This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
File:                     3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa (raw, json)
Hash identifier:          oPp6UGQlyGQ0sKd26xURz9hcafPwH66qbmF2Ihllejg=
Subject key identifier:   56:21:B2:BA:1A:CB:DF:A7:CD:A9:9D:D8:E0:57:51:4C:88:E6:C5:16
Certificate issuer:       /CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
Certificate serial:       52C4912EA6EC0D8A57526EEE9D8EEF64613501E2
Authority key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
Signing time:             Tue 06 Jan 2026 19:05:35 +0000
ROA not before:           Tue 06 Jan 2026 19:00:35 +0000
ROA not after:            Tue 05 Jan 2027 19:05:35 +0000
asID:                     270033
IP address blocks:        177.200.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c4:91:2e:a6:ec:0d:8a:57:52:6e:ee:9d:8e:ef:64:61:35:01:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
        Validity
            Not Before: Jan  6 19:00:35 2026 GMT
            Not After : Jan  5 19:05:35 2027 GMT
        Subject: CN=5621B2BA1ACBDFA7CDA99DD8E057514C88E6C516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:f4:00:3e:c9:92:75:16:14:ce:28:ae:2b:
                    10:f7:be:f9:1e:fe:25:f4:a4:2f:34:f3:86:3d:2d:
                    1f:3c:c6:d4:d3:14:b1:46:b7:13:f6:3c:f2:ca:8f:
                    02:2e:cf:a8:7f:b9:45:0c:ed:24:46:b2:09:4a:83:
                    9e:1a:c9:ea:b3:bd:b7:89:6b:79:9e:cd:ae:1e:72:
                    c4:74:89:1d:4a:07:e2:f0:de:42:67:60:13:a5:d0:
                    80:c7:82:c3:af:5f:36:61:c4:09:97:f6:bf:f4:57:
                    97:ad:cc:3d:1b:29:3a:15:07:8a:d7:ad:48:75:40:
                    c9:11:ef:24:d2:78:67:a0:a8:52:6a:28:b6:2d:47:
                    45:aa:0b:2b:ef:3d:8a:1b:de:c4:ec:53:ff:94:b5:
                    3b:5a:30:73:52:3a:f6:94:5f:8d:83:f7:29:80:c6:
                    11:d5:5e:6c:24:47:58:84:71:13:b3:f7:d0:5a:c5:
                    4f:18:65:56:d0:ee:dc:3a:18:79:eb:8e:e2:b9:a8:
                    b4:ce:3d:64:d9:5d:fc:63:71:2e:98:bf:ad:a6:27:
                    7e:c3:cc:b1:ab:26:9c:55:87:81:60:bc:93:f4:ec:
                    62:21:a8:83:b5:5b:36:de:a7:fc:93:bd:23:90:11:
                    3a:49:75:32:38:f3:75:b7:92:6d:5a:f8:64:a9:7d:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:B2:BA:1A:CB:DF:A7:CD:A9:9D:D8:E0:57:51:4C:88:E6:C5:16
            X509v3 Authority Key Identifier:
                keyid:C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:88:c9:98:1d:e1:4d:86:89:a6:9a:13:17:80:30:5c:b7:
         ca:f3:79:aa:d2:18:25:d6:02:c1:f2:a1:ee:3c:51:4b:c2:fd:
         87:d6:16:6d:d3:24:91:b3:00:77:58:a8:01:81:d6:3d:8f:84:
         9e:8b:2a:f1:be:c5:9d:5c:40:56:5b:d1:e7:d3:b7:a2:67:7f:
         da:d5:2d:a8:ec:92:ec:3e:33:47:d6:27:ae:be:00:31:48:da:
         b3:66:c8:83:7e:ff:55:84:87:ca:a2:e0:02:0a:4a:a6:b5:df:
         66:d0:b5:9d:15:89:8b:04:76:22:e7:2e:77:af:44:58:52:b2:
         f6:dd:f5:4f:34:01:56:00:43:2e:d7:58:91:33:67:3b:f3:b9:
         d7:8b:94:48:02:f4:45:c7:49:da:46:2e:56:1f:c3:9b:a2:67:
         61:be:d0:ff:47:5e:1a:b9:21:41:c4:64:bc:03:62:f4:5e:34:
         37:4c:4c:bb:f9:f3:fb:bd:d9:d0:7d:44:04:2d:33:ed:33:fd:
         a2:2f:7f:bf:a4:ed:82:04:c7:53:69:41:8f:0a:33:bc:1e:55:
         85:b8:1b:d7:13:7d:17:e6:bf:b6:cf:dc:4e:5f:70:55:0b:13:
         b2:8b:88:36:bc:db:36:a9:05:fd:15:e7:bb:c3:de:f3:39:70:
         6e:be:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:06 2026 by rpki-client