This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          OISIUgOU1Xr2OLt+RpItnqEejj+qSIZ3WdArd07f5dU=
Subject key identifier:   B0:76:15:BA:3F:67:C4:EE:45:5D:FC:94:F4:66:7C:2B:EB:77:A6:F5
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       6406917901CA166AB98DF93186D2365096767D50
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:19 +0000
ROA not before:           Tue 06 Jan 2026 20:53:19 +0000
ROA not after:            Tue 05 Jan 2027 20:58:19 +0000
asID:                     13381
IP address blocks:        200.112.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:06:91:79:01:ca:16:6a:b9:8d:f9:31:86:d2:36:50:96:76:7d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:19 2026 GMT
            Not After : Jan  5 20:58:19 2027 GMT
        Subject: CN=B07615BA3F67C4EE455DFC94F4667C2BEB77A6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:ab:cb:d8:17:45:64:b9:6f:cc:1c:49:3d:
                    a2:53:87:49:40:15:53:d9:0c:cc:56:c3:24:24:4c:
                    eb:ed:91:4e:77:ac:89:4e:52:8b:43:b4:15:a4:99:
                    48:b8:2e:2b:67:a2:79:71:66:31:52:ab:34:c8:8c:
                    a5:17:b0:9f:52:f9:b2:50:4b:8e:9a:a0:72:10:6e:
                    d5:d5:32:c5:f5:28:e3:a9:4c:3c:8d:2a:cf:cc:13:
                    dd:01:19:30:9c:66:b6:d3:e6:8f:fb:eb:97:22:40:
                    09:5f:4b:b2:bb:59:42:bd:c1:4c:23:c5:74:b1:b3:
                    ea:b4:39:e9:d8:22:dd:40:1e:eb:b8:ba:b3:7e:aa:
                    0e:c1:b0:93:ad:df:b2:e2:3c:bd:22:35:1f:36:69:
                    e3:9a:cf:99:07:b3:40:9e:a6:81:e6:12:eb:8e:80:
                    d8:bf:5c:45:3c:af:73:69:1f:41:a9:b5:67:00:84:
                    ac:38:9c:bb:65:ce:25:fb:1e:79:00:6b:bb:57:83:
                    ac:49:fe:16:9d:fd:ac:c7:90:7d:cb:9c:26:94:b2:
                    6f:0e:2d:42:e2:db:4d:0f:70:2f:87:96:e5:be:38:
                    50:59:a7:2f:96:dc:10:7f:c1:b4:f8:e2:0f:78:26:
                    1d:87:ac:34:22:f8:cb:74:1d:66:7f:18:f4:c5:2b:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:15:BA:3F:67:C4:EE:45:5D:FC:94:F4:66:7C:2B:EB:77:A6:F5
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234312e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:0a:fe:7e:98:ad:94:6e:47:8a:ad:ca:28:db:51:eb:16:ae:
         43:c1:60:e9:e9:33:ea:71:5c:34:28:1b:1f:72:c8:d2:a4:c9:
         c3:f2:a5:a9:21:7f:03:ff:23:1c:c2:ce:9c:ff:0d:c0:cc:3a:
         42:0d:5e:04:ce:25:56:ce:32:2a:12:5e:a2:f0:97:ca:97:33:
         14:fa:ac:9b:52:4d:46:8d:d7:27:94:22:1a:cf:9b:c3:c8:62:
         1f:28:6b:33:68:15:31:3f:6c:0d:0a:06:8d:fa:93:1e:4a:4a:
         99:23:c0:20:f0:9b:b9:00:91:0d:0d:46:dd:c6:05:ba:df:60:
         87:8c:71:77:18:6d:f0:19:a9:9d:78:9b:45:05:e4:5a:9e:07:
         51:d6:bf:cc:24:96:bd:04:6d:b1:0d:81:d5:0b:ce:44:7e:c9:
         9b:62:ce:72:43:83:38:e3:05:76:ec:a5:a5:33:39:be:cf:6f:
         00:d4:f5:c3:68:c9:36:20:94:ff:c5:c1:ff:80:fb:13:66:22:
         1d:75:ea:43:19:0c:26:39:a8:59:11:5d:eb:f7:01:c6:94:7f:
         97:12:25:8e:be:1f:13:a0:5b:47:74:15:49:3a:c0:23:ed:67:
         27:c8:fe:9f:98:14:7f:f5:a0:ff:f8:4e:da:ac:eb:db:7c:bf:
         fa:b0:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:30 2026 by rpki-client