This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
File:                     3230302e35322e3134342e302f32302d3234203d3e203237393332.roa (raw, json)
Hash identifier:          ceMZk545SNPYbjXRC0bSQPemevpvBV3JMshPzQlx6J4=
Subject key identifier:   19:AA:88:4B:70:A8:8D:FB:19:3B:7C:74:FA:06:CF:E7:6A:79:E8:49
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       41B0641F2903603937002F22C0B7EFD2E789A678
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa
Signing time:             Tue 06 Jan 2026 19:06:34 +0000
ROA not before:           Tue 06 Jan 2026 19:01:34 +0000
ROA not after:            Tue 05 Jan 2027 19:06:34 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b0:64:1f:29:03:60:39:37:00:2f:22:c0:b7:ef:d2:e7:89:a6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Jan  6 19:01:34 2026 GMT
            Not After : Jan  5 19:06:34 2027 GMT
        Subject: CN=19AA884B70A88DFB193B7C74FA06CFE76A79E849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:c5:6c:47:88:33:e9:54:11:42:eb:d6:b0:
                    35:f1:2f:9a:fa:99:3c:5c:6b:cb:ec:47:22:fa:fa:
                    39:57:70:47:77:d1:b5:a0:6c:9d:4f:0f:ef:cc:7f:
                    61:52:c2:02:0e:2b:4d:52:a4:80:4c:53:4f:ec:55:
                    d7:d6:37:eb:a4:e2:28:8e:62:18:aa:b9:bd:36:6a:
                    06:c8:f0:90:cc:fe:e5:c9:82:bd:1e:28:21:a0:9a:
                    16:ab:dc:e4:72:d0:ab:0b:fa:b7:b7:04:7c:94:64:
                    b1:c6:c5:f2:1b:81:97:ee:96:ea:88:9e:15:16:ef:
                    35:dc:66:c9:50:10:43:86:76:9e:c4:e6:2a:4b:59:
                    57:57:5b:69:50:aa:81:32:36:92:ce:5d:3f:bc:e0:
                    6d:ce:1f:56:ec:62:57:93:03:81:b8:d5:8e:b8:a6:
                    43:1c:3b:55:e3:f5:9f:95:39:d5:f2:dd:e0:11:97:
                    f2:ac:a9:a3:2c:9b:ba:e7:f2:dd:67:0b:a8:31:f5:
                    a9:2f:37:79:9c:c3:cc:cd:38:7a:9e:40:f4:cd:3f:
                    95:de:80:10:1c:b4:16:17:84:5b:68:d0:35:4c:e3:
                    c0:fc:f3:ee:03:8a:29:fc:75:02:35:24:32:4c:c4:
                    14:c4:54:63:a2:0a:68:35:e3:d2:38:64:03:06:81:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AA:88:4B:70:A8:8D:FB:19:3B:7C:74:FA:06:CF:E7:6A:79:E8:49
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:87:0d:65:05:b6:11:c9:cd:fc:ce:57:b9:b8:e1:d3:55:
         79:8c:34:50:83:49:53:ea:e8:c1:e5:a4:cf:fa:52:84:cd:d4:
         a9:95:e6:c8:ea:d2:2d:a7:1a:a1:27:0f:96:97:23:71:09:d0:
         3d:8c:11:00:03:40:b1:24:a0:13:27:dc:19:52:5e:cb:ce:12:
