This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
File:                     3230302e37312e3234302e302f32312d3234203d3e203237373137.roa (raw, json)
Hash identifier:          WAQn5NcnluLcBnSJsMocuuke8KUrE3pOLnr1rEzGF6I=
Subject key identifier:   76:34:59:67:DE:14:10:4A:6C:90:38:81:A0:B4:96:FF:B6:BF:17:95
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       4C4213855CFF243BAB58886CD0C99FB088515D5A
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa
Signing time:             Tue 06 Jan 2026 19:16:13 +0000
ROA not before:           Tue 06 Jan 2026 19:11:13 +0000
ROA not after:            Tue 05 Jan 2027 19:16:13 +0000
asID:                     27717
IP address blocks:        200.71.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:13:85:5c:ff:24:3b:ab:58:88:6c:d0:c9:9f:b0:88:51:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Jan  6 19:11:13 2026 GMT
            Not After : Jan  5 19:16:13 2027 GMT
        Subject: CN=76345967DE14104A6C903881A0B496FFB6BF1795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:02:4d:92:54:40:ab:1f:45:5b:a2:eb:c2:
                    f1:3f:92:45:9a:8d:a5:f1:df:dc:27:b3:1e:47:e2:
                    ea:6e:d4:e4:fc:c8:78:21:01:d7:32:b7:9c:69:dd:
                    38:8d:64:63:44:a5:10:53:d0:98:7b:df:2b:ed:82:
                    4b:79:d2:e4:80:bf:7b:27:44:ca:72:19:bd:58:80:
                    19:5b:fb:69:53:a6:65:06:69:fa:5b:1a:cf:a3:1b:
                    38:75:76:7b:28:6e:c3:ae:a8:bf:af:95:72:13:ce:
                    a7:ea:b9:d2:d6:0b:4b:a6:1a:9b:ee:a0:18:ff:e7:
                    7e:51:86:7e:d6:f5:7f:90:0f:70:a3:a9:08:44:94:
                    13:78:5e:25:9f:66:cf:68:c5:a7:af:69:c3:93:12:
                    76:a5:8e:91:03:dd:37:40:45:3d:36:6f:bd:34:2b:
                    04:ea:96:af:7a:4e:77:cf:b9:15:bd:06:a0:f7:27:
                    a1:dc:61:dc:d2:dc:9d:56:a5:5d:a9:ea:16:bf:4d:
                    43:45:dc:a3:6f:37:8d:72:79:c8:c2:54:fd:f0:23:
                    f0:f1:af:49:a6:28:36:26:d6:2e:ce:22:a0:03:6e:
                    77:ee:83:c5:a5:5f:ac:12:d1:31:73:d1:9a:64:34:
                    ab:34:0e:ba:db:02:ea:5a:37:8b:54:ea:59:98:45:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:59:67:DE:14:10:4A:6C:90:38:81:A0:B4:96:FF:B6:BF:17:95
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3230302e37312e3234302e302f32312d3234203d3e203237373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:38:9d:69:64:9e:00:e5:0f:f1:4e:4e:62:a9:4b:a1:eb:3e:
         86:4d:b2:8d:de:3b:5c:47:96:38:70:4d:23:69:30:d0:bb:08:
         e6:aa:0f:0d:45:4e:98:19:e9:8b:19:61:2e:0b:da:c0:e1:1d:
