This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa
File:                     3230302e35372e3136382e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier:          0buGS0/oMVasdtJQVIXYqZMBOLerrimB9/gI+W0QvG8=
Subject key identifier:   05:8E:04:C9:EF:2F:37:7E:4B:74:63:09:19:EB:35:AB:81:29:57:B2
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       0B200D0AD8A61E1C9778B38DF0A2FC55BFD222A8
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:48 +0000
ROA not before:           Sun 18 Jan 2026 07:20:48 +0000
ROA not after:            Sun 17 Jan 2027 07:25:48 +0000
asID:                     19373
IP address blocks:        200.57.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:0d:0a:d8:a6:1e:1c:97:78:b3:8d:f0:a2:fc:55:bf:d2:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:48 2026 GMT
            Not After : Jan 17 07:25:48 2027 GMT
        Subject: CN=058E04C9EF2F377E4B74630919EB35AB812957B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:6b:72:e4:fe:35:cf:f8:ef:83:a5:c4:b5:
                    4d:a3:52:91:c3:6d:67:25:89:8b:ab:fd:35:89:0a:
                    c7:2a:e9:a9:db:d9:4e:9c:91:92:75:20:1c:66:50:
                    02:e7:28:29:7b:05:24:14:65:98:41:cf:31:cd:d2:
                    ca:b9:3e:59:68:12:ba:e1:a2:aa:df:ea:85:ac:72:
                    1b:a8:cd:39:11:f7:c9:6d:7e:ee:76:37:5e:e1:24:
                    87:61:63:fe:e7:40:74:3f:7f:46:30:d5:0a:00:34:
                    b5:ce:e2:e9:53:b1:77:d4:54:50:4e:fc:de:37:4d:
                    50:8b:33:5d:3e:4e:f8:e6:15:6f:ec:f6:46:ab:df:
                    89:d8:a6:3b:87:5a:09:47:86:12:91:38:31:c6:66:
                    fb:78:e5:59:42:e7:2b:06:26:cc:d7:a3:51:d7:8e:
                    fb:22:2f:62:88:c4:6e:58:f7:a7:48:18:91:24:4d:
                    ab:4c:5f:ac:29:5d:31:dc:d6:07:15:27:e2:c6:9e:
                    5d:f7:6e:19:2f:c2:58:8f:ed:4d:a8:71:a9:63:d2:
                    78:77:fa:4d:36:48:56:a4:54:b5:60:e0:74:4e:28:
                    57:6f:e6:c6:91:88:5d:52:b0:40:43:c0:73:f3:26:
                    4a:2d:d2:db:44:83:40:47:dc:df:34:eb:9f:97:da:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:04:C9:EF:2F:37:7E:4B:74:63:09:19:EB:35:AB:81:29:57:B2
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230302e35372e3136382e302f32312d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:bc:0f:e6:d4:6f:a2:fc:a9:38:d4:d8:29:bc:a2:c1:51:
         e4:42:7c:db:cb:fa:27:dc:76:53:d4:70:ce:aa:12:c6:b5:48:
         8a:dc:3f:f9:82:94:47:5e:0b:54:30:2f:12:3a:b3:06:80:e4:
         a4:e3:f7:e9:fe:bf:e5:49:79:5f:9c:91:ea:3a:86:1f:ea:ab:
         35:7e:e5:44:48:4e:d4:82:ad:e4:05:fc:95:b8:0c:d3:6c:32:
         eb:c7:f2:9b:7c:f4:7c:a3:ec:f5:1b:18:9f:41:bd:05:51:fb:
         35:c7:b2:85:85:63:63:6d:6f:e4:56:5d:f5:10:8f:2a:5d:83:
         4a:1a:54:29:47:59:f6:c3:ea:12:d2:25:81:43:0a:4a:ac:4c:
         3e:27:8f:95:ab:0f:d4:54:22:c5:bf:bf:35:89:8d:0d:61:9d:
         2f:11:ff:84:5b:c3:c2:95:47:36:fc:31:fe:64:81:a2:05:76:
         6d:4a:4b:bd:a0:1c:01:f0:7c:3b:2f:98:92:99:58:97:33:a1:
         19:ae:fd:8e:c5:70:19:5c:b9:0f:fc:55:f9:e6:40:5f:01:72:
         1b:52:01:cf:d8:21:e2:68:c4:27:16:55:d2:db:26:b5:53:37:
         50:b9:3a:f1:1d:bd:83:1d:7c:1a:c0:10:f6:04:f5:04:04:b8:
         3f:a4:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:17 2026 by rpki-client