This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          WbVOxEz9DxqQaXiVC8Ba8d615qrWpSfADwkYEn8Yxz0=
Subject key identifier:   A1:A6:17:94:66:1B:B4:CE:79:C1:E7:C2:CE:04:EC:C3:01:70:A2:0A
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       1EE527316282F6B634C679C8B2DA84149150D6BE
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:17 +0000
ROA not before:           Tue 06 Jan 2026 20:53:17 +0000
ROA not after:            Tue 05 Jan 2027 20:58:17 +0000
asID:                     13381
IP address blocks:        200.112.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e5:27:31:62:82:f6:b6:34:c6:79:c8:b2:da:84:14:91:50:d6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:17 2026 GMT
            Not After : Jan  5 20:58:17 2027 GMT
        Subject: CN=A1A61794661BB4CE79C1E7C2CE04ECC30170A20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:54:c7:58:72:90:4b:b3:3d:13:20:9b:71:
                    b7:6c:9a:30:1a:d8:b5:45:33:88:06:c5:f6:cc:a1:
                    a4:c0:f3:8b:dd:cc:33:8e:ce:4a:9b:10:83:a6:3c:
                    e4:57:02:7e:00:57:c2:04:de:6e:3e:7e:2a:51:49:
                    05:d3:7b:1f:9e:fa:25:16:85:f3:c9:42:a7:6c:55:
                    0c:a4:b2:60:12:4e:2f:36:08:b0:1c:40:62:75:af:
                    a7:73:2a:f8:8b:59:4e:9f:9e:bd:ef:10:69:50:ad:
                    e0:10:3b:84:e3:d1:88:1e:8b:ab:dc:13:af:0b:b9:
                    74:93:7d:39:1a:77:40:0c:60:68:26:e1:70:90:6a:
                    c4:81:8f:ef:54:45:35:25:34:2e:13:65:88:3e:a1:
                    80:40:4c:48:97:7f:1c:cb:98:aa:a9:09:61:de:11:
                    ce:fc:61:71:0d:11:2f:4c:94:98:b4:ab:3c:28:d9:
                    b7:ac:72:f7:0f:58:4c:83:1c:25:92:17:4b:b7:78:
                    dd:df:09:12:a6:b2:71:4a:ab:ab:f1:31:20:a4:de:
                    60:05:57:df:90:ef:f1:13:1a:b2:85:cc:9f:5b:3f:
                    6f:d0:ae:21:bf:15:bb:24:c4:d5:59:fb:dc:d6:28:
                    fe:cf:ee:1b:da:31:1b:f9:fc:c2:96:4b:8e:9a:90:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A6:17:94:66:1B:B4:CE:79:C1:E7:C2:CE:04:EC:C3:01:70:A2:0A
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3235352e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:58:70:85:83:1a:19:79:91:81:03:c0:65:36:39:14:59:
         1f:88:56:35:a7:8e:e6:26:6a:7a:cd:b3:a9:10:af:cf:74:4f:
         47:45:7e:c7:2e:ab:2f:21:85:c4:4b:37:23:d0:59:bb:f4:1d:
         b2:69:2a:d8:aa:50:a5:1c:85:73:7b:4c:4d:5f:f9:58:5d:8b:
         e4:83:41:d7:64:b6:34:c9:a8:69:d0:8b:13:40:60:f5:60:4b:
         26:34:4e:c3:c5:4f:5e:88:ae:90:8a:9f:7f:97:f5:f0:0c:83:
         cc:73:11:80:bf:cb:32:88:0f:4f:cf:04:f5:1e:1b:14:8c:7e:
         ff:2b:ce:de:5b:3a:46:c3:54:43:72:38:0a:c1:22:a7:60:f5:
         52:9d:e1:d9:0b:96:36:ce:c5:b0:84:8e:08:4d:64:41:b9:a6:
         09:38:5a:12:b1:88:b2:ee:d5:d4:83:c8:5d:b6:a4:d8:fa:81:
         1e:82:d3:88:e7:5c:f8:3f:71:0f:e3:30:4e:5e:11:41:35:ba:
         b5:20:14:69:10:96:12:80:6f:ca:c8:5f:01:25:80:48:7e:6a:
         be:87:50:d7:03:98:76:f7:3f:e4:58:17:4e:40:bd:93:cf:31:
         5a:f2:29:72:11:08:df:be:1c:97:a0:41:f8:86:a4:ce:55:a9:
         3c:a2:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:55 2026 by rpki-client