This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa
File:                     3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa (raw, json)
Hash identifier:          kMACPEit2gtvSJNHXS1rLTD5qz+Ux71O7EV1MK0AepE=
Subject key identifier:   71:92:43:D2:C2:36:41:0F:B3:C4:CB:50:BE:F4:60:83:E3:E7:94:D2
Certificate issuer:       /CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
Certificate serial:       51A158260935C0D0553E0C28FE543F36031A1542
Authority key identifier: BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa
Signing time:             Tue 06 Jan 2026 18:57:59 +0000
ROA not before:           Tue 06 Jan 2026 18:52:59 +0000
ROA not after:            Tue 05 Jan 2027 18:57:59 +0000
asID:                     28458
IP address blocks:        200.106.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:58:26:09:35:c0:d0:55:3e:0c:28:fe:54:3f:36:03:1a:15:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC80799AAE4BC1E995E9361E0D59A3E23E6936F8
        Validity
            Not Before: Jan  6 18:52:59 2026 GMT
            Not After : Jan  5 18:57:59 2027 GMT
        Subject: CN=719243D2C236410FB3C4CB50BEF46083E3E794D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:1a:b9:a7:bf:69:20:01:ef:91:69:a0:b0:
                    a9:9c:a7:94:5a:65:01:fe:58:c3:62:60:13:62:f2:
                    99:ec:13:78:e5:31:32:3b:90:11:6e:5e:76:5a:6b:
                    cf:3c:03:84:f2:57:51:c3:5f:7b:42:cb:b3:e5:8a:
                    65:57:cc:a5:46:21:43:fd:f5:f6:82:3f:e6:70:b2:
                    f4:f9:44:68:23:4a:57:69:43:a3:24:e2:e7:7a:d7:
                    d9:db:4e:85:a7:9a:d2:e3:00:25:0a:61:f9:21:54:
                    a5:b2:9c:0a:24:35:6c:af:96:71:c9:58:78:14:1c:
                    58:4a:9d:d3:54:16:3f:e6:87:ac:79:a4:d7:c9:24:
                    dc:f3:86:de:1b:e0:e0:40:83:dd:cc:10:76:24:4c:
                    49:4b:4a:d5:c4:5f:1e:12:74:7b:c5:25:48:ea:03:
                    ef:25:28:82:de:b3:9a:7f:df:37:11:d4:72:b9:c4:
                    39:26:63:64:24:f4:12:f5:21:4e:e7:1a:b3:4d:b4:
                    ee:29:0d:e9:cb:c5:a4:ae:07:18:9d:75:bf:57:15:
                    00:ce:d8:51:e0:7b:15:c3:cf:c7:30:d4:1d:dd:19:
                    85:11:33:4f:ae:bc:a5:30:8f:85:3a:a2:8a:02:ed:
                    48:13:94:47:ea:7c:5c:73:eb:00:06:ac:73:69:1b:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:43:D2:C2:36:41:0F:B3:C4:CB:50:BE:F4:60:83:E3:E7:94:D2
            X509v3 Authority Key Identifier:
                keyid:BC:80:79:9A:AE:4B:C1:E9:95:E9:36:1E:0D:59:A3:E2:3E:69:36:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC80799AAE4BC1E995E9361E0D59A3E23E6936F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AECD45FC437330C4AA30DE6549E57C477B1670E3F6D487450F56871084D59B16/0/3230302e3130362e3136362e302f32342d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:20:f1:a4:9f:79:cd:c8:bd:c0:54:ab:3b:5c:45:54:01:cd:
