This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3138342e302f32322d3233203d3e203130363137.roa
File:                     3230302e38312e3138342e302f32322d3233203d3e203130363137.roa (raw, json)
Hash identifier:          xi7JTE9z9FOzlBmqvw9Mn9C3hzG8MNEh/e7txHLhonA=
Subject key identifier:   87:A4:20:E1:2E:2E:F1:9E:C3:27:EE:08:A6:91:34:3C:EB:C3:CC:6C
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       302E17B7DAD66C480A4902054B4B97CF3441C475
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3138342e302f32322d3233203d3e203130363137.roa
Signing time:             Tue 06 Jan 2026 19:41:25 +0000
ROA not before:           Tue 06 Jan 2026 19:36:25 +0000
ROA not after:            Tue 05 Jan 2027 19:41:25 +0000
asID:                     10617
IP address blocks:        200.81.184.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:17:b7:da:d6:6c:48:0a:49:02:05:4b:4b:97:cf:34:41:c4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Jan  6 19:36:25 2026 GMT
            Not After : Jan  5 19:41:25 2027 GMT
        Subject: CN=87A420E12E2EF19EC327EE08A691343CEBC3CC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:25:37:4e:66:b6:dd:34:02:1b:fc:99:b5:a9:
                    bc:4f:7e:f6:78:4a:16:8e:73:44:a0:23:d4:0b:91:
                    04:20:20:2d:8c:11:4b:89:4f:a9:7b:10:8a:9a:d5:
                    9a:18:9f:0e:d8:a1:f1:3b:4b:5c:74:ab:cc:75:f5:
                    ad:ef:9e:91:99:b6:da:2b:64:d7:bd:9b:3d:22:0f:
                    28:6d:7b:6b:80:f8:dd:bb:7d:f6:49:04:33:bb:2c:
                    d3:d0:67:b4:3c:fc:86:90:48:78:7b:67:24:73:2a:
                    47:b2:84:f8:e2:76:e7:bf:af:96:1f:9c:5d:ff:87:
                    8e:a2:8e:2a:1e:88:2c:78:f7:cf:c1:e4:b7:ec:f6:
                    98:ee:80:60:2b:fe:30:b5:b7:78:d0:d3:5f:ef:77:
                    4f:f5:b6:1d:4c:fe:0a:24:5f:e2:81:95:b5:b7:37:
                    1f:84:27:4e:76:a6:e8:5e:77:cf:f0:d9:9c:10:ab:
                    9b:4c:31:27:fc:33:58:b5:87:11:a5:eb:7c:b8:c5:
                    52:a5:f4:a8:11:a4:3a:41:11:c9:53:a7:10:fa:8c:
                    ec:0d:46:22:6c:8f:98:90:44:dc:20:14:7e:f0:0a:
                    bf:7a:15:a0:86:be:63:2e:48:a5:d5:30:26:b8:c2:
                    8d:41:a3:9a:d7:fa:25:d9:5e:0e:07:10:2f:c3:58:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:20:E1:2E:2E:F1:9E:C3:27:EE:08:A6:91:34:3C:EB:C3:CC:6C
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3138342e302f32322d3233203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:a3:f5:75:bc:ec:2a:77:b0:63:8c:ef:30:f7:9d:eb:87:
         6b:19:61:23:db:50:41:05:62:79:8f:87:89:8b:31:22:75:a7:
