e3:e9:e1:d9:12:9f:fe:e3:e5:41:e4:e8:91:15:5d:34:
         59:d9:f3:fb:58:29:6f:a1:c0:0a:00:c3:1d:c7:69:4a:d5:1f:
         69:49:61:7d:95:ad:ed:92:84:3c:82:78:f4:7a:51:97:19:87:
         58:dd:1a:c8:05:2c:2d:4e:cb:d9:10:28:2d:87:35:3b:3c:a1:
         46:d1:4b:be:e3:61:33:31:f5:38:be:ba:44:bc:41:a8:09:b7:
         c5:5e:02:af:df:d8:13:08:f6:7a:10:23:53:96:cc:f1:4e:6e:
         8c:ac:81:d9:d6:28:6a:a1:bf:41:0e:ae:0b:89:7e:6f:6e:2d:
         26:62:e8:39:81:80:ae:df:63:a6:5a:2a:2f:f7:78:a2:3e:47:
         0b:be:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:21 2026 by rpki-client