This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          l0NeG5FGjbfazqQ6ctLHsOqfjUJxqk7Gho/fzj4Fd7I=
Subject key identifier:   50:53:39:32:9C:2D:93:6F:12:29:F6:5B:0A:39:ED:EF:34:E0:D8:51
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       2700AE3B9B6C9493A0E31CE8EC3263F75526B990
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 06 Jan 2026 19:09:01 +0000
ROA not before:           Tue 06 Jan 2026 19:04:01 +0000
ROA not after:            Tue 05 Jan 2027 19:09:01 +0000
asID:                     52283
IP address blocks:        200.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:00:ae:3b:9b:6c:94:93:a0:e3:1c:e8:ec:32:63:f7:55:26:b9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Jan  6 19:04:01 2026 GMT
            Not After : Jan  5 19:09:01 2027 GMT
        Subject: CN=505339329C2D936F1229F65B0A39EDEF34E0D851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:25:6e:06:96:c4:61:f2:0e:86:bd:dc:c0:
                    a1:a2:41:f2:d4:0f:5e:ba:a4:e7:dc:a4:91:18:0b:
                    90:6c:4a:ba:28:f1:d6:bd:8b:23:0c:5b:72:5a:36:
                    2b:ff:5c:58:2e:65:8a:15:22:83:44:bc:59:46:32:
                    35:31:94:29:8e:6f:05:6c:c9:e8:aa:fd:b5:4c:bd:
                    3c:48:5c:e7:bc:19:ab:d4:09:ae:6d:0b:93:4a:ac:
                    6c:c7:bb:a4:77:63:03:f4:49:19:28:a1:5d:4e:a8:
                    71:4a:93:8c:49:01:d6:15:84:3c:19:14:4b:2c:da:
                    4a:c6:ac:73:c4:a9:43:38:00:9c:6b:e9:a5:37:9a:
                    74:cc:8a:43:4e:7a:93:07:bf:5c:07:9a:85:99:dd:
                    72:02:ea:19:e5:54:0e:af:5b:60:6c:ec:3e:1c:4b:
                    48:49:9a:cc:99:98:95:00:d8:04:ab:59:3d:44:25:
                    c0:1d:39:2b:19:71:20:04:9d:75:92:dc:03:fd:18:
                    fe:2d:63:46:31:2c:fb:c0:95:de:de:43:d6:84:d6:
                    94:1f:5c:35:b3:5a:49:9d:e8:23:f1:77:ee:a9:f4:
                    ff:c0:b9:8b:49:f3:0d:28:4e:7e:31:82:2e:39:02:
                    ad:40:ed:d5:4e:a6:78:ed:39:87:fa:79:25:15:0a:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:53:39:32:9C:2D:93:6F:12:29:F6:5B:0A:39:ED:EF:34:E0:D8:51
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131332e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:14:79:e1:39:ff:1a:3c:75:f0:0c:2b:b2:60:9f:03:69:
         36:7c:79:54:cc:00:58:e2:50:6e:0b:db:f2:4d:89:3d:cf:d2:
         8b:f8:27:cc:4f:30:7d:45:1a:cd:ed:ff:58:ea:bb:8b:1e:24:
         a8:50:3e:69:4f:e2:d7:da:4f:72:19:8a:cc:6a:be:ce:fd:8d:
