This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132372e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132372e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          /vntJMkihQwrnBeX4e2ePgPW41cpzp1dMLlYtuyj7LU=
Subject key identifier:   C9:9A:CC:A7:13:5B:49:29:88:A7:00:44:BD:D1:60:F5:E3:44:88:7C
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       269299FEA7B1DF4DA344B2597891CF9B37FAA0DC
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132372e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 04 Feb 2025 18:26:43 +0000
ROA not before:           Tue 04 Feb 2025 18:21:43 +0000
ROA not after:            Tue 03 Feb 2026 18:26:43 +0000
asID:                     27826
IP address blocks:        200.16.127.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 24 Sep 2025 16:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:92:99:fe:a7:b1:df:4d:a3:44:b2:59:78:91:cf:9b:37:fa:a0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Feb  4 18:21:43 2025 GMT
            Not After : Feb  3 18:26:43 2026 GMT
        Subject: CN=C99ACCA7135B492988A70044BDD160F5E344887C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:56:3c:7e:dc:ab:df:b3:e6:9b:ad:55:43:
                    64:63:ee:07:8c:8a:00:4e:ae:f8:53:fa:f8:81:9b:
                    a7:e8:ee:85:95:8e:b5:37:83:d5:bf:f5:b6:e2:17:
                    85:4b:31:e9:b1:c5:4e:c0:23:7b:78:02:fe:81:d3:
                    18:fd:6c:4b:5c:fc:34:bc:fe:99:44:7f:64:59:c7:
                    e6:ad:03:71:8f:42:7f:14:3a:fe:25:13:72:48:30:
                    22:6a:5d:4f:01:32:29:2d:9d:bc:0d:c4:4f:42:fe:
                    70:66:a3:4b:be:57:e8:93:25:a4:25:d7:55:1d:a6:
                    63:c0:15:b3:26:d9:5a:d4:0a:34:ef:f1:8a:00:af:
                    05:34:61:b2:3d:da:75:4c:14:4e:34:b9:54:f5:90:
                    19:64:e3:b7:bb:88:02:14:47:08:aa:76:13:8b:5a:
                    60:ca:22:23:33:2d:5e:db:9d:f0:44:68:85:6f:ae:
                    b0:cc:76:2c:bc:82:e6:a0:c0:cc:5b:62:80:80:8f:
                    ff:6f:17:3c:8c:cb:75:dc:4c:01:19:fb:16:74:ed:
                    7b:1c:84:da:72:d7:8c:ad:0a:da:15:4f:73:a0:e2:
                    36:dc:6b:ed:cf:79:5e:f9:23:38:4f:cd:fc:35:07:
                    6f:7f:88:c0:3d:ca:79:78:40:3d:05:d4:1e:d9:c7:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9A:CC:A7:13:5B:49:29:88:A7:00:44:BD:D1:60:F5:E3:44:88:7C
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132372e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:06:65:aa:48:3f:e0:ef:d7:72:69:c4:d8:85:47:d4:02:aa:
