This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa
File:                     3230302e312e3136392e302f32342d3332203d3e2033343936.roa (raw, json)
Hash identifier:          M6DLWSAKnRqEc4Ugc4ukN7Itnj5PRzbkc/MIQQshM3w=
Subject key identifier:   BC:24:76:1F:5E:A3:C5:E4:B4:C7:1D:1B:D6:47:46:F0:2D:BF:98:7D
Certificate issuer:       /CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
Certificate serial:       2366BCC8B28BF0F332D54F2055F3715A3E35ECF2
Authority key identifier: 45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa
Signing time:             Tue 06 Jan 2026 19:04:46 +0000
ROA not before:           Tue 06 Jan 2026 18:59:46 +0000
ROA not after:            Tue 05 Jan 2027 19:04:46 +0000
asID:                     3496
IP address blocks:        200.1.169.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:66:bc:c8:b2:8b:f0:f3:32:d5:4f:20:55:f3:71:5a:3e:35:ec:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
        Validity
            Not Before: Jan  6 18:59:46 2026 GMT
            Not After : Jan  5 19:04:46 2027 GMT
        Subject: CN=BC24761F5EA3C5E4B4C71D1BD64746F02DBF987D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:23:28:f6:54:79:91:ff:46:e0:04:01:cb:
                    67:a1:6d:80:a5:3b:2b:c4:90:0f:36:fe:a6:5d:d5:
                    db:3e:e4:83:0c:fd:da:23:30:6a:50:63:bc:f4:b7:
                    31:9c:8f:5e:0c:5c:be:1f:70:2c:72:25:f9:69:81:
                    71:28:16:47:1d:c0:e4:b8:81:27:c7:cc:f7:56:ba:
                    37:de:00:98:7c:d7:3f:31:6e:f5:8e:ad:bd:69:48:
                    dd:64:39:fe:88:1f:bd:aa:80:69:14:68:f5:27:63:
                    74:90:0b:3d:c6:c2:f0:3e:55:88:30:33:07:ef:a0:
                    9c:1e:68:06:59:2e:67:74:46:e0:42:03:c2:38:21:
                    f4:c7:63:52:87:fe:09:24:3b:c2:ef:05:76:4d:d3:
                    a7:1b:9c:eb:fc:4e:d5:27:fd:24:bc:94:52:3e:7a:
                    e8:03:08:ee:61:53:a2:8c:62:8e:47:7d:6a:c1:1f:
                    44:7d:26:db:e2:fc:fe:3c:d1:50:91:8f:bb:d1:f6:
                    b9:68:51:af:3d:00:b4:47:cb:27:cc:da:f3:32:29:
                    46:0d:e8:d7:26:26:0c:b3:68:a5:fb:41:60:5e:c0:
                    d7:27:1f:1b:7c:4e:e9:be:f0:32:94:d4:66:6a:56:
                    50:50:d2:be:a5:56:ca:9d:cd:16:e2:65:7d:16:bc:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:24:76:1F:5E:A3:C5:E4:B4:C7:1D:1B:D6:47:46:F0:2D:BF:98:7D
            X509v3 Authority Key Identifier:
                keyid:45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3136392e302f32342d3332203d3e2033343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:28:f7:b8:fd:83:f1:6d:6f:dc:fd:21:d0:47:8f:38:06:
         04:03:80:4a:9d:6a:08:b5:32:42:ef:08:89:90:c7:00:d1:d1:
         b5:f5:34:04:3d:ee:34:ac:b2:c1:28:e9:fc:dd:28:64:33:fc:
         e7:56:aa:e3:a5:d2:86:01:37:8a:7c:ad:84:f4:1e:de:f6:78:
         3a:20:76:bb:af:49:56:f1:f6:73:3f:f9:38:76:4d:d1:04:cc:
         a7:b6:1c:d8:69:42:e3:e0:c7:79:1b:84:d9:d6:e1:78:47:fa:
         9b:c9:bd:66:72:8b:08:a1:67:89:15:fd:7f:9b:c2:b3:88:26:
         cc:be:69:6b:5f:1a:83:43:e0:55:2a:86:7c:98:38:b3:c6:12:
         1e:ec:07:0c:d8:4c:ee:bd:43:fb:88:58:12:f9:e5:8c:27:85:
         3c:82:13:45:53:70:86:7b:8f:cb:ae:c7:2d:52:f7:d7:42:1e:
         f4:ac:46:81:55:de:0e:c0:92:db:9e:54:a5:3f:62:93:6e:f9:
         e3:92:16:20:3e:0b:f2:0a:d8:cf:c7:b6:bf:92:02:cf:a4:13:
         7d:fc:fe:1a:14:c3:6d:56:58:29:f9:7a:57:d8:c5:df:5f:e4:
         da:be:50:f9:ab:43:ea:8c:b3:14:c8:50:af:ee:a6:47:5a:07:
         51:3d:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:06 2026 by rpki-client