This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/3230302e3135302e3234302e302f32322d3234203d3e20323732393537.roa
File:                     3230302e3135302e3234302e302f32322d3234203d3e20323732393537.roa (raw, json)
Hash identifier:          h5ZPPwHzohxrpby8SvKRxQpUUUiBHCAUJQ2NTYsOeUY=
Subject key identifier:   AD:C3:FA:ED:D7:70:C5:EC:D6:F0:89:E0:A7:75:CC:1E:7A:1C:13:D1
Certificate issuer:       /CN=A10C54A48920081105C30315FF0FC3396C99CB4B
Certificate serial:       0D30C12B78601D42514E1A4946F1335816EF60FD
Authority key identifier: A1:0C:54:A4:89:20:08:11:05:C3:03:15:FF:0F:C3:39:6C:99:CB:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A10C54A48920081105C30315FF0FC3396C99CB4B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/3230302e3135302e3234302e302f32322d3234203d3e20323732393537.roa
Signing time:             Tue 06 Jan 2026 19:42:14 +0000
ROA not before:           Tue 06 Jan 2026 19:37:14 +0000
ROA not after:            Tue 05 Jan 2027 19:42:14 +0000
asID:                     272957
IP address blocks:        200.150.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/A10C54A48920081105C30315FF0FC3396C99CB4B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/A10C54A48920081105C30315FF0FC3396C99CB4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A10C54A48920081105C30315FF0FC3396C99CB4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:c1:2b:78:60:1d:42:51:4e:1a:49:46:f1:33:58:16:ef:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A10C54A48920081105C30315FF0FC3396C99CB4B
        Validity
            Not Before: Jan  6 19:37:14 2026 GMT
            Not After : Jan  5 19:42:14 2027 GMT
        Subject: CN=ADC3FAEDD770C5ECD6F089E0A775CC1E7A1C13D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:24:67:a2:c1:af:fb:02:d4:e0:a6:4f:c5:
                    7b:f1:ed:be:36:79:fa:01:ba:d6:31:fc:b3:24:f8:
                    42:77:6a:23:42:1d:8a:a7:96:91:fc:2e:3a:84:27:
                    44:fe:f1:67:3d:28:2f:cd:7b:da:af:8c:e1:07:72:
                    86:df:32:85:92:e4:02:e2:93:6a:4f:ad:c6:91:14:
                    b2:0f:42:c8:c4:1a:47:50:eb:eb:fc:7b:ab:c3:97:
                    19:c2:1c:50:c3:3d:ae:8c:f5:c9:b8:8c:48:15:1c:
                    86:fa:ad:42:4d:51:01:0e:e4:bb:54:25:31:56:40:
                    0e:1d:b9:70:2f:2f:0a:d6:fa:fb:85:8f:88:ae:28:
                    87:3c:5a:11:96:63:05:3a:1a:d6:18:d3:f7:5d:dc:
                    c8:b6:a9:3f:db:74:be:b7:ed:5d:1b:80:9c:d5:df:
                    0d:57:5a:23:a3:44:41:57:c5:e2:c5:a4:a7:77:2d:
                    f6:60:41:8b:88:c2:97:34:e4:dc:05:01:ba:2f:51:
                    75:7d:7c:44:09:94:71:ae:8f:8b:b0:18:7e:ae:e1:
                    37:07:9c:88:3a:81:41:3d:59:99:ab:a0:97:ff:69:
                    ce:1d:ac:14:50:cc:f0:c6:58:e0:32:7e:d9:2e:1b:
                    4b:1d:62:fc:6b:02:b0:7b:a4:d7:ff:6d:cf:0a:b0:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:FA:ED:D7:70:C5:EC:D6:F0:89:E0:A7:75:CC:1E:7A:1C:13:D1
            X509v3 Authority Key Identifier:
                keyid:A1:0C:54:A4:89:20:08:11:05:C3:03:15:FF:0F:C3:39:6C:99:CB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/A10C54A48920081105C30315FF0FC3396C99CB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A10C54A48920081105C30315FF0FC3396C99CB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEA77885F4F9077A6774DE36941FA3E40A386BA94E0F362AFA8DE36A36D26086/0/3230302e3135302e3234302e302f32322d3234203d3e20323732393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:52:5b:36:af:79:7a:3e:05:81:ab:00:03:c6:c8:ad:94:6c:
         c2:0d:c5:7f:f2:5f:18:b7:0f:eb:09:ac:9c:b5:df:81:71:a9:
         29:7e:f5:87:71:d6:3d:d0:47:bd:8f:ee:a8:96:50:1c:d4:d1:
         ab:ba:da:2b:25:da:3c:e1:13:60:c6:b3:6d:7f:6e:ea:99:76:
         7c:e0:73:c6:28:f6:be:57:e4:72:41:9a:03:ee:af:5a:95:e0:
         8f:bf:8c:aa:f8:bc:e2:03:82:5d:ac:82:6a:1f:81:5c:d0:31:
         e5:86:3e:54:db:c2:a6:a9:28:53:84:e5:d3:00:38:14:2b:2b:
         06:4a:d4:72:e7:38:b9:de:c1:09:89:88:fa:42:22:4e:03:2e:
         32:98:bd:e7:ec:05:99:76:bc:bb:8f:a3:c8:f9:32:43:9a:ae:
         bb:20:f9:f1:72:af:27:0a:11:08:ae:7e:50:e4:41:d1:26:6d:
         4f:4a:c3:af:8d:f5:13:17:e9:9e:66:5b:e9:2a:21:75:53:5e:
         3b:a7:02:70:66:8a:ad:55:6e:43:d4:7a:a5:1b:e8:c2:e9:22:
         c0:70:50:41:ff:3b:64:8b:d5:7b:68:ed:2c:bd:1f:ea:5c:f4:
         3c:bc:3e:3d:99:38:a3:4b:93:42:9b:13:73:af:0f:62:1c:74:
         96:3c:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:49 2026 by rpki-client