This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa
File:                     3230302e312e3137312e302f32342d3332203d3e2033343936.roa (raw, json)
Hash identifier:          GHQSIpt68EZjZKuAelTiA5tRr8BbGPq6P0zfY+AiN1g=
Subject key identifier:   71:88:83:A4:A5:90:4E:98:A8:33:E1:9D:A3:E3:44:FD:2A:B4:B1:02
Certificate issuer:       /CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
Certificate serial:       6859596BA8DA1C5FB85D1D002204E673B0E94DCD
Authority key identifier: 45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa
Signing time:             Tue 06 Jan 2026 19:04:46 +0000
ROA not before:           Tue 06 Jan 2026 18:59:46 +0000
ROA not after:            Tue 05 Jan 2027 19:04:46 +0000
asID:                     3496
IP address blocks:        200.1.171.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:59:6b:a8:da:1c:5f:b8:5d:1d:00:22:04:e6:73:b0:e9:4d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A52877B9CBDAA4A2B69EF377AB572F9423ED6E
        Validity
            Not Before: Jan  6 18:59:46 2026 GMT
            Not After : Jan  5 19:04:46 2027 GMT
        Subject: CN=718883A4A5904E98A833E19DA3E344FD2AB4B102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:8d:f2:c1:da:bb:43:9a:65:94:11:81:63:
                    65:6b:ea:d8:ab:57:76:a1:c0:81:76:39:0c:9a:d3:
                    14:04:6c:97:b4:c1:be:82:38:9f:2b:8b:73:04:96:
                    99:01:2e:2e:a2:0c:14:b2:3e:89:a8:c3:2c:39:2b:
                    9d:54:e2:a4:75:a0:8b:3e:be:18:82:04:d8:65:fa:
                    80:a0:6c:5a:06:e0:67:f5:2e:ce:2d:03:79:d4:d6:
                    c6:5b:e5:aa:18:f2:06:6a:06:1c:6f:21:23:ef:92:
                    4f:59:08:b6:7d:4a:af:c3:e3:54:a1:3d:e9:38:53:
                    64:e0:c6:20:e4:76:d3:fc:81:05:d9:4e:d3:de:b6:
                    21:42:e6:d3:11:b0:40:7e:2e:88:e7:00:e9:d3:c8:
                    75:31:d2:57:91:dd:3e:b7:43:95:ac:87:ee:23:fe:
                    77:49:ee:8b:0f:c2:af:4e:6b:c2:20:b1:6d:e7:64:
                    b6:12:23:73:57:ca:d4:7c:2a:d1:c3:88:b5:5d:30:
                    9b:a2:11:ee:6b:40:2a:36:86:95:bf:2b:3d:f7:7d:
                    9b:51:0f:8c:94:25:d1:a5:76:da:e7:b2:0c:6b:b2:
                    88:1f:02:a5:fd:69:68:81:81:20:43:d5:c9:3a:0a:
                    76:4d:a0:f0:d6:47:3f:45:f7:de:8f:db:e3:0b:27:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:83:A4:A5:90:4E:98:A8:33:E1:9D:A3:E3:44:FD:2A:B4:B1:02
            X509v3 Authority Key Identifier:
                keyid:45:A5:28:77:B9:CB:DA:A4:A2:B6:9E:F3:77:AB:57:2F:94:23:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A52877B9CBDAA4A2B69EF377AB572F9423ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B288498F6AB7F4A3FEC2121B207C6A80CE250638BF6372C8552A90C7FCD8CB6B/0/3230302e312e3137312e302f32342d3332203d3e2033343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:97:6d:23:7a:f7:3e:e7:dd:0c:f3:fb:ca:66:7d:91:03:ea:
         87:7e:34:53:a9:bd:3c:8c:18:43:3e:44:c2:b9:cf:07:65:5a:
         a6:41:b4:93:37:1b:5c:68:d4:3d:ec:81:56:92:a4:1d:10:84:
         c8:b5:26:da:ac:0c:b8:e3:49:28:02:e2:87:6d:8f:b8:57:b7:
         29:3b:d6:9a:ad:45:e6:4f:79:da:ca:3f:11:03:ee:d0:fd:3b:
         a0:06:35:40:e5:31:33:95:be:66:e4:b8:1f:a6:05:1f:94:ef:
         55:6a:b1:d3:e5:28:81:8a:c1:7b:b6:a6:ec:eb:e5:30:d3:85:
         ca:93:08:1d:a6:1d:b3:4f:a2:07:c9:15:6a:a4:f3:a4:b0:af:
         fa:70:b8:be:3f:dd:79:80:da:c3:e3:d2:f3:c7:dc:d2:3b:95:
         67:16:71:ac:69:a7:f3:63:8c:5c:d0:58:38:6b:bb:c6:9a:2f:
         86:85:bb:2f:c2:21:47:76:10:03:34:5c:c5:a9:cc:bd:07:5f:
         bd:82:f2:0a:7d:a8:a7:0f:a3:8e:a4:13:ad:11:6a:06:28:07:
         44:4d:0f:9f:36:e0:80:72:dc:bd:95:ed:2d:86:56:8c:46:e1:
         f2:e0:5d:de:c5:9e:dd:18:a3:ac:08:ce:34:10:8d:ef:06:3b:
         95:51:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:40 2026 by rpki-client