This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e34382e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          YLf64RYgs7Dw7H1TfyZe6zY2CKqfcMPKBIcrLTEG0iM=
Subject key identifier:   FD:30:B8:E4:63:E4:62:41:BD:E6:DC:AF:62:39:B2:D8:7B:DE:4F:2C
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       29BCC5CECF3BFEDE312B4D7644876FC92E9F7208
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:56:02 +0000
ROA not before:           Tue 06 Jan 2026 20:51:02 +0000
ROA not after:            Tue 05 Jan 2027 20:56:02 +0000
asID:                     6147
IP address blocks:        200.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:c5:ce:cf:3b:fe:de:31:2b:4d:76:44:87:6f:c9:2e:9f:72:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:51:02 2026 GMT
            Not After : Jan  5 20:56:02 2027 GMT
        Subject: CN=FD30B8E463E46241BDE6DCAF6239B2D87BDE4F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:76:88:d9:6f:5e:0a:2d:e3:ce:79:e7:52:
                    cd:8b:60:8d:35:7b:0c:32:93:3d:28:1d:8f:d3:24:
                    b2:44:95:52:9d:32:f0:7d:d9:86:6b:16:55:c0:b8:
                    82:c1:8b:3f:9c:a2:cf:82:75:95:96:54:c9:e0:62:
                    90:74:19:0c:98:43:8f:1a:95:f3:99:b3:27:0a:c3:
                    f3:b8:3c:c1:b3:87:0d:97:c6:be:1c:d3:c2:9d:8d:
                    bd:a8:d3:dd:35:8b:45:6d:53:a7:f9:8f:7c:85:1f:
                    86:85:05:2b:e1:5e:e7:da:ca:3d:df:1b:05:c9:3f:
                    51:38:05:e9:56:9d:c3:96:b9:b1:3a:b6:9f:55:86:
                    e1:6d:05:47:c1:8c:ff:83:46:fd:9e:34:8e:48:ba:
                    5b:4c:44:d7:6c:fa:ad:c6:8a:c5:a9:56:f5:8d:1a:
                    43:b4:bf:84:c8:00:8c:91:03:bb:bb:80:a0:1f:30:
                    fa:44:0c:2e:b4:40:ca:9f:3e:0e:66:67:67:fe:b7:
                    da:67:12:04:9e:c6:a2:4d:79:41:86:97:19:07:ee:
                    a9:1e:e2:25:8d:99:b6:31:84:2a:6b:07:73:52:80:
                    7a:bf:fa:76:33:f5:8b:7b:8f:fb:cd:45:e7:bb:62:
                    b0:e9:32:ef:51:17:bd:a6:82:00:d6:ed:40:e6:88:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:30:B8:E4:63:E4:62:41:BD:E6:DC:AF:62:39:B2:D8:7B:DE:4F:2C
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:54:1d:cc:76:2e:cd:f1:8d:98:e4:53:69:a2:54:01:fb:dc:
         9a:c0:d9:5d:39:cd:f3:b7:69:bf:bc:c9:9b:8b:3c:92:2b:bf:
         90:8b:56:4c:7e:81:21:7d:1b:0f:9a:eb:c4:9a:65:5a:aa:49:
         99:ae:e1:dc:6b:54:a2:90:56:ae:05:cc:c9:e4:62:d5:a2:27:
         6f:54:6e:44:71:b5:05:c1:14:d5:22:d5:0c:76:95:a5:5b:19:
         3b:30:c2:d4:d1:96:86:47:73:18:89:bf:71:da:61:e7:29:d9:
         36:c7:f9:73:33:9a:a8:dd:a5:15:f7:21:75:ce:44:e6:5e:9d:
         91:36:c1:bb:ac:a9:08:13:5d:66:c7:20:7c:6d:57:04:88:56:
         51:8a:9f:23:c0:ed:ea:a3:9f:69:a1:53:3d:0f:55:08:6c:1a:
         15:a8:31:35:87:4e:6d:00:65:a1:76:ca:53:85:62:8d:13:56:
         bb:db:11:78:60:fd:4f:8b:43:ca:ba:0d:42:99:26:2d:31:6e:
         0b:51:d7:1e:44:47:c6:c5:aa:cf:d9:a6:8d:9d:09:b7:ff:93:
         dc:70:f9:10:b7:c8:cb:55:11:b2:65:ee:23:98:f4:9d:d2:3e:
         f9:2b:13:12:0d:14:01:63:5e:79:14:e5:2b:1a:fa:0a:93:bf:
         5f:84:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:51 2026 by rpki-client