This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
File:                     3230302e372e38372e302f32342d3234203d3e203238303030.roa (raw, json)
Hash identifier:          +Z/96HeHDxmTzY6gMVhggnEt/JPCOcGijylV/MY0glM=
Subject key identifier:   F2:4C:DE:4A:72:C5:8F:E7:9F:64:F9:BA:05:B5:FD:D7:92:59:29:18
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       394BBF72A118F1C527FC4195122AEB535622C32E
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:36 +0000
ROA not before:           Tue 06 Jan 2026 19:10:36 +0000
ROA not after:            Tue 05 Jan 2027 19:15:36 +0000
asID:                     28000
IP address blocks:        200.7.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4b:bf:72:a1:18:f1:c5:27:fc:41:95:12:2a:eb:53:56:22:c3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:36 2026 GMT
            Not After : Jan  5 19:15:36 2027 GMT
        Subject: CN=F24CDE4A72C58FE79F64F9BA05B5FDD792592918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:66:03:89:20:9c:ca:b3:60:e8:af:69:99:
                    8d:c5:87:15:45:f0:03:a6:03:06:6b:16:7a:98:43:
                    cd:14:51:24:59:bf:79:15:1a:e4:9b:3b:fd:08:30:
                    69:67:a9:35:3d:fe:1b:3d:ea:22:42:0c:f5:c7:36:
                    77:b3:fd:f8:61:f6:bf:32:ad:f7:c6:59:63:bb:8d:
                    70:fa:7d:62:97:29:eb:81:fa:3f:11:01:79:b7:80:
                    9f:34:7f:cb:76:6b:2a:bd:21:01:25:bd:1a:4b:6c:
                    b4:d6:6d:47:d9:05:0a:36:5d:0d:d2:c2:4f:52:36:
                    36:d4:bf:2f:cd:3d:38:d2:dc:e9:39:c7:e7:fb:02:
                    74:07:cd:a2:b7:92:c2:29:ac:23:a3:01:2a:77:4a:
                    a7:d3:5f:61:d9:d6:43:3f:c7:c1:4c:9b:d6:bc:c4:
                    3d:00:c2:e5:5e:2c:8d:8f:a6:95:24:ba:30:14:53:
                    46:2c:fb:96:48:61:9a:17:cf:c6:32:bd:f0:da:9e:
                    8c:6a:24:c8:dd:f9:83:6f:a1:89:79:99:da:46:1d:
                    e9:97:90:15:ce:93:ee:a9:6b:20:19:2d:60:24:d1:
                    66:ec:05:77:23:05:87:23:2a:83:cd:4a:2f:00:26:
                    eb:2e:4f:9a:1c:16:ef:fe:3d:5a:24:75:47:bb:bb:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4C:DE:4A:72:C5:8F:E7:9F:64:F9:BA:05:B5:FD:D7:92:59:29:18
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38372e302f32342d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:77:d6:fa:f2:bb:07:10:b9:2c:f1:1e:7b:29:e4:ff:86:
         0e:4a:58:74:93:af:80:b8:67:6f:e6:dc:07:12:0e:82:6e:96:
         06:9d:67:83:13:84:07:39:13:dc:26:1f:2b:63:dd:35:78:fa:
         61:71:8c:4b:0c:9f:89:29:e0:10:0b:59:16:e1:a6:72:89:0b:
         b7:85:a9:48:30:3a:65:89:1f:e9:09:7d:c7:dd:bf:3a:19:25:
         20:c3:ac:8b:4c:e3:26:fb:eb:aa:02:45:a2:bf:65:73:f6:16:
         45:86:4c:d2:ce:57:45:e5:7b:ec:e1:91:26:f3:e7:ee:2f:bc:
         ba:ef:3e:4e:eb:54:18:5c:d3:98:c9:f3:7f:cd:82:5d:5b:01:
         2c:78:a0:12:38:08:6a:0b:f6:50:6c:29:4f:5f:2d:b1:a7:d5:
         c0:05:9e:ed:4c:7c:7d:a5:5f:22:f5:42:e4:78:fc:bb:70:fb:
         0f:2e:5d:c5:4a:ae:3b:0f:c5:56:70:7f:55:03:be:e7:f7:a3:
         fd:c7:cb:d3:fe:89:19:5e:9b:ed:48:8d:23:4e:d7:fc:4e:52:
         90:f0:bf:53:11:d7:36:96:35:ca:5d:90:20:c5:f4:fd:ab:36:
         f0:81:46:b7:ee:9f:67:30:25:d5:09:f9:a0:8b:db:0f:92:fe:
         f8:b0:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:11 2026 by rpki-client