This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
File:                     3230302e34372e3231362e302f32322d3234203d3e203134313837.roa (raw, json)
Hash identifier:          +RXCAGrXuhMa/RKbdjIR3Z68KSFGvJuK3hj2QSpUpZA=
Subject key identifier:   D1:17:1D:75:89:D7:FF:B7:FB:69:0B:B7:B0:16:60:8D:6E:93:94:06
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       5AA39AFB7DFDAE2FA5A6738E18962A2153BC48BA
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa
Signing time:             Tue 06 Jan 2026 18:58:44 +0000
ROA not before:           Tue 06 Jan 2026 18:53:44 +0000
ROA not after:            Tue 05 Jan 2027 18:58:44 +0000
asID:                     14187
IP address blocks:        200.47.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:9a:fb:7d:fd:ae:2f:a5:a6:73:8e:18:96:2a:21:53:bc:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jan  6 18:53:44 2026 GMT
            Not After : Jan  5 18:58:44 2027 GMT
        Subject: CN=D1171D7589D7FFB7FB690BB7B016608D6E939406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:1b:a0:88:a8:00:f5:f8:f0:47:99:c3:07:
                    1b:d1:1b:5f:7c:e0:eb:77:19:8d:8d:dc:68:0d:e5:
                    92:c8:ed:ca:de:37:1a:97:79:6b:0b:4b:d3:0f:23:
                    a3:37:76:8b:f3:1b:6e:24:2a:55:4f:cc:00:ec:6c:
                    d4:01:c9:4f:03:f9:53:85:56:f3:4b:48:6f:d7:c4:
                    0c:60:08:33:3e:65:6f:d1:a6:02:15:47:dd:56:98:
                    46:cb:7a:5a:07:16:64:f5:97:e3:34:34:1a:54:85:
                    55:32:b3:7a:ed:f9:5f:a9:83:d0:89:4a:7a:e1:13:
                    92:0f:28:50:db:d4:f2:af:fa:ec:f5:8a:d2:6a:93:
                    2f:aa:c6:1d:49:76:8b:ed:b0:fe:47:99:43:71:0d:
                    3e:ec:79:b2:84:10:71:98:5b:29:ad:9a:7a:d4:62:
                    ab:27:ee:c6:db:f1:ed:d8:42:38:98:f7:98:b2:27:
                    b6:ab:99:35:5f:e4:85:ca:c1:44:45:68:45:d4:62:
                    b9:14:bc:a8:00:2b:7b:e4:a6:37:52:7b:68:49:10:
                    59:2d:da:36:39:3e:9d:52:7f:84:0c:b6:80:0b:67:
                    34:94:86:c9:91:cb:56:1f:7d:53:1a:31:eb:fa:59:
                    b2:e9:6c:4f:94:b6:20:09:19:d8:3f:8c:da:bb:d2:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:1D:75:89:D7:FF:B7:FB:69:0B:B7:B0:16:60:8D:6E:93:94:06
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e34372e3231362e302f32322d3234203d3e203134313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:4b:31:50:fb:ff:72:d4:3a:6c:f5:8f:33:75:72:92:eb:bc:
         ce:c0:45:fc:6e:56:53:44:65:6c:c9:f0:55:23:cf:2c:c2:a4:
         e3:e1:51:60:43:b9:2c:35:27:6d:db:b3:bc:d6:65:26:18:ce:
         64:12:d2:dc:af:ff:a5:c9:44:77:ff:2f:2e:64:6e:a6:36:3d:
         47:5c:1e:0b:c9:91:d5:12:4e:06:5c:b7:4f:04:c9:a4:12:eb:
         10:47:3e:4f:3e:50:ae:57:5c:f6:95:f3:d5:3b:9b:66:b1:11:
         26:58:03:bf:02:e1:78:ff:09:d1:71:c9:98:d1:8f:f2:50:a6:
         e1:5e:1a:10:d9:ce:50:7d:2d:a9:d0:ab:cd:62:88:b4:c4:e2:
         e3:92:d9:71:0a:1b:bd:d4:6c:90:85:6d:22:53:48:19:f4:e4:
         9a:16:ba:49:61:86:e3:ec:77:37:72:56:46:68:df:b3:f0:f7:
         6b:dc:01:e5:fa:bb:54:4b:42:f7:8b:8a:e3:75:0f:a0:13:cb:
         f8:f1:5f:c6:6e:19:6e:72:e6:d9:96:ac:64:fc:94:e9:c1:0b:
         45:eb:ae:bc:2c:ac:3e:38:eb:c1:74:32:4c:a0:c9:34:50:6c:
         87:1d:2e:49:cf:eb:dd:4c:98:0b:5f:e0:83:c7:27:fd:03:f3:
         5d:7e:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:24 2026 by rpki-client