This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
File:                     3230302e35322e3134342e302f32302d3230203d3e203237393332.roa (raw, json)
Hash identifier:          jMLFQOZHi0ImF3Tjq7OS/hthIZnINZmvUBLeJw8qo+w=
Subject key identifier:   F4:50:5E:D1:FB:5B:0A:39:6D:E2:1E:5B:3A:31:B5:DF:66:19:AD:02
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       36D524DB6BBD2D4D2206F58098A7A412EAA48981
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
Signing time:             Tue 06 Jan 2026 19:06:33 +0000
ROA not before:           Tue 06 Jan 2026 19:01:33 +0000
ROA not after:            Tue 05 Jan 2027 19:06:33 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d5:24:db:6b:bd:2d:4d:22:06:f5:80:98:a7:a4:12:ea:a4:89:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Jan  6 19:01:33 2026 GMT
            Not After : Jan  5 19:06:33 2027 GMT
        Subject: CN=F4505ED1FB5B0A396DE21E5B3A31B5DF6619AD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:b4:0e:bf:bd:dc:53:3e:45:43:7d:e6:14:
                    7c:47:31:77:7f:20:77:60:e9:97:88:d3:ff:d0:24:
                    90:ee:43:8c:18:be:59:0c:1c:ec:d7:c6:10:bc:e4:
                    14:5e:62:32:37:ee:55:50:a0:08:c5:56:71:27:8b:
                    72:7b:9a:2a:01:f1:79:01:b9:18:16:eb:8b:62:1c:
                    63:ff:36:0c:8e:9d:03:42:85:4f:a3:fd:86:e0:48:
                    45:36:6c:2a:21:b2:79:fd:4d:ed:ce:c0:24:a9:81:
                    16:38:de:f8:6b:f8:b7:5a:ce:1d:d8:f6:5a:88:44:
                    78:5b:e7:13:12:c4:82:fd:11:b4:ac:ae:0c:0f:10:
                    90:5b:d9:7c:fa:ad:de:7f:51:62:fe:29:ee:8d:db:
                    f6:6f:3b:5f:c2:a9:90:0d:71:04:40:34:91:af:93:
                    08:1c:4f:ee:0c:4e:41:3c:bb:76:b9:95:0e:6a:f6:
                    d0:8b:8c:76:7e:1e:07:8c:76:f5:cc:3c:7e:06:5d:
                    b5:b9:58:a2:12:56:e9:d0:a9:0a:b1:34:3a:f8:97:
                    b6:3a:04:3a:e2:a4:a1:c6:f3:83:1e:64:55:51:93:
                    84:a4:96:3a:d7:76:64:ac:5b:9a:2e:33:e0:9f:e6:
                    46:4c:84:5a:35:de:27:93:c8:09:82:17:b0:78:8c:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:50:5E:D1:FB:5B:0A:39:6D:E2:1E:5B:3A:31:B5:DF:66:19:AD:02
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:04:06:42:f6:0d:63:25:d2:1a:c0:7e:e0:05:f4:c4:52:f6:
         c2:87:f2:ce:1f:85:2c:9c:22:39:3c:13:71:09:31:ab:22:6a:
         ff:fd:96:94:a9:8e:5a:fd:92:7b:fa:5d:cc:f7:33:8e:d9:9b:
         36:1e:25:6a:4a:aa:8c:50:b6:95:96:4f:89:82:2c:99:77:eb:
         91:e0:16:d3:ba:23:41:be:a3:9e:51:24:d0:0d:f9:7f:fb:a7:
         e0:74:e9:f4:fb:32:0b:a2:83:1a:40:d4:94:e8:d9:a5:ac:4d:
         95:23:cf:fd:5a:31:ef:65:9a:25:28:aa:a1:f7:f1:99:0b:d6:
         69:d5:cd:06:9a:53:50:2b:53:67:b2:42:12:e7:62:2f:e8:01:
         78:33:35:dc:02:9d:7f:dd:7e:e5:d2:e6:bd:79:b9:f0:20:84:
         b0:ac:31:40:f3:99:91:c1:d5:b5:86:07:34:ac:63:6a:dd:2e:
         25:11:92:d9:ac:4f:30:b9:7f:14:fa:2f:cd:bd:61:58:aa:04:
         21:71:ec:5e:12:e3:af:b6:54:83:87:a3:40:85:75:b3:94:13:
         ec:8a:cd:02:32:89:c9:fa:a7:3e:55:fc:f8:1c:4a:ad:99:a2:
         78:5e:c2:71:a7:a4:9d:88:0e:97:49:d9:c6:c2:3e:2d:69:ab:
         dc:32:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:17 2026 by rpki-client