This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32302e302f32332d3235203d3e203238303137.roa
File:                     3230302e302e32302e302f32332d3235203d3e203238303137.roa (raw, json)
Hash identifier:          N/SNRDCHSA9dLRaNfEkaqMizU0basfVMdtZVc5m07Es=
Subject key identifier:   9C:17:3C:B1:F4:12:0F:D7:7C:43:10:66:DC:97:44:96:61:46:43:50
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       41BC3F1F2EEB0AB6D73D167F3E9DAF982F9A3A66
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32302e302f32332d3235203d3e203238303137.roa
Signing time:             Tue 06 Jan 2026 19:40:38 +0000
ROA not before:           Tue 06 Jan 2026 19:35:38 +0000
ROA not after:            Tue 05 Jan 2027 19:40:38 +0000
asID:                     28017
IP address blocks:        200.0.20.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:3f:1f:2e:eb:0a:b6:d7:3d:16:7f:3e:9d:af:98:2f:9a:3a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Jan  6 19:35:38 2026 GMT
            Not After : Jan  5 19:40:38 2027 GMT
        Subject: CN=9C173CB1F4120FD77C431066DC97449661464350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:60:7b:d3:c0:e1:1b:d0:07:e3:ef:cd:4a:
                    be:9c:ce:f4:75:9c:a6:97:94:02:af:59:cc:80:6a:
                    b7:27:5c:6e:87:ef:4e:eb:fe:42:55:f3:c9:c2:63:
                    02:ba:82:84:6f:52:ca:8a:a2:1e:81:7c:2a:ad:4d:
                    04:a0:0d:35:39:a0:53:08:52:6e:26:b2:c9:1d:92:
                    5f:e4:c9:1a:62:44:4a:a3:b3:10:af:e5:fb:6d:14:
                    66:93:e4:25:95:5b:e6:82:e5:ab:a0:69:94:a5:be:
                    6d:01:c6:90:44:1d:65:76:fe:8b:e2:56:ee:93:b6:
                    e8:ce:f6:64:04:c6:7c:63:8f:61:87:c3:af:46:55:
                    16:37:3a:db:ae:af:3a:8a:b7:d8:6f:9e:18:6a:cf:
                    aa:53:43:4b:4c:7d:c6:a0:22:52:eb:20:fd:16:32:
                    26:a2:3e:5e:c7:56:9b:a3:76:0c:41:4d:a0:8b:8e:
                    be:02:a5:db:1f:09:d9:f3:f3:f1:a2:97:d1:56:fe:
                    55:d3:7e:5b:50:51:47:e5:75:2f:72:c0:16:99:41:
                    2e:b2:51:b2:55:30:78:cc:03:d1:3d:3b:09:b1:58:
                    b9:e5:22:2d:3d:a4:6a:a8:96:ce:ce:a7:eb:c8:32:
                    db:6c:65:41:04:90:e8:63:08:d1:e4:93:a8:b5:db:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:17:3C:B1:F4:12:0F:D7:7C:43:10:66:DC:97:44:96:61:46:43:50
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32302e302f32332d3235203d3e203238303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:d4:60:60:c0:28:e6:f2:5d:62:88:e8:61:ec:e7:d7:8a:
         3f:6f:59:c2:f7:f8:cf:23:28:07:c4:15:a6:42:7d:74:0f:cc:
