This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa
File:                     3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          ob5VdA5SI6pSofUFuESU6X0YwHWSMckl3sNINGt/HTs=
Subject key identifier:   D7:91:F8:72:33:A3:53:C0:7A:34:11:05:20:4A:82:BA:42:CF:0E:4A
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       711DFA9591CFEFD21302F9CC98F79410DE3C4060
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:16 +0000
ROA not before:           Tue 06 Jan 2026 19:15:16 +0000
ROA not after:            Tue 05 Jan 2027 19:20:16 +0000
asID:                     11014
IP address blocks:        200.110.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1d:fa:95:91:cf:ef:d2:13:02:f9:cc:98:f7:94:10:de:3c:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:16 2026 GMT
            Not After : Jan  5 19:20:16 2027 GMT
        Subject: CN=D791F87233A353C07A341105204A82BA42CF0E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:12:a0:45:3f:e7:0a:84:5a:b4:ee:7f:a5:
                    a1:d7:99:99:82:ce:b1:b8:77:9f:8f:d5:f8:51:2b:
                    68:18:91:31:ba:d0:b9:32:4d:8d:f0:e3:22:2d:18:
                    bb:57:9d:53:eb:94:10:c6:ae:01:4d:f7:48:6c:74:
                    e7:fc:5a:8d:68:a8:9a:cd:38:9a:79:f6:01:e1:05:
                    40:72:cc:fc:f6:6b:4c:d8:59:9c:1a:4e:1e:cb:37:
                    03:fd:bd:08:27:ae:53:ae:5e:30:7d:78:68:17:c2:
                    13:d2:51:27:90:b4:d0:3d:31:5f:17:55:60:6d:1b:
                    d4:3e:6a:51:4b:60:88:28:48:5e:db:18:6e:1f:96:
                    62:cb:5d:f9:21:6e:e2:bb:24:18:0a:d4:78:ea:9d:
                    d4:e8:41:ca:81:9e:63:b7:1c:d3:ea:04:0b:6d:3d:
                    9c:1e:6b:76:48:72:6e:e5:c1:81:7f:9f:ba:24:3e:
                    a7:dc:65:db:f1:dc:ac:3d:99:6b:24:0e:51:97:be:
                    66:bc:f9:e9:73:6c:2f:c3:e4:48:a9:43:ff:b1:d4:
                    48:31:88:65:53:ff:ec:5c:90:1d:7b:e1:4d:a5:d5:
                    08:bb:5b:71:f8:17:39:d8:89:ff:53:18:d7:6f:47:
                    ab:66:9b:e3:4b:73:43:0b:89:15:56:81:3c:e6:0b:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:F8:72:33:A3:53:C0:7A:34:11:05:20:4A:82:BA:42:CF:0E:4A
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3230302e3131302e3231362e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:14:da:c9:34:71:8d:77:f4:97:ae:12:66:cd:61:7d:8e:
         21:4b:c6:d8:38:0f:ee:9d:2d:1f:5f:45:b5:01:31:05:b6:80:
         b8:17:ae:24:2a:89:e3:65:3f:a2:a8:b9:2b:fd:53:bb:b8:d4:
         3d:61:3c:3f:69:db:9a:19:1e:2e:99:28:cc:7c:19:a0:4a:dd:
         08:dd:e7:6f:92:16:47:dc:9a:61:a4:f5:03:26:bb:26:a2:54:
         9e:ac:9d:0d:25:01:2c:bb:6e:fc:60:9f:36:91:af:cd:08:29:
         81:7f:38:a4:96:0f:a3:85:7e:49:ab:0d:45:db:ae:91:51:78:
         22:18:0d:73:0b:48:2c:55:e5:82:28:77:e1:f4:86:01:b5:ca:
         5f:5f:da:38:ea:86:e5:47:a1:07:f6:f8:14:5c:7f:33:a8:88:
         d3:b0:76:2a:73:a8:58:8b:79:8f:72:0b:1c:18:32:bd:88:24:
         de:a7:fd:b4:2a:f8:63:e7:ae:50:2c:d5:00:b7:25:8d:7b:a1:
         e1:c7:90:59:2e:0f:a6:e7:95:ac:29:7b:6a:0d:08:e2:58:ff:
         be:ce:42:0f:12:44:d8:4e:36:64:72:da:58:b7:8a:08:ad:51:
         22:0d:3f:bc:78:be:69:9b:4e:9e:a2:b6:a7:e7:82:50:0f:36:
         ff:14:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:38 2026 by rpki-client