This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
File:                     3230302e392e39342e302f32342d3234203d3e20323633383034.roa (raw, json)
Hash identifier:          O5ng/an60KY6YT+e9l+hbBuuPN1gN17raTA3bjDsgiQ=
Subject key identifier:   54:C3:6E:12:7A:35:70:92:00:23:07:B5:23:3F:9B:E3:3E:4A:CA:DA
Certificate issuer:       /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial:       6B6580F059CE485B44CCBA7A337A7EF8E82500D8
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa
Signing time:             Tue 06 Jan 2026 19:48:07 +0000
ROA not before:           Tue 06 Jan 2026 19:43:07 +0000
ROA not after:            Tue 05 Jan 2027 19:48:07 +0000
asID:                     263804
IP address blocks:        200.9.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:65:80:f0:59:ce:48:5b:44:cc:ba:7a:33:7a:7e:f8:e8:25:00:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
        Validity
            Not Before: Jan  6 19:43:07 2026 GMT
            Not After : Jan  5 19:48:07 2027 GMT
        Subject: CN=54C36E127A357092002307B5233F9BE33E4ACADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:dd:1e:b6:2e:de:f1:2b:77:4b:a3:45:0e:
                    7e:31:58:78:31:50:39:f1:92:9e:c0:74:0f:16:1f:
                    72:e4:93:78:ee:a2:f4:27:c2:6d:ba:2d:88:af:a7:
                    2e:f1:04:be:52:13:23:d1:d1:62:13:02:50:26:c6:
                    56:cb:23:02:5e:d3:18:2c:37:ee:d4:f3:45:8b:55:
                    e8:06:c6:04:de:2a:65:50:54:2f:e8:65:93:38:b5:
                    a1:db:65:30:e0:29:51:b4:a8:e1:73:b0:4a:74:ad:
                    f8:98:b5:d8:55:d8:b4:aa:fb:3f:02:b4:5b:36:be:
                    af:5c:91:25:68:36:60:95:04:ed:0c:a0:58:92:ec:
                    85:c0:13:4b:6e:ae:d7:70:5c:03:1d:57:ac:be:42:
                    d5:14:61:bc:6b:61:a5:64:2c:84:d5:72:6d:4d:fe:
                    c8:0a:5c:6c:3c:c8:cb:ef:2d:6f:cd:a6:e1:f7:8c:
                    f8:74:ef:2d:80:0e:3b:3b:36:50:1d:b3:5a:81:a4:
                    f4:4a:1b:cd:3f:d8:b7:d8:03:57:5e:d8:be:8d:b7:
                    fb:a0:87:d8:d8:83:0a:e5:c9:a4:28:5d:7f:41:0e:
                    bd:68:6c:89:fa:a9:b8:97:66:58:f7:b7:be:c4:b3:
                    f7:aa:dd:7a:c3:48:3a:8b:0a:85:d4:26:2f:0e:da:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:6E:12:7A:35:70:92:00:23:07:B5:23:3F:9B:E3:3E:4A:CA:DA
            X509v3 Authority Key Identifier:
                keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/3230302e392e39342e302f32342d3234203d3e20323633383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a5:21:19:63:1a:fb:57:91:80:cd:1c:38:5e:4a:04:12:15:
         c8:d9:49:b5:59:b2:88:d9:2a:f7:61:8a:06:9b:95:85:7a:5c:
         f5:20:d6:91:3b:eb:44:42:f0:5b:8a:c6:25:0c:5a:85:47:41:
         37:c8:b0:e8:88:ff:51:e7:3a:a9:24:11:60:a8:52:90:39:3e:
         0f:a3:2f:5a:44:50:a5:ff:16:b5:ca:34:46:37:d5:a4:aa:24:
         6b:39:0c:a0:b0:82:f2:9a:c3:07:6a:e2:41:e2:78:0d:fc:40:
         f7:60:9e:e5:fa:54:46:82:01:09:71:11:5b:76:d3:67:1a:58:
         52:2a:07:bd:36:27:bf:5c:48:c2:8f:12:29:2a:8c:b9:a2:7b:
         c4:f9:ef:2d:18:2a:b9:90:1c:f2:25:d8:06:9c:5c:98:80:fc:
         c0:32:0d:a6:11:90:bc:b8:6d:57:15:68:fd:65:e5:44:ab:8d:
         3c:d3:52:50:0d:28:e4:d8:52:4a:44:be:04:2b:ce:f6:8c:c4:
         7d:3f:8f:12:a1:e3:97:5c:01:f5:f9:75:08:e2:89:f5:fc:a4:
         44:6f:ba:23:5b:09:6a:c2:d7:ce:c6:0f:bd:b1:2f:f8:74:d8:
         ab:a8:89:36:56:37:a3:72:5e:3b:3b:4a:f8:9a:1e:c3:7f:3e:
         0a:7f:40:58
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUa2WA8FnOSFtEzLp6M3p++OglANgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDOTQ0OUNFMEZCMjY3ODVDQkU0QTYwRDlENTUxNEU5
RTE3N0FGODAeFw0yNjAxMDYxOTQzMDdaFw0yNzAxMDUxOTQ4MDdaMDMxMTAvBgNV
BAMTKDU0QzM2RTEyN0EzNTcwOTIwMDIzMDdCNTIzM0Y5QkUzM0U0QUNBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4d0eti7e8St3S6NFDn4xWHgx
UDnxkp7AdA8WH3Lkk3juovQnwm26LYivpy7xBL5SEyPR0WITAlAmxlbLIwJe0xgs
N+7U80WLVegGxgTeKmVQVC/oZZM4taHbZTDgKVG0qOFzsEp0rfiYtdhV2LSq+z8C
tFs2vq9ckSVoNmCVBO0MoFiS7IXAE0turtdwXAMdV6y+QtUUYbxrYaVkLITVcm1N
/sgKXGw8yMvvLW/NpuH3jPh07y2ADjs7NlAds1qBpPRKG80/2LfYA1de2L6Nt/ug
h9jYgwrlyaQoXX9BDr1obIn6qbiXZlj3t77Es/eq3XrDSDqLCoXUJi8O2so7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUVMNuEno1cJIAIwe1Iz+b4z5KytowHwYDVR0j
BBgwFoAUvMlEnOD7Jnhcvkpg2dVRTp4XevgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRCMjQwMTBCODZBM0ZFODgwNTkxOTQ1Qzc3MkVBRDEx
MEIyMTk3QThCNzc1NDgwNTIzODhEODNBNjc5RUQ2LzAvQkNDOTQ0OUNFMEZCMjY3
ODVDQkU0QTYwRDlENTUxNEU5RTE3N0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQ0M5NDQ5Q0UwRkIyNjc4NUNC
RTRBNjBEOUQ1NTE0RTlFMTc3QUY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JEQjI0MDEwQjg2QTNGRTg4MDU5MTk0NUM3NzJFQUQxMTBCMjE5N0E4
Qjc3NTQ4MDUyMzg4RDgzQTY3OUVENi8wLzMyMzAzMDJlMzkyZTM5MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICV4wDQYJ
KoZIhvcNAQELBQADggEBACylIRljGvtXkYDNHDheSgQSFcjZSbVZsojZKvdhigab
lYV6XPUg1pE760RC8FuKxiUMWoVHQTfIsOiI/1HnOqkkEWCoUpA5Pg+jL1pEUKX/
FrXKNEY31aSqJGs5DKCwgvKawwdq4kHieA38QPdgnuX6VEaCAQlxEVt202caWFIq
B702J79cSMKPEikqjLmie8T57y0YKrmQHPIl2AacXJiA/MAyDaYRkLy4bVcVaP1l
5USrjTzTUlANKOTYUkpEvgQrzvaMxH0/jxKh45dcAfX5dQjiifX8pERvuiNbCWrC
187GD72xL/h02KuoiTZWN6NyXjs7SviaHsN/Pgp/QFg=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:00:12 2026 by rpki-client