This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235342e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235342e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          6wremav7Acax6PaIqLodkFdwXEAPXkBif1g8tmQMkeE=
Subject key identifier:   EE:47:E1:B6:85:FF:4B:6A:07:93:67:BB:A3:98:8C:40:FA:10:EA:70
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       610D99762AC58B346A8810E8796D0825D87A2473
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235342e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:22 +0000
ROA not before:           Tue 06 Jan 2026 20:53:22 +0000
ROA not after:            Tue 05 Jan 2027 20:58:22 +0000
asID:                     13381
IP address blocks:        200.112.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0d:99:76:2a:c5:8b:34:6a:88:10:e8:79:6d:08:25:d8:7a:24:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:22 2026 GMT
            Not After : Jan  5 20:58:22 2027 GMT
        Subject: CN=EE47E1B685FF4B6A079367BBA3988C40FA10EA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:34:51:94:a4:1d:da:4d:0a:44:26:11:0d:
                    6d:c1:25:e1:0e:e0:9b:af:62:0c:e3:be:3c:c4:d2:
                    81:13:b8:fe:15:3b:39:f0:19:e9:96:1e:f1:21:b1:
                    c6:32:da:f4:f1:f8:b8:fe:f9:e9:54:a8:c7:3c:d0:
                    7b:27:cc:a0:90:ff:e0:a5:5f:35:af:50:a4:1b:ff:
                    56:22:63:40:54:e4:7e:e3:36:68:f3:ac:d3:b0:9b:
                    55:a4:d7:a1:f5:39:8a:17:5f:32:e5:0f:47:77:5e:
                    15:0d:ad:72:18:25:68:68:9f:fd:89:6d:1d:a6:30:
                    46:2d:33:37:45:58:a0:45:2d:c4:92:3f:93:96:e2:
                    82:7d:34:d5:74:81:2a:e9:3c:ce:5f:75:41:24:66:
                    af:78:4b:75:f9:3c:c1:02:6e:9c:45:a0:b1:b1:6a:
                    c0:01:bd:32:8b:26:bc:ef:a6:22:4d:b6:56:70:da:
                    c6:03:9b:6a:6e:9e:d5:ab:f2:a0:5f:10:e5:3d:a4:
                    ff:47:2c:f7:11:17:72:54:18:38:e8:25:3f:d1:06:
                    28:d7:eb:86:9b:73:22:fa:74:03:d7:d3:7e:92:e5:
                    4b:5d:56:4f:db:17:be:86:ce:3e:1a:ef:83:2e:21:
                    91:d3:6c:cc:31:99:65:ed:f2:51:53:4f:8b:a9:24:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:E1:B6:85:FF:4B:6A:07:93:67:BB:A3:98:8C:40:FA:10:EA:70
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235342e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:17:ca:9c:62:0e:09:c8:4f:8a:e4:87:56:42:13:68:7c:3e:
         10:a7:fe:11:d6:c7:04:a4:73:aa:77:67:96:93:2b:ae:a1:25:
         ea:41:3b:a5:fd:aa:f1:1c:3d:8e:27:b3:d9:ba:9e:54:f2:97:
         63:86:4e:7f:0c:fb:45:a8:30:85:57:ab:73:c8:9e:59:6d:60:
         15:c8:ae:67:f7:2d:57:94:65:60:e2:4b:b7:a3:2b:ea:49:f2:
         fe:4c:c1:65:1b:90:38:c6:14:e0:24:c4:d3:7e:6e:c8:86:5d:
         0a:47:b1:bf:01:35:42:2e:a1:18:31:f8:58:67:eb:78:d7:9f:
         fe:d7:42:13:e6:3d:27:43:4e:a1:30:b8:ab:cc:67:6b:7a:aa:
         5d:6a:e5:a3:73:b6:0d:e9:86:cf:52:f6:2e:3c:0a:3d:b1:2d:
         de:32:fe:40:7a:32:7b:c0:e6:53:aa:0a:da:ba:a5:d1:4f:90:
         ee:90:b5:23:ff:b5:b1:98:e8:cf:ff:85:8e:91:de:dc:fa:6e:
         fb:eb:a3:3d:40:57:80:ff:51:c9:d9:f7:71:72:cc:b4:24:4e:
         a4:d6:83:79:a1:46:5b:28:d0:2f:17:0b:1a:5c:67:55:ba:6b:
         2f:b4:d0:0f:4c:7d:ae:89:0f:51:c6:87:b3:e5:92:43:30:5a:
         74:11:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:49 2026 by rpki-client