This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          xKzJd64snEYTAH5wWV+OiGBYK7Dgf5mzrQTV4x9CfF4=
Subject key identifier:   CF:6E:C4:2C:65:52:A0:F0:54:09:98:5C:90:CD:17:DD:07:95:78:3D
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       755A403DBFA4917EF27144CD66B5041865573411
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:17 +0000
ROA not before:           Tue 06 Jan 2026 20:53:17 +0000
ROA not after:            Tue 05 Jan 2027 20:58:17 +0000
asID:                     13381
IP address blocks:        200.112.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5a:40:3d:bf:a4:91:7e:f2:71:44:cd:66:b5:04:18:65:57:34:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:17 2026 GMT
            Not After : Jan  5 20:58:17 2027 GMT
        Subject: CN=CF6EC42C6552A0F05409985C90CD17DD0795783D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:45:7d:9d:b5:4c:0d:e3:3b:43:0a:21:e4:
                    4c:1a:d4:f1:20:2a:4a:3c:f5:1a:aa:3f:a8:a1:80:
                    db:fd:2e:1d:29:05:46:58:51:78:e0:04:87:70:78:
                    7d:95:4d:25:49:6d:23:44:9e:12:8e:12:a9:00:bc:
                    49:e0:62:4e:5e:dd:84:05:17:7d:dd:b4:1f:55:e8:
                    8e:b7:24:e6:9c:1f:c8:3e:ba:dd:04:6b:59:e0:37:
                    6f:2e:ae:11:da:44:aa:ed:d7:4d:e2:ca:84:83:08:
                    d0:a2:49:5c:78:7b:32:38:86:cf:83:13:77:2b:ed:
                    a9:ad:57:01:02:2d:f9:c0:e8:b9:7a:02:18:17:ae:
                    9b:3e:da:94:43:db:53:0d:6b:35:bd:59:1f:c9:e1:
                    6b:7a:51:58:ef:26:e4:07:f9:2f:02:8f:23:1d:5f:
                    cc:8f:2e:b6:1f:28:fe:21:9a:30:2a:58:27:81:6a:
                    a1:94:e8:23:a8:3c:1a:3e:c2:50:8b:5e:9e:51:b9:
                    8c:19:33:44:50:9a:51:f4:11:53:23:f7:8d:b0:65:
                    f7:78:8c:12:48:2e:6a:f3:6d:e7:1c:eb:f3:e8:00:
                    78:1b:7e:98:a0:1c:36:88:cc:7c:17:1b:cf:32:4f:
                    0b:6b:a1:63:95:ae:69:8c:00:f4:72:f0:19:42:79:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:C4:2C:65:52:A0:F0:54:09:98:5C:90:CD:17:DD:07:95:78:3D
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233312e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:39:d2:d2:17:0c:99:b5:2d:93:75:dc:99:79:1c:a3:49:
         85:09:46:e7:fa:e1:22:61:55:49:c4:b0:3a:03:42:01:11:d1:
         bd:d1:dc:cc:7f:e9:cb:ea:8d:e4:93:99:35:94:59:6f:ef:1f:
         e2:ac:58:b0:fa:99:7e:a3:44:4d:03:a4:42:44:0e:70:8c:c8:
         7d:a9:46:b8:17:b6:48:8b:f3:a7:b8:fe:32:0b:55:51:5d:b1:
         13:dc:0b:ac:a5:a5:3a:28:e9:3d:54:83:11:1b:62:3b:77:45:
         98:2a:37:78:3e:36:7c:70:41:a6:c6:53:c7:9a:b0:79:00:06:
         2b:22:24:55:29:21:e1:af:d3:97:55:bc:66:7d:ae:8f:d0:55:
         2f:84:16:33:a4:6e:5b:c6:5f:da:8a:89:78:2c:ef:97:07:66:
         ad:ad:f8:d2:e5:db:dc:5f:46:92:ca:92:4f:c4:d8:a4:42:df:
         89:ee:47:06:c8:72:89:2a:eb:c3:89:d1:44:7a:3f:95:11:7b:
         2b:e6:25:17:05:06:44:97:9f:66:0c:2f:8d:13:2d:a1:06:1e:
         21:64:99:0f:a3:c0:0a:67:03:1c:0a:8a:f6:79:2c:cb:8a:c8:
         97:68:e5:b4:f4:47:d1:34:6d:e1:c1:e3:8f:cc:ba:1c:6d:a3:
         c7:c1:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:41 2026 by rpki-client