This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233332e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233332e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          en5ADnCHkRfE2CUR9OSAQ+vb/V2Ih90ipuxPZiur9Zc=
Subject key identifier:   8E:49:C7:CA:21:A4:5D:73:74:18:BF:2D:10:32:FE:30:3B:BC:4C:75
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       5264D67F79EB4AAD6B7F55B274D310BA65A618B4
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233332e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:14 +0000
ROA not before:           Tue 06 Jan 2026 20:53:14 +0000
ROA not after:            Tue 05 Jan 2027 20:58:14 +0000
asID:                     13381
IP address blocks:        200.112.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:64:d6:7f:79:eb:4a:ad:6b:7f:55:b2:74:d3:10:ba:65:a6:18:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:14 2026 GMT
            Not After : Jan  5 20:58:14 2027 GMT
        Subject: CN=8E49C7CA21A45D737418BF2D1032FE303BBC4C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:dc:97:98:3e:4f:e0:7f:55:ec:2a:39:90:
                    79:43:40:e7:a9:f8:57:48:d7:d9:8d:a7:a3:49:09:
                    a6:14:a0:0a:78:46:91:e6:11:0d:f0:c4:ff:fc:d0:
                    69:21:51:56:40:c3:a5:0a:98:fc:a8:dd:c0:7e:9e:
                    29:57:69:02:b1:8b:9e:8b:67:f1:af:49:cb:06:f6:
                    cb:f8:47:c4:c0:bf:35:6d:e3:90:11:3d:4e:d5:76:
                    25:5a:90:e0:6c:93:93:7f:b0:8c:da:c0:40:09:cb:
                    5d:2d:5e:f3:4f:46:38:4e:dc:ce:be:af:40:bf:dd:
                    f6:43:73:a9:2d:f6:28:29:f5:41:6a:d3:e7:ae:60:
                    49:42:51:50:57:2d:8a:36:25:46:75:d7:b6:d9:46:
                    aa:95:ea:ca:3f:7a:0b:c0:0a:98:26:0a:f1:8c:59:
                    04:f5:76:a9:bc:e1:56:f0:2b:fd:42:3a:b7:a6:9d:
                    5a:bf:f9:c0:6a:83:27:58:09:31:6b:f4:d5:8f:9b:
                    88:dd:2a:ad:70:50:f3:35:e3:cb:bb:00:dc:44:c7:
                    e3:a5:de:96:56:35:36:71:fc:4f:e7:0a:e2:fa:d0:
                    d9:15:9b:79:7b:68:06:bc:68:eb:ec:5e:3c:49:01:
                    1b:58:5b:8f:b7:06:f1:d2:a3:b9:ee:3b:b3:49:52:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:49:C7:CA:21:A4:5D:73:74:18:BF:2D:10:32:FE:30:3B:BC:4C:75
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233332e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:64:ef:ca:b7:e0:d6:bf:c5:67:36:5a:80:f3:db:b8:c7:0c:
         be:b5:e9:25:17:5b:0a:29:4b:63:34:8f:6f:e3:41:a0:76:f3:
         9b:e2:e5:52:48:76:ea:19:3d:c8:96:e2:42:2f:8f:c5:78:ee:
         b0:14:4a:71:ab:95:aa:21:c5:0f:1c:42:52:04:c7:15:6e:d5:
         7d:79:88:6e:bd:38:17:30:bf:cc:84:da:76:1b:b9:da:22:b7:
         30:9f:49:84:d7:2d:de:f3:56:7f:ae:12:32:e0:a0:d9:dd:13:
         10:9d:45:53:c6:3d:d7:89:ca:10:d8:e5:c3:d1:03:3a:f9:e5:
         2e:bb:94:7e:b2:ed:42:4f:c9:4e:04:bd:88:c8:49:35:3c:b2:
         9e:b7:c2:b7:16:cb:69:34:96:f3:dd:2f:f8:01:50:23:36:e0:
         5f:d2:5c:65:07:54:20:a6:68:31:c8:a0:87:34:3b:da:09:d9:
         df:10:94:7e:aa:4a:97:fd:ae:e5:da:ab:dd:bc:38:6e:7a:fa:
         fc:ca:06:9c:b5:79:1e:df:69:f0:4a:04:48:e2:56:14:34:82:
         86:42:e7:87:77:01:d7:a5:74:59:25:d0:84:3d:e5:b5:56:26:
         59:69:f9:4d:2c:e4:99:21:21:93:99:3b:03:97:ae:84:72:8e:
         b2:1b:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:07 2026 by rpki-client