         c6:57:72:8c:75:43:bf:fd:a9:bd:fb:0c:9e:bc:64:71:03:7c:
         cb:f6:20:b2:50:94:b5:66:5a:c2:ff:87:a3:1e:c0:b6:bb:78:
         ac:92:2d:0e:a8:05:ca:06:c5:dd:8e:dc:8a:37:a8:77:43:1b:
         c6:fa:2d:43:d6:77:13:1f:2f:66:72:31:60:b7:1a:6a:ca:d2:
         d0:8b:6d:32:31:3e:37:9d:62:b5:3d:5f:a0:bf:48:51:58:b1:
         86:86:80:2c:75:93:85:60:93:bb:cc:9b:3e:9e:69:21:c0:bf:
         8f:b3:f6:77:ed:b9:d2:f7:e6:0c:d9:5b:6a:4f:25:8d:ce:3c:
         f7:f6:52:47:a4:da:87:7c:30:ab:d3:2f:15:3c:d7:91:67:42:
         a9:22:21:0c:30:c0:3c:f9:f1:5d:05:e7:e7:8c:50:92:13:5a:
         ae:35:4f:2f:c5:89:5b:3d:2e:a5:78:b7:fe:4d:7d:25:f9:17:
         dc:f6:a0:6d:52:d7:30:1a:3c:21:fc:c4:6e:49:aa:47:11:da:
         9c:c4:90:4e:70:79:25:91:73:1f:52:e8:bd:4d:51:40:9d:6c:
         e8:d4:7c:63:df:7e:bc:fb:e5:ff:ac:3c:a1:74:56:1a:22:c4:
         45:7f:dc:cf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUaFYJgk1wNBVPgwo/lQ/NgMaFUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM4MDc5OUFBRTRCQzFFOTk1RTkzNjFFMEQ1OUEzRTIz
RTY5MzZGODAeFw0yNjAxMDYxODUyNTlaFw0yNzAxMDUxODU3NTlaMDMxMTAvBgNV
BAMTKDcxOTI0M0QyQzIzNjQxMEZCM0M0Q0I1MEJFRjQ2MDgzRTNFNzk0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfUBq5p79pIAHvkWmgsKmcp5Ra
ZQH+WMNiYBNi8pnsE3jlMTI7kBFuXnZaa888A4TyV1HDX3tCy7PlimVXzKVGIUP9
9faCP+ZwsvT5RGgjSldpQ6Mk4ud619nbToWnmtLjACUKYfkhVKWynAokNWyvlnHJ
WHgUHFhKndNUFj/mh6x5pNfJJNzzht4b4OBAg93MEHYkTElLStXEXx4SdHvFJUjq
A+8lKILes5p/3zcR1HK5xDkmY2Qk9BL1IU7nGrNNtO4pDenLxaSuBxiddb9XFQDO
2FHgexXDz8cw1B3dGYURM0+uvKUwj4U6oooC7UgTlEfqfFxz6wAGrHNpG3h/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcZJD0sI2QQ+zxMtQvvRgg+PnlNIwHwYDVR0j
BBgwFoAUvIB5mq5LwemV6TYeDVmj4j5pNvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUNENDVGQzQzNzMzMEM0QUEzMERFNjU0OUU1N0M0NzdC
MTY3MEUzRjZENDg3NDUwRjU2ODcxMDg0RDU5QjE2LzAvQkM4MDc5OUFBRTRCQzFF
OTk1RTkzNjFFMEQ1OUEzRTIzRTY5MzZGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQzgwNzk5QUFFNEJDMUU5OTVF
OTM2MUUwRDU5QTNFMjNFNjkzNkY4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDRDQ1RkM0MzczMzBDNEFBMzBERTY1NDlFNTdDNDc3QjE2NzBFM0Y2
RDQ4NzQ1MEY1Njg3MTA4NEQ1OUIxNi8wLzMyMzAzMDJlMzEzMDM2MmUzMTM2MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGqm
MA0GCSqGSIb3DQEBCwUAA4IBAQAqIPGkn3nNyL3AVKs7XEVUAc3GV3KMdUO//am9
+wyevGRxA3zL9iCyUJS1ZlrC/4ejHsC2u3iski0OqAXKBsXdjtyKN6h3QxvG+i1D
1ncTHy9mcjFgtxpqytLQi20yMT43nWK1PV+gv0hRWLGGhoAsdZOFYJO7zJs+nmkh
wL+Ps/Z37bnS9+YM2VtqTyWNzjz39lJHpNqHfDCr0y8VPNeRZ0KpIiEMMMA8+fFd
BefnjFCSE1quNU8vxYlbPS6leLf+TX0l+Rfc9qBtUtcwGjwh/MRuSapHEdqcxJBO
cHklkXMfUui9TVFAnWzo1Hxj3368++X/rDyhdFYaIsRFf9zP
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:59 2026 by rpki-client