         ae:5b:72:50:4c:ce:13:54:ad:ac:3b:09:12:a3:0b:05:ef:1c:
         06:61:2d:55:71:51:36:f2:17:78:df:5e:5f:b0:a5:db:eb:95:
         48:0e:c0:ed:57:af:86:9e:49:97:2f:ca:7e:46:bf:10:75:72:
         68:d6:1d:e0:dd:f9:0b:38:a4:61:c3:be:26:1e:09:87:6d:99:
         9e:7a:a4:93:b5:01:89:6c:ee:d7:0e:18:d0:60:53:74:4f:cc:
         10:5a:b9:ba:ba:60:90:1e:4a:23:f1:a3:f2:3f:9c:88:c0:16:
         0f:8e:44:94:ab:90:91:fa:d5:23:7c:04:fa:20:e4:ab:88:09:
         69:db:7d:34:67:41:28:43:f3:c0:b9:7f:59:ab:50:2b:dd:8a:
         d3:a7:18:29:b0:10:f7:ab:45:6f:8a:a3:27:47:31:55:1f:2c:
         b4:ad:f5:82:98:35:37:c0:9a:78:77:f1:f1:a2:aa:6f:0c:38:
         40:e1:62:b3:95:51:ae:c9:e1:c3:d0:5f:dd:05:4e:1b:a8:8e:
         7f:7d:d7:a1:01:f3:dc:96:96:62:aa:87:6e:b0:57:14:3c:ed:
         f6:c7:37:af
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQbw/Hy7rCrbXPRZ/Pp2vmC+aOmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5N0QyNzAyOEVEREQxMjQwRDUxMTUwRjQ1MDYyRDRD
RTBFODdGNDAeFw0yNjAxMDYxOTM1MzhaFw0yNzAxMDUxOTQwMzhaMDMxMTAvBgNV
BAMTKDlDMTczQ0IxRjQxMjBGRDc3QzQzMTA2NkRDOTc0NDk2NjE0NjQzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE92B708DhG9AH4+/NSr6czvR1
nKaXlAKvWcyAarcnXG6H707r/kJV88nCYwK6goRvUsqKoh6BfCqtTQSgDTU5oFMI
Um4msskdkl/kyRpiREqjsxCv5fttFGaT5CWVW+aC5augaZSlvm0BxpBEHWV2/ovi
Vu6TtujO9mQExnxjj2GHw69GVRY3OtuurzqKt9hvnhhqz6pTQ0tMfcagIlLrIP0W
MiaiPl7HVpujdgxBTaCLjr4CpdsfCdnz8/Gil9FW/lXTfltQUUfldS9ywBaZQS6y
UbJVMHjMA9E9OwmxWLnlIi09pGqols7Op+vIMttsZUEEkOhjCNHkk6i12w6TAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUnBc8sfQSD9d8QxBm3JdElmFGQ1AwHwYDVR0j
BBgwFoAU0JfScCjt3RJA1RFQ9FBi1M4Oh/QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMDU5ODQ0MjA5MzBGMkU1QzA0ODJENEFCOEZFRUY2M0U1
MzBDOTY2M0UwQURDM0IxNjFDNjM2NUI1RjkzQzhELzAvRDA5N0QyNzAyOEVEREQx
MjQwRDUxMTUwRjQ1MDYyRDRDRTBFODdGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMDk3RDI3MDI4RURERDEyNDBE
NTExNTBGNDUwNjJENENFMEU4N0Y0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTA1OTg0NDIwOTMwRjJFNUMwNDgyRDRBQjhGRUVGNjNFNTMwQzk2NjNF
MEFEQzNCMTYxQzYzNjVCNUY5M0M4RC8wLzMyMzAzMDJlMzAyZTMyMzAyZTMwMmYz
MjMzMmQzMjM1MjAzZDNlMjAzMjM4MzAzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByAAUMA0GCSqG
SIb3DQEBCwUAA4IBAQCV9NRgYMAo5vJdYojoYezn14o/b1nC9/jPIygHxBWmQn10
D8yuW3JQTM4TVK2sOwkSowsF7xwGYS1VcVE28hd4315fsKXb65VIDsDtV6+GnkmX
L8p+Rr8QdXJo1h3g3fkLOKRhw74mHgmHbZmeeqSTtQGJbO7XDhjQYFN0T8wQWrm6
umCQHkoj8aPyP5yIwBYPjkSUq5CR+tUjfAT6IOSriAlp2300Z0EoQ/PAuX9Zq1Ar
3YrTpxgpsBD3q0VviqMnRzFVHyy0rfWCmDU3wJp4d/HxoqpvDDhA4WKzlVGuyeHD
0F/dBU4bqI5/fdehAfPclpZiqodusFcUPO32xzev
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:30 2026 by rpki-client