         de:7b:78:e8:17:ff:bb:67:4e:04:12:c0:be:0f:79:90:1d:05:
         72:0f:33:6f:20:a6:d4:5a:af:8b:54:03:3d:90:7c:29:ef:0c:
         31:cf:ee:bc:67:66:23:08:cb:0e:35:fa:63:ed:1b:d5:60:b9:
         ef:e9:f3:60:70:6e:8a:b1:d8:9b:45:3a:14:74:5a:05:5a:67:
         3f:15:04:b9:4b:cd:8e:9f:4d:4d:c5:03:42:0f:2f:6d:0d:9a:
         df:a2:5b:ba:24:13:c6:6d:37:a7:42:85:74:06:d8:c2:68:f6:
         d1:5a:b1:cd:3b:21:a9:34:bb:1f:c1:4b:46:26:50:48:58:81:
         fc:52:15:48:42:17:d8:a7:91:de:16:b2:d3:f3:a8:07:1c:ed:
         61:df:b6:e6:10:66:b4:8a:44:3d:b1:6d:bb:dd:f7:21:13:26:
         84:84:ce:bc:fa:57:52:2f:5b:0e:ad:5c:8f:58:c1:45:12:f4:
         ef:ba:58:19
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJwCuO5tslJOg4xzo7DJj91UmuZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2ODE0NEZBQTA3NUQzRDlCMTBFRjY5MUZDNTVFNkEz
QTNFMTcyRTAeFw0yNjAxMDYxOTA0MDFaFw0yNzAxMDUxOTA5MDFaMDMxMTAvBgNV
BAMTKDUwNTMzOTMyOUMyRDkzNkYxMjI5RjY1QjBBMzlFREVGMzRFMEQ4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqCVuBpbEYfIOhr3cwKGiQfLU
D166pOfcpJEYC5BsSroo8da9iyMMW3JaNiv/XFguZYoVIoNEvFlGMjUxlCmObwVs
yeiq/bVMvTxIXOe8GavUCa5tC5NKrGzHu6R3YwP0SRkooV1OqHFKk4xJAdYVhDwZ
FEss2krGrHPEqUM4AJxr6aU3mnTMikNOepMHv1wHmoWZ3XIC6hnlVA6vW2Bs7D4c
S0hJmsyZmJUA2ASrWT1EJcAdOSsZcSAEnXWS3AP9GP4tY0YxLPvAld7eQ9aE1pQf
XDWzWkmd6CPxd+6p9P/AuYtJ8w0oTn4xgi45Aq1A7dVOpnjtOYf6eSUVCkgJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUFM5Mpwtk28SKfZbCjnt7zTg2FEwHwYDVR0j
BBgwFoAUsWgUT6oHXT2bEO9pH8Veajo+Fy4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTRBMzY2NzFGQTdEQkE5MTFCOThBNDZDRDUxOTYyRDk2
NjVCMERFNjhFQTUwRUJGNDNDOTJFQUU4MDIwRkZBLzAvQjE2ODE0NEZBQTA3NUQz
RDlCMTBFRjY5MUZDNTVFNkEzQTNFMTcyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTY4MTQ0RkFBMDc1RDNEOUIx
MEVGNjkxRkM1NUU2QTNBM0UxNzJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU0QTM2NjcxRkE3REJBOTExQjk4QTQ2Q0Q1MTk2MkQ5NjY1QjBERTY4
RUE1MEVCRjQzQzkyRUFFODAyMEZGQS8wLzMyMzAzMDJlMzEzMDM4MmUzMTMxMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGxx
MA0GCSqGSIb3DQEBCwUAA4IBAQCswxR54Tn/Gjx18AwrsmCfA2k2fHlUzABY4lBu
C9vyTYk9z9KL+CfMTzB9RRrN7f9Y6ruLHiSoUD5pT+LX2k9yGYrMar7O/Y3ee3jo
F/+7Z04EEsC+D3mQHQVyDzNvIKbUWq+LVAM9kHwp7wwxz+68Z2YjCMsONfpj7RvV
YLnv6fNgcG6KsdibRToUdFoFWmc/FQS5S82On01NxQNCDy9tDZrfolu6JBPGbTen
QoV0BtjCaPbRWrHNOyGpNLsfwUtGJlBIWIH8UhVIQhfYp5HeFrLT86gHHO1h37bm
EGa0ikQ9sW273fchEyaEhM68+ldSL1sOrVyPWMFFEvTvulgZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:31 2026 by rpki-client