This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa
File:                     3230302e31302e36312e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier:          url3hZxxaUtw7AlIEID7+OZxbvKCa30G7maKgVKfJis=
Subject key identifier:   07:A4:64:C8:1B:BE:6D:81:BD:DC:F8:9C:D9:8A:30:6C:42:22:41:B4
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       77DAB1C7559AEB02281241AD8AB1B47516EF013C
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:35 +0000
ROA not before:           Tue 06 Jan 2026 19:10:35 +0000
ROA not after:            Tue 05 Jan 2027 19:15:35 +0000
asID:                     28000
IP address blocks:        200.10.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:da:b1:c7:55:9a:eb:02:28:12:41:ad:8a:b1:b4:75:16:ef:01:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:35 2026 GMT
            Not After : Jan  5 19:15:35 2027 GMT
        Subject: CN=07A464C81BBE6D81BDDCF89CD98A306C422241B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:7e:71:85:b7:cf:88:a1:aa:8b:0b:9f:ef:
                    83:19:d6:2f:5b:76:85:26:66:e4:4a:d9:14:1e:4e:
                    13:e9:f9:fc:e6:81:b5:37:29:7d:3b:ca:30:7b:13:
                    3f:e4:1a:06:68:7f:7d:8a:c7:c8:48:a4:ce:f7:ed:
                    97:b8:dc:78:ee:95:d7:5a:ca:85:c5:95:70:e0:52:
                    f1:22:36:97:1b:5c:4c:a9:60:7d:b6:46:40:5b:e4:
                    c5:b4:95:dd:f2:8e:97:1b:9f:b8:d0:4b:7f:1a:d0:
                    ca:5d:44:4b:46:94:a1:a3:f5:ab:44:bf:f4:61:58:
                    3b:18:86:ac:b4:49:94:ca:80:22:09:70:fd:81:0e:
                    2e:31:9f:ad:cf:14:94:85:02:bd:b7:21:2c:d3:c2:
                    92:d8:58:66:cd:81:91:1d:4e:9a:a5:62:f3:17:40:
                    55:4a:58:5d:be:d3:eb:b1:15:c6:a9:77:c7:a4:63:
                    24:0e:84:aa:93:77:50:57:df:c7:41:87:01:20:a2:
                    c3:b5:8c:7d:59:6d:4a:61:c5:94:85:01:01:f6:82:
                    93:c5:a5:81:16:5c:5b:70:a5:b6:0a:b7:3f:15:df:
                    60:0a:ef:21:73:e6:0e:26:39:31:94:43:78:7c:2b:
                    51:91:6b:9a:d7:12:9e:d1:2a:48:1a:0e:cf:db:28:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A4:64:C8:1B:BE:6D:81:BD:DC:F8:9C:D9:8A:30:6C:42:22:41:B4
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36312e302f32342d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:ff:82:c0:86:ad:70:4f:25:d4:63:1c:0f:1f:63:cf:b4:
         e7:8e:01:bb:a5:d8:27:51:03:7e:a1:1b:62:50:bf:17:31:d6:
         12:61:5e:23:bf:25:09:dc:c3:2c:88:8a:4b:10:03:14:49:0b:
         b0:ba:4e:db:ba:a6:21:bb:27:59:7a:82:f3:3d:1a:0c:28:eb:
         2b:81:c5:49:ce:69:92:31:1d:d9:9a:30:06:ce:51:4f:4f:0d:
         50:18:fd:f0:e1:91:06:1d:d2:9e:45:ac:5b:49:ad:3d:8e:0c:
         ee:70:7e:07:3c:61:22:a5:23:aa:72:ec:c9:95:9b:c5:fc:f8:
         71:be:2d:8e:3a:dc:b4:fc:4a:47:9e:0c:e5:3b:20:56:e9:46:
         00:aa:02:a1:2a:90:a3:23:bc:be:bd:32:0c:3d:2f:4c:81:1b:
         57:15:2f:2b:e2:c1:a4:3a:cb:95:0c:6c:3d:4c:ff:ec:9f:34:
         c4:90:e0:65:da:a4:4d:1a:96:85:10:31:3e:a2:7c:23:47:39:
         c2:b5:02:d2:14:cc:64:cd:08:46:0f:2e:c9:e2:de:2a:54:81:
         a0:26:63:a2:89:d8:b3:06:be:0e:2b:47:9a:7b:b8:de:36:33:
         99:89:3e:81:9f:80:02:d8:47:e2:45:6e:56:8d:ce:81:d1:83:
         ce:3b:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:00 2026 by rpki-client