This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
File:                     3230302e302e32312e302f32342d3235203d3e203238303137.roa (raw, json)
Hash identifier:          +fQRI1NkBMmr3crCZ58GRcLG13kJTKKSx4woRgF6iQI=
Subject key identifier:   84:CE:BC:4D:AC:CE:91:AB:96:4F:A6:BF:50:CE:3C:95:AB:1E:D8:6A
Certificate issuer:       /CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
Certificate serial:       07759309E69907C6A0A05867739E29137CE50766
Authority key identifier: D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa
Signing time:             Tue 06 Jan 2026 19:40:39 +0000
ROA not before:           Tue 06 Jan 2026 19:35:39 +0000
ROA not after:            Tue 05 Jan 2027 19:40:39 +0000
asID:                     28017
IP address blocks:        200.0.21.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:75:93:09:e6:99:07:c6:a0:a0:58:67:73:9e:29:13:7c:e5:07:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D097D27028EDDD1240D51150F45062D4CE0E87F4
        Validity
            Not Before: Jan  6 19:35:39 2026 GMT
            Not After : Jan  5 19:40:39 2027 GMT
        Subject: CN=84CEBC4DACCE91AB964FA6BF50CE3C95AB1ED86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:db:7e:84:dc:95:85:ba:be:f0:86:b4:a6:
                    21:43:38:ff:89:80:2f:72:4d:e6:fe:36:24:a0:49:
                    b8:76:2f:15:19:98:6f:8e:87:62:fa:de:2e:18:46:
                    cb:ef:54:c4:ce:25:91:90:dd:16:1f:fa:05:4a:d1:
                    66:8a:57:17:03:1a:6b:7d:09:b2:a8:70:8f:0c:71:
                    9f:11:ac:50:d5:e0:46:f1:5f:17:f2:18:df:a8:4f:
                    da:1a:9d:0e:8c:cc:29:1c:db:e5:a3:47:84:62:7e:
                    83:8a:87:76:1c:b7:4e:87:39:e5:4f:e4:ad:ac:68:
                    46:ac:6c:35:93:b2:8c:17:df:dd:52:47:3e:86:1c:
                    ce:c3:6d:76:87:97:c2:03:d2:ec:14:3a:08:3f:5b:
                    07:1c:c9:ef:02:09:18:05:33:33:cf:0e:57:c7:a0:
                    d0:b2:3d:dc:d7:b8:e5:37:d9:99:55:e0:ca:c7:ee:
                    2d:d2:be:f7:e5:d6:7f:83:10:2b:5b:87:eb:6e:67:
                    05:fc:b0:30:65:fc:ea:0f:12:d9:7f:d7:14:5e:fc:
                    c8:83:0b:68:43:2d:ae:84:8d:7f:22:53:8a:d7:5c:
                    f6:c9:30:a8:d4:13:2f:b5:64:1b:40:c3:db:c4:35:
                    28:94:db:81:9b:9c:6f:85:c6:cf:aa:6a:4b:bb:e8:
                    3b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:BC:4D:AC:CE:91:AB:96:4F:A6:BF:50:CE:3C:95:AB:1E:D8:6A
            X509v3 Authority Key Identifier:
                keyid:D0:97:D2:70:28:ED:DD:12:40:D5:11:50:F4:50:62:D4:CE:0E:87:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D097D27028EDDD1240D51150F45062D4CE0E87F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A05984420930F2E5C0482D4AB8FEEF63E530C9663E0ADC3B161C6365B5F93C8D/0/3230302e302e32312e302f32342d3235203d3e203238303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:03:f7:5d:96:0b:0d:98:9e:e4:0c:5e:20:ee:39:4e:ef:a4:
         4d:a0:fa:00:19:da:89:10:5a:44:b9:e3:cc:d3:13:e9:ea:15:
         a5:0e:0a:13:20:f7:0b:d2:56:dd:1a:f9:69:fa:eb:a5:8b:a4:
         e5:67:f9:7a:e3:6c:47:da:e6:fb:66:85:a5:b7:a0:8f:b0:07:
         39:03:cc:64:aa:93:0e:4a:c3:7e:c5:d8:d5:18:72:ba:68:cd:
         da:1c:b7:9a:1b:0e:2c:b7:d3:50:22:93:c2:9f:d4:28:02:12:
         b5:19:57:d8:51:86:5d:d0:ca:c8:e8:ad:7f:a6:c2:48:6f:7d:
         40:99:2a:dd:51:2a:35:57:d9:95:73:bc:e4:7d:d9:cc:7e:7d:
         c0:10:45:e1:93:7f:5d:e5:65:df:71:30:08:92:4f:32:98:0c:
         ab:12:75:cc:7c:97:a8:10:16:83:63:87:84:68:1d:2c:7a:5f:
         51:b6:e0:b7:f6:56:71:cb:50:13:62:6b:f1:d5:6d:58:8b:3f:
         52:7c:6c:57:ba:35:a1:87:fd:09:89:89:bd:16:68:d2:41:3d:
         60:9e:bc:d7:a7:f7:dc:e4:e4:78:73:a6:e7:a0:4e:63:f6:e5:
         73:14:9a:bf:fe:2d:61:bd:0f:84:44:55:a8:1f:c6:1b:b4:bc:
         64:84:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:01 2026 by rpki-client