         d4:5a:3e:4e:b1:d6:3c:2b:b0:be:54:cc:3e:95:ff:a2:ee:5b:
         bc:2f:5e:f6:e3:b8:7f:19:b7:fc:28:26:bb:19:f6:8a:c1:66:
         e5:20:d5:89:24:b4:fc:a8:c5:4b:56:ce:10:ef:14:8b:59:d5:
         b6:26:30:9e:9d:b4:36:4d:12:27:17:89:ea:8d:19:34:6d:60:
         7a:11:4a:da:21:b9:2b:fc:9b:aa:f6:c3:a3:ef:6f:ba:27:7f:
         24:6d:e0:a4:f3:0e:40:46:02:07:5f:69:0f:97:07:87:b9:50:
         f2:36:f0:d4:d0:54:29:14:a3:dc:2d:79:10:ea:b7:1f:16:b1:
         0d:5e:40:6a:88:c3:d9:f8:2b:b1:14:9f:37:b2:0e:1b:d3:28:
         d2:ff:72:2d:4c:3a:a5:e1:77:c9:1a:5a:e3:8e:80:3a:a0:df:
         88:cf:a0:cc:9f:d6:7d:88:e4:2c:9d:33:10:27:85:f4:b5:4e:
         20:fa:5a:cc:54:82:6b:28:f0:a1:1f:9b:e1:7b:91:f8:97:c8:
         e5:93:4c:6e:8a:be:a4:62:f9:c9:e8:0a:9a:a4:28:e2:71:06:
         17:81:64:a6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMC4Xt9rWbEgKSQIFS0uXzzRBxHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZENkRBRkJGNTUxMUM1MzU2OTMzMEZGRkQyRTlFNTY0
OTc0RDE0RDAeFw0yNjAxMDYxOTM2MjVaFw0yNzAxMDUxOTQxMjVaMDMxMTAvBgNV
BAMTKDg3QTQyMEUxMkUyRUYxOUVDMzI3RUUwOEE2OTEzNDNDRUJDM0NDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJTdOZrbdNAIb/Jm1qbxPfvZ4
ShaOc0SgI9QLkQQgIC2MEUuJT6l7EIqa1ZoYnw7YofE7S1x0q8x19a3vnpGZttor
ZNe9mz0iDyhte2uA+N27ffZJBDO7LNPQZ7Q8/IaQSHh7ZyRzKkeyhPjidue/r5Yf
nF3/h46ijioeiCx498/B5Lfs9pjugGAr/jC1t3jQ01/vd0/1th1M/gokX+KBlbW3
Nx+EJ052puhed8/w2ZwQq5tMMSf8M1i1hxGl63y4xVKl9KgRpDpBEclTpxD6jOwN
RiJsj5iQRNwgFH7wCr96FaCGvmMuSKXVMCa4wo1Bo5rX+iXZXg4HEC/DWKpPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUh6Qg4S4u8Z7DJ+4IppE0POvDzGwwHwYDVR0j
BBgwFoAUFtba+/VRHFNWkzD//S6eVkl00U0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NkE0ODNDODQwQjU5RDVBMzg2Q0MzNUZFODkxNzc0RjA3
Qzk0MEMyQTQ3M0EwQzgwOEZGNzlFOUQ2NzNBQzAxLzAvMTZENkRBRkJGNTUxMUM1
MzU2OTMzMEZGRkQyRTlFNTY0OTc0RDE0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNkQ2REFGQkY1NTExQzUzNTY5
MzMwRkZGRDJFOUU1NjQ5NzREMTRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzZBNDgzQzg0MEI1OUQ1QTM4NkNDMzVGRTg5MTc3NEYwN0M5NDBDMkE0
NzNBMEM4MDhGRjc5RTlENjczQUMwMS8wLzMyMzAzMDJlMzgzMTJlMzEzODM0MmUz
MDJmMzIzMjJkMzIzMzIwM2QzZTIwMzEzMDM2MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAshRuDAN
BgkqhkiG9w0BAQsFAAOCAQEAO/ej9XW87Cp3sGOM7zD3neuHaxlhI9tQQQVieY+H
iYsxInWn1Fo+TrHWPCuwvlTMPpX/ou5bvC9e9uO4fxm3/Cgmuxn2isFm5SDViSS0
/KjFS1bOEO8Ui1nVtiYwnp20Nk0SJxeJ6o0ZNG1gehFK2iG5K/ybqvbDo+9vuid/
JG3gpPMOQEYCB19pD5cHh7lQ8jbw1NBUKRSj3C15EOq3HxaxDV5AaojD2fgrsRSf
N7IOG9Mo0v9yLUw6peF3yRpa446AOqDfiM+gzJ/WfYjkLJ0zECeF9LVOIPpazFSC
ayjwoR+b4XuR+JfI5ZNMboq+pGL5yegKmqQo4nEGF4Fkpg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:13 2026 by rpki-client