This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e203238313230.roa
File:                     3230302e3131342e38382e302f32312d3234203d3e203238313230.roa (raw, json)
Hash identifier:          DFNnqpfAKxzBqpoWlAhz1+Y0leH8Cckh6VSZO2IVsXg=
Subject key identifier:   4B:FA:F7:CC:5C:82:55:11:02:15:44:B8:0E:B5:16:1C:B1:3C:20:E3
Certificate issuer:       /CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Certificate serial:       220E5444C34A785F5B4A7A04D1214861956DE2AA
Authority key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e203238313230.roa
Signing time:             Tue 06 Jan 2026 19:19:08 +0000
ROA not before:           Tue 06 Jan 2026 19:14:08 +0000
ROA not after:            Tue 05 Jan 2027 19:19:08 +0000
asID:                     28120
IP address blocks:        200.114.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0e:54:44:c3:4a:78:5f:5b:4a:7a:04:d1:21:48:61:95:6d:e2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
        Validity
            Not Before: Jan  6 19:14:08 2026 GMT
            Not After : Jan  5 19:19:08 2027 GMT
        Subject: CN=4BFAF7CC5C825511021544B80EB5161CB13C20E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:25:8b:8d:b2:86:be:97:54:5c:d4:a0:84:
                    40:e7:c6:44:1e:a3:23:c2:5c:dc:ed:68:7e:47:0f:
                    2b:56:3a:71:6f:07:87:23:0c:74:b2:f7:58:10:cb:
                    bb:67:df:c1:54:84:dd:bb:70:29:5d:30:3c:71:49:
                    a9:15:9d:15:86:8a:53:ff:bf:53:a3:bb:fd:da:6d:
                    30:07:23:7d:5b:fb:7e:bf:ed:78:02:b7:8e:26:ab:
                    be:45:15:e8:13:ea:41:82:ce:18:12:71:ad:9a:96:
                    f1:ec:db:62:e4:2e:18:cb:58:86:f4:20:ca:b5:63:
                    dc:38:32:ce:b9:57:c5:7f:51:71:a1:08:76:4b:8e:
                    02:6e:1b:f5:27:d4:6c:27:24:4c:9e:6b:28:58:64:
                    45:69:a3:5e:5b:be:f5:8a:2a:e4:5a:9e:24:06:71:
                    1c:2a:78:ac:f3:ee:3c:78:0c:09:14:52:42:7e:47:
                    d9:b8:3f:a0:96:26:64:9a:6a:f9:c3:a5:ce:eb:99:
                    1f:ec:28:44:35:d1:91:4a:b2:8a:9f:6a:cf:fe:84:
                    a3:26:e9:6e:ce:0a:1e:18:5d:61:e5:d1:aa:29:4b:
                    17:5a:c2:91:5c:95:99:47:2a:87:51:57:00:b1:9b:
                    d7:e7:d2:0e:e5:2c:30:89:45:29:23:c9:23:ed:e4:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FA:F7:CC:5C:82:55:11:02:15:44:B8:0E:B5:16:1C:B1:3C:20:E3
            X509v3 Authority Key Identifier:
                keyid:FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/3230302e3131342e38382e302f32312d3234203d3e203238313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:be:ae:50:fd:b6:9c:80:3f:89:1f:a3:ac:a0:8d:51:f6:4e:
