This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235322e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235322e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          NFan9EVmckstPybfG7ShQKl4kF0+g1/U+xUhpNpr3C0=
Subject key identifier:   94:F5:8D:61:66:B6:EC:74:0E:C9:9E:DC:6A:CA:FE:1A:FA:4D:65:4D
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       53FBDA66DCB276A93F0515D1ABF37ADEFEB6FD81
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235322e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:18 +0000
ROA not before:           Tue 06 Jan 2026 20:53:18 +0000
ROA not after:            Tue 05 Jan 2027 20:58:18 +0000
asID:                     13381
IP address blocks:        200.112.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fb:da:66:dc:b2:76:a9:3f:05:15:d1:ab:f3:7a:de:fe:b6:fd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:18 2026 GMT
            Not After : Jan  5 20:58:18 2027 GMT
        Subject: CN=94F58D6166B6EC740EC99EDC6ACAFE1AFA4D654D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:e4:95:ae:a9:f4:77:c6:8b:48:4f:02:7b:
                    0d:58:41:fe:65:6f:1d:04:9c:e6:35:21:c5:64:60:
                    52:20:96:5f:4a:2d:8a:c6:d0:42:80:bd:d7:be:72:
                    ac:0f:dc:f1:b1:86:ce:bb:3e:e7:39:87:04:c8:1a:
                    5d:35:39:c5:db:0b:a2:8c:cf:e4:2e:27:4b:da:c3:
                    2b:53:16:ed:f8:9e:d9:89:ba:9a:f7:f7:57:5c:89:
                    28:34:48:80:33:11:4e:e8:eb:3c:1e:96:2b:0e:7f:
                    b6:72:29:20:45:c9:ac:3d:98:aa:79:7e:32:2c:a6:
                    bf:5c:7c:55:c8:e8:43:50:2d:85:d9:b9:10:75:aa:
                    f3:cb:a4:08:ad:71:89:0b:22:3a:c6:35:7e:12:61:
                    ae:19:c9:9c:f4:ef:7f:8e:7e:68:38:49:b5:9e:cf:
                    b7:37:d5:95:b6:09:82:ce:a6:6c:d9:f1:62:c7:ac:
                    b9:31:35:9b:b6:a5:21:ab:fe:b1:8d:be:5d:68:5a:
                    ec:cc:e8:a7:f7:59:4c:96:f3:45:9e:27:91:18:4b:
                    1e:68:23:6f:a4:6c:49:c4:b5:2a:cb:a8:ef:be:2b:
                    c0:d3:96:8e:d9:72:ae:c3:f7:73:4f:b2:cc:95:26:
                    0e:e7:7e:5a:fd:06:c7:fd:f0:73:c3:e0:4b:4a:e6:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:8D:61:66:B6:EC:74:0E:C9:9E:DC:6A:CA:FE:1A:FA:4D:65:4D
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235322e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:ae:f3:cc:fa:c4:9e:2e:f3:78:6b:ca:e6:34:a2:d4:15:
         00:a3:22:61:2e:be:02:da:70:34:7f:14:20:6a:37:df:45:7d:
         3c:cc:89:a2:b5:dc:8a:d6:fb:d3:db:6c:44:68:ed:94:56:0c:
         84:6a:9a:97:ca:4d:9f:e0:47:c0:b3:71:18:53:54:87:a7:5f:
         a5:55:05:e4:1d:16:4c:8a:d9:bd:2c:e7:20:46:2c:0a:49:af:
         92:3b:f1:8f:4c:89:0e:49:2b:ac:3d:a5:17:4f:e9:c4:50:b1:
         7b:97:40:4a:d8:ab:42:49:be:5d:87:bf:7d:38:72:c3:d3:e6:
         34:e8:19:5e:3d:96:69:21:d6:71:35:30:7b:a5:4c:99:de:f2:
         7a:1b:b2:a4:f7:25:90:e7:8d:a1:51:0e:26:93:28:66:8a:18:
         16:25:ec:08:bd:a7:50:0d:3c:70:a0:29:b2:54:88:fb:ff:75:
         08:9c:d4:da:ed:76:08:f6:a5:9f:21:4b:56:cb:30:f4:76:59:
         9d:53:4f:15:d8:97:5a:87:9f:13:eb:34:71:ba:3e:d4:79:7b:
         6d:ed:c6:0a:90:43:27:09:bf:1d:d8:bf:65:80:10:cf:16:7c:
         0c:38:d1:e4:0e:89:70:73:d0:53:8d:db:03:6d:61:ed:75:dc:
         aa:11:ea:83
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUU/vaZtyydqk/BRXRq/N63v62/YEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNjAxMDYyMDUzMThaFw0yNzAxMDUyMDU4MThaMDMxMTAvBgNV
BAMTKDk0RjU4RDYxNjZCNkVDNzQwRUM5OUVEQzZBQ0FGRTFBRkE0RDY1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUc+SVrqn0d8aLSE8Cew1YQf5l
bx0EnOY1IcVkYFIgll9KLYrG0EKAvde+cqwP3PGxhs67Puc5hwTIGl01OcXbC6KM
z+QuJ0vawytTFu34ntmJupr391dciSg0SIAzEU7o6zwelisOf7ZyKSBFyaw9mKp5
fjIspr9cfFXI6ENQLYXZuRB1qvPLpAitcYkLIjrGNX4SYa4ZyZz073+Ofmg4SbWe
z7c31ZW2CYLOpmzZ8WLHrLkxNZu2pSGr/rGNvl1oWuzM6Kf3WUyW80WeJ5EYSx5o
I2+kbEnEtSrLqO++K8DTlo7Zcq7D93NPssyVJg7nflr9Bsf98HPD4EtK5v+jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlPWNYWa27HQOyZ7casr+GvpNZU0wHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHD8
MA0GCSqGSIb3DQEBCwUAA4IBAQBLb67zzPrEni7zeGvK5jSi1BUAoyJhLr4C2nA0
fxQgajffRX08zImitdyK1vvT22xEaO2UVgyEapqXyk2f4EfAs3EYU1SHp1+lVQXk
HRZMitm9LOcgRiwKSa+SO/GPTIkOSSusPaUXT+nEULF7l0BK2KtCSb5dh799OHLD
0+Y06BlePZZpIdZxNTB7pUyZ3vJ6G7Kk9yWQ542hUQ4mkyhmihgWJewIvadQDTxw
oCmyVIj7/3UInNTa7XYI9qWfIUtWyzD0dlmdU08V2Jdah58T6zRxuj7UeXtt7cYK
kEMnCb8d2L9lgBDPFnwMONHkDolwc9BTjdsDbWHtddyqEeqD
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:06 2026 by rpki-client