This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          cQxXf/L5OD8hp1Xt61YHh+0DfNxDQZ2M3DM2nh2jQQI=
Subject key identifier:   C9:7C:52:29:04:ED:74:CD:02:41:B5:D8:1E:0A:60:E5:0E:BC:D2:D5
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       4E03B18C52219D77D4C3F777273DA185C76B79E8
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:20 +0000
ROA not before:           Tue 06 Jan 2026 20:53:20 +0000
ROA not after:            Tue 05 Jan 2027 20:58:20 +0000
asID:                     13381
IP address blocks:        200.112.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:03:b1:8c:52:21:9d:77:d4:c3:f7:77:27:3d:a1:85:c7:6b:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:20 2026 GMT
            Not After : Jan  5 20:58:20 2027 GMT
        Subject: CN=C97C522904ED74CD0241B5D81E0A60E50EBCD2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:94:7f:01:ab:31:46:79:f4:41:86:42:f4:
                    09:f0:27:78:c3:89:2a:49:b3:1f:b5:f6:97:73:9d:
                    8b:77:e9:f7:c3:d0:bf:11:a7:15:3b:1d:8d:bb:a5:
                    dc:80:86:a7:b0:c9:46:4b:e1:ed:15:1b:cd:2e:f3:
                    53:ce:99:ce:4f:b2:0e:a9:2c:ce:15:0c:c3:e4:48:
                    4f:50:6c:d0:81:6c:63:6a:7b:7e:9e:ca:08:3e:d5:
                    21:a4:b9:d7:c1:bf:ff:06:07:07:c1:31:13:f0:04:
                    92:5e:95:c5:e3:ca:3e:7d:d3:18:29:32:b5:de:05:
                    71:4e:ac:9b:34:06:6c:89:1a:03:b3:01:26:e9:2a:
                    c9:a7:a5:57:12:34:b1:c7:de:62:28:ab:8e:92:3f:
                    30:31:a8:25:f1:3c:8c:63:9b:92:6c:a2:da:ae:ae:
                    7f:ca:47:0d:76:42:0a:96:a8:29:dd:c8:36:71:03:
                    f6:b9:96:b6:6c:1c:c9:99:a9:4d:9b:f6:49:7c:2f:
                    7c:53:3a:bf:23:24:48:d7:e0:f8:17:ee:77:b6:8b:
                    11:9d:ea:b3:93:f3:02:c5:98:e8:bc:d5:df:b8:af:
                    ba:ff:05:4e:2a:25:eb:40:a1:f3:47:0a:24:b0:5d:
                    0a:6b:2d:1e:a9:f6:a4:86:c8:1d:cb:db:74:73:18:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:52:29:04:ED:74:CD:02:41:B5:D8:1E:0A:60:E5:0E:BC:D2:D5
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:5b:db:61:5d:dc:01:70:8f:d1:98:66:d3:48:a8:6a:15:80:
         d0:e9:7a:0e:c3:30:bd:16:84:0e:0d:54:25:bf:ba:b4:6c:7a:
         5d:b2:25:83:27:af:de:75:8d:f4:ec:af:de:41:16:ca:57:58:
         60:8e:93:40:b2:a0:29:1d:1d:50:68:dd:8f:ab:b5:78:81:72:
         32:e8:8d:74:f0:49:c3:ca:b7:ef:1a:e3:2e:a0:ab:f0:98:c3:
         99:1f:a7:cf:b8:dc:c6:7d:d6:7f:20:ce:9f:c3:80:95:1c:43:
         39:9c:e8:7e:64:b4:8b:ce:57:09:c3:ad:b0:21:72:1f:36:fb:
         58:c9:ee:3c:09:c4:31:06:c5:a5:65:e6:b0:e1:05:87:60:18:
         f4:f9:4f:81:34:54:7e:c6:8e:59:df:c8:21:c4:b9:5d:74:ce:
         68:a4:4d:da:cb:af:1a:ea:1b:6f:49:e0:72:28:ad:c5:6e:ef:
         f1:7a:a0:27:28:ad:ff:29:5e:7f:2f:ce:20:92:50:67:b2:39:
         bb:d3:c1:87:63:db:e8:52:10:4a:27:e9:b5:e8:0a:f4:02:45:
         b2:57:50:c5:50:f7:7a:e8:ef:86:8a:2f:a4:66:08:ff:94:86:
         b4:36:ce:e0:95:f5:55:75:70:ee:26:c8:c0:11:fb:bd:80:85:
         3d:79:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:04 2026 by rpki-client