         3b:6f:6a:4c:2d:86:a0:d3:3d:02:95:5f:02:94:f1:39:3f:35:
         d3:61:f9:e2:26:8e:e2:30:67:ec:0b:d9:40:b1:0f:42:d6:8c:
         42:ad:ad:5c:d8:cf:a4:a3:6a:5d:b4:ec:56:fb:ed:c2:3a:4f:
         f3:f3:65:1f:1b:82:a1:62:b8:e2:10:c5:d9:65:eb:be:15:64:
         b8:20:69:76:18:5e:e2:15:88:18:f1:e7:58:e4:65:a0:35:84:
         8e:65:93:fd:c7:3f:39:2c:7b:b1:af:a0:8f:83:c4:13:cd:33:
         2b:41:99:51:c5:43:f4:f9:f1:0c:87:a2:07:ed:21:54:79:ce:
         45:fd:6b:15:61:0e:b7:8a:73:0c:23:89:84:e2:47:a1:9c:f7:
         47:45:5e:71:42:69:71:ae:3c:27:25:64:da:6e:3e:cc:b4:bf:
         89:86:23:73:3a:6c:b9:62:5a:88:bb:f4:29:06:58:82:de:5e:
         6c:ff:8e:b5:73:3c:02:e5:24:d3:cb:73:36:de:fb:da:b5:54:
         d9:e9:6d:4d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTEIThVz/JDurWIhs0MmfsIhRXVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1MkExNkQzQUM1OTcyNjhFNzgyRjQ5MzAxMDFFOTBE
NjY4QTAxMjAeFw0yNjAxMDYxOTExMTNaFw0yNzAxMDUxOTE2MTNaMDMxMTAvBgNV
BAMTKDc2MzQ1OTY3REUxNDEwNEE2QzkwMzg4MUEwQjQ5NkZGQjZCRjE3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAQJNklRAqx9FW6LrwvE/kkWa
jaXx39wnsx5H4upu1OT8yHghAdcyt5xp3TiNZGNEpRBT0Jh73yvtgkt50uSAv3sn
RMpyGb1YgBlb+2lTpmUGafpbGs+jGzh1dnsobsOuqL+vlXITzqfqudLWC0umGpvu
oBj/535Rhn7W9X+QD3CjqQhElBN4XiWfZs9oxaevacOTEnaljpED3TdART02b700
KwTqlq96TnfPuRW9BqD3J6HcYdzS3J1WpV2p6ha/TUNF3KNvN41yecjCVP3wI/Dx
r0mmKDYm1i7OIqADbnfug8WlX6wS0TFz0ZpkNKs0DrrbAupaN4tU6lmYRb4LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdjRZZ94UEEpskDiBoLSW/7a/F5UwHwYDVR0j
BBgwFoAUSVKhbTrFlyaOeC9JMBAekNZooBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjYxNTExMEFBMDRFMzQzRjVDOEI1RTJFMjNERjE1MERE
MjlGRjUyNjY2MTAwNUJBM0E4NDkzNkIxOTVERjRBLzAvNDk1MkExNkQzQUM1OTcy
NjhFNzgyRjQ5MzAxMDFFOTBENjY4QTAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OTUyQTE2RDNBQzU5NzI2OEU3
ODJGNDkzMDEwMUU5MEQ2NjhBMDEyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI2MTUxMTBBQTA0RTM0M0Y1QzhCNUUyRTIzREYxNTBERDI5RkY1MjY2
NjEwMDVCQTNBODQ5MzZCMTk1REY0QS8wLzMyMzAzMDJlMzczMTJlMzIzNDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM3MzEzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hH8DAN
BgkqhkiG9w0BAQsFAAOCAQEAlDidaWSeAOUP8U5OYqlLoes+hk2yjd47XEeWOHBN
I2kw0LsI5qoPDUVOmBnpixlhLgvawOEdO29qTC2GoNM9ApVfApTxOT8102H54iaO
4jBn7AvZQLEPQtaMQq2tXNjPpKNqXbTsVvvtwjpP8/NlHxuCoWK44hDF2WXrvhVk
uCBpdhhe4hWIGPHnWORloDWEjmWT/cc/OSx7sa+gj4PEE80zK0GZUcVD9PnxDIei
B+0hVHnORf1rFWEOt4pzDCOJhOJHoZz3R0VecUJpca48JyVk2m4+zLS/iYYjczps
uWJaiLv0KQZYgt5ebP+OtXM8AuUk08tzNt772rVU2eltTQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:10 2026 by rpki-client