This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235302e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235302e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          ncqnanwYWH31ESpG1Zpkhl3Ucw92uXhe/M3b2XWTWgw=
Subject key identifier:   4E:43:E1:E6:3E:D0:0F:8F:77:1A:46:1A:D7:24:BF:5F:4D:F5:88:EA
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       4505902B8B48E7D7A237003BEBA5C6DFB0568223
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235302e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:18 +0000
ROA not before:           Tue 06 Jan 2026 20:53:18 +0000
ROA not after:            Tue 05 Jan 2027 20:58:18 +0000
asID:                     13381
IP address blocks:        200.112.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:05:90:2b:8b:48:e7:d7:a2:37:00:3b:eb:a5:c6:df:b0:56:82:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:18 2026 GMT
            Not After : Jan  5 20:58:18 2027 GMT
        Subject: CN=4E43E1E63ED00F8F771A461AD724BF5F4DF588EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:35:1f:f2:15:f4:ab:d9:70:cd:4d:c8:1d:
                    1c:d6:0e:71:b2:9b:7e:5c:13:95:81:2d:85:a7:e6:
                    66:b9:80:0c:1f:a1:53:e8:f2:f5:74:bb:21:02:7e:
                    df:a0:0b:32:46:50:8b:90:6e:f5:b3:4e:2f:64:1f:
                    15:89:ca:10:0d:41:06:ed:2b:d8:47:86:e5:db:01:
                    25:02:bb:ea:4d:5c:71:90:f8:ec:1f:21:7b:18:b1:
                    91:fc:8d:e9:0f:9b:2b:b2:47:d1:d0:69:0f:62:e8:
                    94:cc:e2:b8:48:e8:19:ea:df:9f:51:42:51:8e:18:
                    e1:1f:7a:b1:55:13:83:91:6b:b6:c9:0a:51:9e:bf:
                    62:ec:d3:d1:88:5f:b4:9a:7c:06:78:fa:68:2d:85:
                    3b:c3:85:2d:4c:6e:b4:bd:12:22:88:27:b3:00:e4:
                    fa:c9:18:39:b9:0f:b4:17:86:40:6b:b5:8b:21:79:
                    57:5f:75:e8:ea:12:46:bf:76:e0:3a:95:fb:59:9e:
                    61:72:63:79:57:7d:ed:76:fd:fb:5e:8e:0c:f7:12:
                    b2:91:ba:f7:3b:dd:a1:24:cc:02:39:bd:d9:95:1a:
                    d7:06:47:69:5b:57:78:4e:b5:cc:05:8f:ec:48:e2:
                    8b:61:8e:c9:d7:49:22:76:35:0c:79:28:c2:5c:5f:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:E1:E6:3E:D0:0F:8F:77:1A:46:1A:D7:24:BF:5F:4D:F5:88:EA
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235302e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:60:50:e5:71:92:c6:cc:08:54:4f:a0:73:19:51:1b:ce:ad:
         6e:81:03:68:d9:2a:5d:45:8a:2a:95:7c:bb:92:6c:ac:b3:44:
         0a:1a:1e:24:7c:e1:04:e7:e5:d7:cb:d4:e9:3f:86:84:e4:35:
         bb:9d:8e:46:b4:ec:6b:6f:31:06:45:ce:14:6e:d7:cf:33:49:
         e9:90:3d:6e:72:30:5a:bb:66:c1:bc:36:e9:22:a0:73:4c:79:
         57:e1:5c:0a:25:e3:e2:fe:4e:ab:7a:74:b1:ce:3b:79:0f:38:
         04:7e:13:72:49:c0:df:6b:1e:d7:83:4e:c8:11:f6:53:93:38:
         6b:aa:1c:c5:8c:93:eb:a7:3c:16:d8:d4:8a:a1:8a:88:6b:64:
         c7:c1:dd:82:2e:27:1f:7f:f1:7a:e9:3c:a6:d8:9b:74:35:d1:
         af:67:a6:e4:68:b3:a9:3a:91:e5:4e:28:c0:26:59:00:cd:d7:
         b4:73:71:0a:35:60:fc:4c:ba:de:69:72:f1:8f:4c:ad:bd:46:
         9a:37:48:92:44:68:06:cf:01:9d:d5:36:c9:de:b4:7a:c9:d6:
         22:6b:c0:e1:66:26:66:b4:c6:e3:df:7a:f4:d6:ab:d3:7f:b9:
         6f:0a:e3:c0:41:cc:dd:b6:df:8a:bf:2f:49:ae:8c:80:0d:c9:
         76:00:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:50 2026 by rpki-client