         c3:07:ee:c5:07:4c:08:a7:2a:4a:6e:1a:08:dc:51:46:1e:ef:
         fa:1c:65:88:b6:e0:87:ad:2d:1a:8a:b4:7f:9f:40:09:00:55:
         3c:4b:8b:e9:fe:03:19:77:fb:2f:54:dc:f2:fd:d7:7e:fc:bf:
         b8:f8:ee:be:9c:fa:05:4f:fd:e1:ed:64:f1:e8:cf:20:95:32:
         00:c0:34:87:66:b1:74:04:21:07:4c:63:52:a1:d7:af:41:85:
         4f:50:74:76:59:f0:8f:1f:14:1c:76:ec:69:e8:65:c9:79:76:
         ec:78:4c:e0:e3:7d:40:54:f8:d9:48:d5:46:8f:55:ea:25:02:
         ea:6f:8d:23:a3:48:a6:c3:b3:ca:76:fb:3b:74:e7:d8:07:b5:
         0c:b0:4a:11:ac:84:5a:c2:ad:a3:98:ff:65:b3:2b:0a:e1:59:
         aa:9d:dc:b7:07:f7:19:73:67:14:d1:46:5f:99:63:7f:6d:c2:
         d8:2d:26:b0:8f:79:fb:df:31:84:51:3b:5e:f2:fc:15:df:9c:
         ab:f6:19:ed:25:11:b6:54:d6:b9:6b:54:b8:ca:67:b7:51:af:
         59:fe:f3:9f:69:8e:3e:c3:93:a3:b6:e9:6d:df:66:0a:5d:28:
         42:19:0e:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJpKZ/qex302jRLJZeJHPmzf6oNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBQTVCMUU1QjgwMDU1NkE1Qjc5Rjk5N0UxQjBDODgw
MjBDMTNCOTAeFw0yNTAyMDQxODIxNDNaFw0yNjAyMDMxODI2NDNaMDMxMTAvBgNV
BAMTKEM5OUFDQ0E3MTM1QjQ5Mjk4OEE3MDA0NEJERDE2MEY1RTM0NDg4N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEslY8ftyr37Pmm61VQ2Rj7geM
igBOrvhT+viBm6fo7oWVjrU3g9W/9bbiF4VLMemxxU7AI3t4Av6B0xj9bEtc/DS8
/plEf2RZx+atA3GPQn8UOv4lE3JIMCJqXU8BMiktnbwNxE9C/nBmo0u+V+iTJaQl
11UdpmPAFbMm2VrUCjTv8YoArwU0YbI92nVMFE40uVT1kBlk47e7iAIURwiqdhOL
WmDKIiMzLV7bnfBEaIVvrrDMdiy8guagwMxbYoCAj/9vFzyMy3XcTAEZ+xZ07Xsc
hNpy14ytCtoVT3Og4jbca+3PeV75IzhPzfw1B29/iMA9ynl4QD0F1B7Zx3O5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyZrMpxNbSSmIpwBEvdFg9eNEiHwwHwYDVR0j
BBgwFoAUtapbHluABValt5+ZfhsMiAIME7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUMzQjg3QzE0NkI1RTVGRjU3NkU2NDJBN0M3Qzk3N0ZC
RTk5RDJBRkQ0MDY5QzUwQ0NGRTZBOTc4ODY1NDlGLzAvQjVBQTVCMUU1QjgwMDU1
NkE1Qjc5Rjk5N0UxQjBDODgwMjBDMTNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUFBNUIxRTVCODAwNTU2QTVC
NzlGOTk3RTFCMEM4ODAyMEMxM0I5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDM0I4N0MxNDZCNUU1RkY1NzZFNjQyQTdDN0M5NzdGQkU5OUQyQUZE
NDA2OUM1MENDRkU2QTk3ODg2NTQ5Ri8wLzMyMzAzMDJlMzEzNjJlMzEzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgQfzAN
BgkqhkiG9w0BAQsFAAOCAQEASQZlqkg/4O/XcmnE2IVH1AKqwwfuxQdMCKcqSm4a
CNxRRh7v+hxliLbgh60tGoq0f59ACQBVPEuL6f4DGXf7L1Tc8v3Xfvy/uPjuvpz6
BU/94e1k8ejPIJUyAMA0h2axdAQhB0xjUqHXr0GFT1B0dlnwjx8UHHbsaehlyXl2
7HhM4ON9QFT42UjVRo9V6iUC6m+NI6NIpsOzynb7O3Tn2Ae1DLBKEayEWsKto5j/
ZbMrCuFZqp3ctwf3GXNnFNFGX5ljf23C2C0msI95+98xhFE7XvL8Fd+cq/YZ7SUR
tlTWuWtUuMpnt1GvWf7zn2mOPsOTo7bpbd9mCl0oQhkOEQ==
-----END CERTIFICATE-----