This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa
File:                     3230302e3131342e302e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          xpyQiuKPQsAqWmx9CWG75nT8Sz4rfA/CAvoh7EzCZa0=
Subject key identifier:   89:85:EC:27:94:93:B1:BC:16:42:B7:6C:73:FC:2D:18:03:D6:96:84
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       434C9E1923AAE554FF42039FF603D08C329C9381
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:27:51 +0000
ROA not before:           Tue 06 Jan 2026 19:22:51 +0000
ROA not after:            Tue 05 Jan 2027 19:27:51 +0000
asID:                     13489
IP address blocks:        200.114.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4c:9e:19:23:aa:e5:54:ff:42:03:9f:f6:03:d0:8c:32:9c:93:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:51 2026 GMT
            Not After : Jan  5 19:27:51 2027 GMT
        Subject: CN=8985EC279493B1BC1642B76C73FC2D1803D69684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:6c:7c:f6:66:44:b0:3a:b3:a8:e6:6a:88:
                    8e:64:42:ed:3a:0d:5f:2e:cb:45:1b:de:cb:22:4f:
                    f2:2c:2c:64:3a:ee:84:e2:11:8f:d1:43:65:6f:bb:
                    7e:1a:b4:2f:e1:87:98:9b:1f:32:6d:82:b1:3f:40:
                    d4:71:d7:30:72:39:19:95:aa:47:95:20:e4:ba:2a:
                    63:ff:59:d1:71:9a:c2:db:5e:14:77:9b:dd:d3:7e:
                    be:7e:14:3f:f6:52:6e:2e:40:21:4f:b4:2f:4c:6b:
                    a1:48:96:40:28:65:f8:d9:3f:a1:50:a4:af:0d:b0:
                    63:52:52:b6:05:48:7a:38:94:4d:86:a3:e6:28:b6:
                    73:90:a8:d9:8d:2a:af:c5:89:b5:0c:48:95:33:a0:
                    22:2f:4f:9c:ef:58:66:21:84:36:3c:af:10:95:16:
                    71:4f:51:69:6c:17:dc:79:13:2d:43:ef:b4:0b:89:
                    7e:f2:eb:ad:12:3b:61:11:56:6f:2c:a4:c0:f4:fa:
                    9e:73:ef:e6:2d:46:8b:9c:df:63:12:1c:4c:e5:84:
                    b8:99:aa:89:dd:38:f3:2a:a9:dc:bd:83:55:ab:f2:
                    ad:63:57:12:77:7c:74:50:38:0e:b4:df:ae:63:0b:
                    a5:9f:57:a5:cf:5f:00:7a:c4:ed:e2:72:c5:4d:25:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:EC:27:94:93:B1:BC:16:42:B7:6C:73:FC:2D:18:03:D6:96:84
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131342e302e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:57:40:a8:61:fc:55:bb:81:e5:bd:5b:d6:b7:82:ed:96:30:
         3b:bf:64:6b:e2:5f:54:4d:03:c7:e8:da:e6:a7:28:43:cc:55:
         56:5f:85:5f:8b:2b:0e:ef:1c:cc:77:57:53:ef:e7:15:ea:01:
         b8:ca:c6:b7:a7:f4:4f:95:77:07:2d:be:6b:ac:df:02:55:1a:
         04:95:29:ee:91:9b:9d:5d:22:2e:31:3f:32:4b:8f:1e:72:5a:
         17:3f:aa:4e:c9:02:4d:e1:73:96:0d:3b:df:cb:57:31:e9:a4:
         e5:6b:b1:a1:a4:2e:b3:8b:db:ec:75:ad:c1:2a:f3:3e:ac:8e:
         4e:28:b2:5f:68:86:f2:e5:ba:f9:a0:27:a6:82:38:9b:23:9f:
         6d:ab:8c:d5:ac:0a:30:65:c2:1a:a0:1f:10:7d:2f:64:ad:66:
         38:98:02:fb:2c:9b:4d:0d:cd:a8:9a:49:63:4a:09:54:c8:27:
         08:32:03:f5:38:f4:26:2a:68:1b:d6:f9:f3:52:30:55:e3:48:
         8f:34:78:39:4c:0f:d3:80:55:5a:2e:68:51:a7:84:7b:5e:a0:
         bd:9a:55:e5:b9:b1:7c:f7:1e:93:77:45:c9:15:cd:9d:2b:89:
         22:71:0d:99:dc:ce:79:5c:c8:6f:2d:e4:be:0d:9b:50:13:c2:
         6d:7b:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:33 2026 by rpki-client