This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa
File:                     3230302e36382e302e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          qLgmaB6SoFaoVYqNmuwX3Eu3RhnhXVGDkK/BeTGOHi4=
Subject key identifier:   84:E1:58:91:65:7A:3F:B5:C7:C4:74:1B:2F:43:AB:1A:29:73:4D:B3
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       36F09F2FB426BB15445618BA9B302E16B711E6B7
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:26:37 +0000
ROA not before:           Tue 06 Jan 2026 19:21:37 +0000
ROA not after:            Tue 05 Jan 2027 19:26:37 +0000
asID:                     16629
IP address blocks:        200.68.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f0:9f:2f:b4:26:bb:15:44:56:18:ba:9b:30:2e:16:b7:11:e6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:37 2026 GMT
            Not After : Jan  5 19:26:37 2027 GMT
        Subject: CN=84E15891657A3FB5C7C4741B2F43AB1A29734DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:06:7b:59:ec:61:e4:04:96:a9:14:5d:4b:
                    f8:70:51:cd:f3:12:c1:62:aa:38:c5:6c:6f:28:2e:
                    8a:30:76:37:98:8d:ec:61:e2:90:d1:9e:10:bb:e7:
                    01:71:2e:2a:35:62:b4:37:7d:6f:15:51:36:e3:18:
                    fc:86:db:73:5f:0b:a4:d4:a2:d4:6e:02:26:74:61:
                    a4:63:a4:a1:6c:2d:a8:70:87:3d:4c:73:51:49:d8:
                    69:c8:55:d5:4e:95:7b:90:a7:07:52:7d:f2:01:35:
                    c5:4b:de:e1:89:f4:5a:0b:41:55:51:23:7e:4e:09:
                    9d:9e:b1:2c:db:5b:f9:58:2e:2f:bb:27:a2:4e:fb:
                    32:64:29:ba:39:b2:81:90:c6:1e:fb:bb:f5:b3:5a:
                    2a:00:bb:8a:3c:0b:8c:9c:96:4e:be:32:6d:77:5f:
                    d1:0c:36:c6:8f:24:20:e4:0d:bb:ea:33:87:14:6c:
                    0d:f4:db:a1:6c:38:9e:66:18:a6:46:0b:6e:ec:8a:
                    8c:4f:07:84:df:02:07:e6:e4:8a:8a:0b:da:ff:26:
                    43:83:23:ad:05:7a:01:fe:4f:50:94:7a:bd:fe:ce:
                    37:e3:ce:dd:41:33:dd:20:f7:b3:42:40:b3:1b:24:
                    db:87:d5:08:2d:9c:93:29:e4:b4:27:98:dc:9a:5d:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:58:91:65:7A:3F:B5:C7:C4:74:1B:2F:43:AB:1A:29:73:4D:B3
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e36382e302e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:b2:7f:aa:7b:a2:81:55:f4:46:b2:15:39:7a:fd:0e:d3:
         10:15:fd:38:f1:e9:81:d7:8f:fb:88:a7:a5:d3:14:73:85:a7:
         41:4d:44:84:4c:8f:5d:e2:ab:b5:6d:20:86:20:19:da:ec:20:
         0c:ab:ba:28:90:60:2e:08:a5:43:49:65:63:73:81:12:17:b4:
         da:04:0f:2c:cf:64:24:58:93:d4:2d:7c:0c:1b:ed:33:8e:93:
         63:01:ed:6e:54:e7:e3:29:4e:8b:d3:a4:e8:36:13:c9:6f:78:
         a2:c9:82:e4:fb:e9:23:32:31:dc:d7:28:54:f4:4e:8a:6b:a6:
         69:c8:0d:31:2b:61:4e:06:ba:bb:63:da:c8:2b:13:32:31:b0:
         54:10:62:2f:6a:c5:b1:5e:13:db:bb:a6:c3:e0:54:be:2f:99:
         b2:1b:db:14:29:d3:fe:bc:db:f4:ec:89:02:e0:79:b1:70:5a:
         71:51:81:f0:ff:24:0a:b1:8f:65:4d:c9:c2:c1:08:55:f7:38:
         53:74:ed:4e:42:20:df:f1:4d:1c:be:46:6d:d6:67:1d:4f:57:
         22:ae:3b:56:75:02:9a:17:8b:1a:0b:1e:d1:1d:3c:2c:6e:cc:
         a1:79:5e:36:ea:38:5c:7f:ec:52:74:1d:f9:fe:53:4e:72:3e:
         85:55:d0:3f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUNvCfL7QmuxVEVhi6mzAuFrcR5rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNjAxMDYxOTIxMzdaFw0yNzAxMDUxOTI2MzdaMDMxMTAvBgNV
BAMTKDg0RTE1ODkxNjU3QTNGQjVDN0M0NzQxQjJGNDNBQjFBMjk3MzREQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP7gZ7Wexh5ASWqRRdS/hwUc3z
EsFiqjjFbG8oLoowdjeYjexh4pDRnhC75wFxLio1YrQ3fW8VUTbjGPyG23NfC6TU
otRuAiZ0YaRjpKFsLahwhz1Mc1FJ2GnIVdVOlXuQpwdSffIBNcVL3uGJ9FoLQVVR
I35OCZ2esSzbW/lYLi+7J6JO+zJkKbo5soGQxh77u/WzWioAu4o8C4yclk6+Mm13
X9EMNsaPJCDkDbvqM4cUbA3026FsOJ5mGKZGC27sioxPB4TfAgfm5IqKC9r/JkOD
I60FegH+T1CUer3+zjfjzt1BM90g97NCQLMbJNuH1QgtnJMp5LQnmNyaXaNdAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUhOFYkWV6P7XHxHQbL0OrGilzTbMwHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzYzODJlMzAyZTMwMmYz
MTM4MmQzMjM0MjAzZDNlMjAzMTM2MzYzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyEQAMA0GCSqG
SIb3DQEBCwUAA4IBAQB0v7J/qnuigVX0RrIVOXr9DtMQFf048emB14/7iKel0xRz
hadBTUSETI9d4qu1bSCGIBna7CAMq7ookGAuCKVDSWVjc4ESF7TaBA8sz2QkWJPU
LXwMG+0zjpNjAe1uVOfjKU6L06ToNhPJb3iiyYLk++kjMjHc1yhU9E6Ka6ZpyA0x
K2FOBrq7Y9rIKxMyMbBUEGIvasWxXhPbu6bD4FS+L5myG9sUKdP+vNv07IkC4Hmx
cFpxUYHw/yQKsY9lTcnCwQhV9zhTdO1OQiDf8U0cvkZt1mcdT1cirjtWdQKaF4sa
Cx7RHTwsbsyheV426jhcf+xSdB35/lNOcj6FVdA/
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:19 2026 by rpki-client