         6a:a0:41:c0:93:28:8c:25:3c:66:23:d1:7a:ea:e7:59:5e:cd:
         17:0f:05:2a:6d:8b:36:8e:2a:50:26:b7:92:b7:2a:b4:ec:51:
         d7:68:ad:a2:b9:7f:68:fa:f9:a7:b5:67:a0:4b:cf:2f:16:f2:
         2e:bb:2e:1c:77:c4:cd:fa:ef:5e:06:38:ac:96:ff:e6:73:55:
         c5:2c:f4:e9:36:7f:66:a7:2f:33:92:66:66:3c:4a:5c:35:8c:
         12:93:ea:08:9c:f8:eb:f1:d8:b6:61:07:cc:6d:c6:63:76:26:
         df:71:cc:4d:86:f9:f3:5f:74:6e:f2:76:79:79:c6:d9:9d:b4:
         3d:00:fa:09:4e:eb:ce:e1:cb:2c:3f:3b:0d:d3:0b:f7:ff:95:
         bc:4b:a8:2b:fc:b0:cb:3e:e7:75:93:ac:8a:43:cd:96:a0:af:
         55:46:52:e3:a2:8b:41:5c:b7:79:e2:00:ed:f3:49:3e:3f:05:
         2e:75:ff:db
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQbBkHykDYDk3AC8iwLfv0ueJpngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5QUZFODVEQzE5N0Q1MzdCQjk0MjY4NzVBRDdGMTJE
QzQwMjcwMjAeFw0yNjAxMDYxOTAxMzRaFw0yNzAxMDUxOTA2MzRaMDMxMTAvBgNV
BAMTKDE5QUE4ODRCNzBBODhERkIxOTNCN0M3NEZBMDZDRkU3NkE3OUU4NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaKcVsR4gz6VQRQuvWsDXxL5r6
mTxca8vsRyL6+jlXcEd30bWgbJ1PD+/Mf2FSwgIOK01SpIBMU0/sVdfWN+uk4iiO
Yhiqub02agbI8JDM/uXJgr0eKCGgmhar3ORy0KsL+re3BHyUZLHGxfIbgZfuluqI
nhUW7zXcZslQEEOGdp7E5ipLWVdXW2lQqoEyNpLOXT+84G3OH1bsYleTA4G41Y64
pkMcO1Xj9Z+VOdXy3eARl/KsqaMsm7rn8t1nC6gx9akvN3mcw8zNOHqeQPTNP5Xe
gBActBYXhFto0DVM48D88+4Diin8dQI1JDJMxBTEVGOiCmg149I4ZAMGgVWzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGaqIS3CojfsZO3x0+gbP52p56EkwHwYDVR0j
BBgwFoAUspr+hdwZfVN7uUJoda1/EtxAJwIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjRCNThBMDM4MTY2MDgwRTI3RjIzNjk4ODhFQTBFRUVF
QkZENzg4NjI0MTlDMTY1MzlFNzA4NEJGMTIwQzQzLzAvQjI5QUZFODVEQzE5N0Q1
MzdCQjk0MjY4NzVBRDdGMTJEQzQwMjcwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMjlBRkU4NURDMTk3RDUzN0JC
OTQyNjg3NUFEN0YxMkRDNDAyNzAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY0QjU4QTAzODE2NjA4MEUyN0YyMzY5ODg4RUEwRUVFRUJGRDc4ODYy
NDE5QzE2NTM5RTcwODRCRjEyMEM0My8wLzMyMzAzMDJlMzUzMjJlMzEzNDM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM5MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMg0kDAN
BgkqhkiG9w0BAQsFAAOCAQEADPiHDWUFthHJzfzOV7m44dNVeYw0UINJU+roweWk
z/pShM3UqZXmyOrSLacaoScPlpcjcQnQPYwRAANAsSSgEyfcGVJey84SaqBBwJMo
jCU8ZiPReurnWV7NFw8FKm2LNo4qUCa3krcqtOxR12itorl/aPr5p7VnoEvPLxby
LrsuHHfEzfrvXgY4rJb/5nNVxSz06TZ/ZqcvM5JmZjxKXDWMEpPqCJz46/HYtmEH
zG3GY3Ym33HMTYb58190bvJ2eXnG2Z20PQD6CU7rzuHLLD87DdML9/+VvEuoK/yw
yz7ndZOsikPNlqCvVUZS46KLQVy3eeIA7fNJPj8FLnX/2w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:17 2026 by rpki-client