         04:6b:ba:85:9c:42:94:6f:11:2e:3b:24:98:c5:8c:1c:29:8c:
         11:de:2f:fd:d2:fe:a9:2e:ea:a4:a0:84:57:3a:49:3b:57:60:
         59:fb:96:0d:51:67:65:d0:50:86:44:04:ab:69:f5:ad:9a:d9:
         df:73:5e:24:e9:9c:42:99:8c:df:3f:09:30:cf:3e:61:05:fe:
         cf:96:e5:dd:35:74:97:a2:83:32:a4:32:76:fc:d1:ac:24:03:
         e9:cb:d8:be:22:da:7b:6b:72:c6:d4:7e:92:1d:41:2f:d8:96:
         fd:f6:b7:61:80:68:42:de:f5:b5:ed:15:d5:7c:18:0a:fa:3f:
         dc:43:5a:14:e6:ef:57:70:53:37:a8:30:cc:d7:4d:1e:48:bf:
         17:08:78:b6:c2:dc:5c:55:d0:c9:67:e9:69:36:54:78:16:cb:
         1a:e8:2b:a4:78:e4:13:6a:46:a9:2f:b1:66:1b:16:2e:83:d8:
         e9:e5:6f:4c:20:5d:be:be:11:42:96:76:0a:26:07:f9:e1:2d:
         78:5c:ba:6d:2a:fa:90:8a:c2:1c:77:c2:52:83:3f:35:4f:82:
         14:ae:4e:c0:b0:f8:17:51:54:a0:5f:83:be:bc:c0:6e:77:b7:
         51:49:77:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIg5URMNKeF9bSnoE0SFIYZVt4qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDRDNDRjJERTcxMEM4NUZCNkIzNkY1NTcwMkQwNEJG
NDYzMTZCMzAeFw0yNjAxMDYxOTE0MDhaFw0yNzAxMDUxOTE5MDhaMDMxMTAvBgNV
BAMTKDRCRkFGN0NDNUM4MjU1MTEwMjE1NDRCODBFQjUxNjFDQjEzQzIwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCSWLjbKGvpdUXNSghEDnxkQe
oyPCXNztaH5HDytWOnFvB4cjDHSy91gQy7tn38FUhN27cCldMDxxSakVnRWGilP/
v1Oju/3abTAHI31b+36/7XgCt44mq75FFegT6kGCzhgSca2alvHs22LkLhjLWIb0
IMq1Y9w4Ms65V8V/UXGhCHZLjgJuG/Un1GwnJEyeayhYZEVpo15bvvWKKuRaniQG
cRwqeKzz7jx4DAkUUkJ+R9m4P6CWJmSaavnDpc7rmR/sKEQ10ZFKsoqfas/+hKMm
6W7OCh4YXWHl0aopSxdawpFclZlHKodRVwCxm9fn0g7lLDCJRSkjySPt5KmTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUS/r3zFyCVRECFUS4DrUWHLE8IOMwHwYDVR0j
BBgwFoAU/c088t5xDIX7azb1VwLQS/RjFrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjZEREFCNkU5NEQ3NEJEMzMwNUVGQ0ZEMzc4QkU4OEUz
QkNEREQ3QTcxMjEyNzY2NTc3QkI2OUIyMzBFODk4LzAvRkRDRDNDRjJERTcxMEM4
NUZCNkIzNkY1NTcwMkQwNEJGNDYzMTZCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRENEM0NGMkRFNzEwQzg1RkI2
QjM2RjU1NzAyRDA0QkY0NjMxNkIzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI2RERBQjZFOTRENzRCRDMzMDVFRkNGRDM3OEJFODhFM0JDREREN0E3
MTIxMjc2NjU3N0JCNjlCMjMwRTg5OC8wLzMyMzAzMDJlMzEzMTM0MmUzODM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hyWDAN
BgkqhkiG9w0BAQsFAAOCAQEAB76uUP22nIA/iR+jrKCNUfZOBGu6hZxClG8RLjsk
mMWMHCmMEd4v/dL+qS7qpKCEVzpJO1dgWfuWDVFnZdBQhkQEq2n1rZrZ33NeJOmc
QpmM3z8JMM8+YQX+z5bl3TV0l6KDMqQydvzRrCQD6cvYviLae2tyxtR+kh1BL9iW
/fa3YYBoQt71te0V1XwYCvo/3ENaFObvV3BTN6gwzNdNHki/Fwh4tsLcXFXQyWfp
aTZUeBbLGugrpHjkE2pGqS+xZhsWLoPY6eVvTCBdvr4RQpZ2CiYH+eEteFy6bSr6
kIrCHHfCUoM/NU+CFK5OwLD4F1FUoF+DvrzAbne3UUl3OA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:36 2026 by rpki-client