This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa
File:                     3230302e372e3136302e302f32302d3234203d3e203237383238.roa (raw, json)
Hash identifier:          Z6VCwh+gWt4G8GyO3nTOpINqmIqtiuVKNyUl40K6yyA=
Subject key identifier:   4C:FE:A0:CA:91:53:70:3F:95:EB:93:89:6F:78:40:19:50:28:CF:03
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       421ED4894838C0BFC60D1B2216E7E4005D65FE3B
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa
Signing time:             Tue 06 Jan 2026 19:34:27 +0000
ROA not before:           Tue 06 Jan 2026 19:29:27 +0000
ROA not after:            Tue 05 Jan 2027 19:34:27 +0000
asID:                     27828
IP address blocks:        200.7.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1e:d4:89:48:38:c0:bf:c6:0d:1b:22:16:e7:e4:00:5d:65:fe:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Jan  6 19:29:27 2026 GMT
            Not After : Jan  5 19:34:27 2027 GMT
        Subject: CN=4CFEA0CA9153703F95EB93896F7840195028CF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:21:fb:79:a1:01:48:51:c3:15:18:18:67:
                    d9:1b:91:92:a9:55:0e:5e:aa:2c:ce:aa:ec:e3:91:
                    2d:3b:fc:1c:96:a1:a7:b7:f8:77:0b:b2:a4:80:b5:
                    5a:6e:28:8a:a6:e6:8e:cf:a8:a9:75:4a:6d:0c:10:
                    a7:d5:3c:da:ff:3b:cc:32:f2:a3:cc:b6:a3:8d:b3:
                    c8:ab:4e:5c:37:f4:e9:05:f6:18:80:a0:70:f0:a0:
                    f6:bc:ee:b7:e6:de:3d:80:a4:ea:b2:9a:4a:95:77:
                    cc:83:d7:a8:05:42:6e:26:2e:83:af:df:9d:b4:aa:
                    dd:22:34:d8:7c:92:fb:57:0d:8b:ed:b6:5e:de:ea:
                    cc:37:c8:bd:fd:82:bd:9d:28:d8:0c:0b:ac:cf:bc:
                    a1:bc:00:41:35:0c:53:47:69:86:b4:e1:26:c7:8c:
                    c0:24:f1:b8:17:11:fc:06:09:0b:c7:6d:8d:47:e3:
                    37:12:ac:2c:69:91:35:d8:37:a2:06:8e:2c:9d:42:
                    a3:7d:62:52:9e:1c:0c:95:8f:d4:02:62:de:b9:55:
                    6e:b5:93:a5:2c:82:ea:51:32:32:b4:0d:b1:c8:34:
                    78:81:2e:7f:89:a8:25:57:21:ab:63:bf:62:d8:b5:
                    1d:be:7f:c9:09:a6:29:28:59:ce:c2:83:eb:ac:84:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:A0:CA:91:53:70:3F:95:EB:93:89:6F:78:40:19:50:28:CF:03
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3136302e302f32302d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:36:2c:63:5d:43:23:48:c0:02:86:bd:90:f5:ed:87:c0:
         2c:b7:71:36:f0:89:bd:49:af:92:1f:4a:f1:99:ef:74:db:85:
         aa:86:89:1f:65:fe:ab:53:76:5b:ad:25:fa:55:b7:21:9a:07:
         6d:e8:20:83:a0:23:43:3a:b8:01:18:a7:eb:ce:03:4e:90:99:
         03:d4:8c:a2:54:19:70:ef:9f:9e:f0:d0:18:18:3b:a6:eb:10:
         0c:52:9c:44:96:4c:34:7e:ad:6a:31:37:5a:d9:8b:4a:88:df:
         50:1b:cb:6e:7c:dd:2c:d2:03:05:40:d3:ee:fc:d0:2e:25:75:
         cc:96:60:83:2a:a0:64:79:d3:fb:02:c4:a5:f5:16:91:fa:af:
         0a:c6:8a:f7:7a:24:1d:d5:31:02:42:33:c0:ed:21:ae:d0:b8:
         39:b1:85:5a:a3:c3:31:87:c6:4c:81:3f:c6:f8:4a:42:08:63:
         5a:bc:9d:5b:94:cb:38:52:a8:17:95:28:ad:e3:be:42:c0:d2:
         fc:b9:66:af:2e:76:fb:29:88:98:41:2a:5d:fe:77:a0:84:d2:
         33:34:3b:84:e8:67:85:21:5e:d8:f0:54:de:ab:2e:06:b0:e9:
         c5:13:ad:29:a5:6b:9a:78:b0:a9:27:af:f3:8a:89:1e:3f:1b:
         40:a9:97:78
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQh7UiUg4wL/GDRsiFufkAF1l/jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4MTE1N0U5NjA1Njc2NzBGNzQ2MUI0NDU1N0VGRUE4
MTg1MDFEMjAeFw0yNjAxMDYxOTI5MjdaFw0yNzAxMDUxOTM0MjdaMDMxMTAvBgNV
BAMTKDRDRkVBMENBOTE1MzcwM0Y5NUVCOTM4OTZGNzg0MDE5NTAyOENGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLCH7eaEBSFHDFRgYZ9kbkZKp
VQ5eqizOquzjkS07/ByWoae3+HcLsqSAtVpuKIqm5o7PqKl1Sm0MEKfVPNr/O8wy
8qPMtqONs8irTlw39OkF9hiAoHDwoPa87rfm3j2ApOqymkqVd8yD16gFQm4mLoOv
3520qt0iNNh8kvtXDYvttl7e6sw3yL39gr2dKNgMC6zPvKG8AEE1DFNHaYa04SbH
jMAk8bgXEfwGCQvHbY1H4zcSrCxpkTXYN6IGjiydQqN9YlKeHAyVj9QCYt65VW61
k6UsgupRMjK0DbHINHiBLn+JqCVXIatjv2LYtR2+f8kJpikoWc7Cg+ushFiDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTP6gypFTcD+V65OJb3hAGVAozwMwHwYDVR0j
BBgwFoAUXYEVfpYFZ2cPdGG0RVfv6oGFAdIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDMwNDI2MzIxNjRBQUM4Q0IxMzEyODhEMzFFNEU1NUZB
NTcwRjZERjBBOUFCRUNDRDM3NDc0NDc1QUI3MzZBLzAvNUQ4MTE1N0U5NjA1Njc2
NzBGNzQ2MUI0NDU1N0VGRUE4MTg1MDFEMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDgxMTU3RTk2MDU2NzY3MEY3
NDYxQjQ0NTU3RUZFQTgxODUwMUQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzMDQyNjMyMTY0QUFDOENCMTMxMjg4RDMxRTRFNTVGQTU3MEY2REYw
QTlBQkVDQ0QzNzQ3NDQ3NUFCNzM2QS8wLzMyMzAzMDJlMzcyZTMxMzYzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczODMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIB6AwDQYJ
KoZIhvcNAQELBQADggEBAI+WNixjXUMjSMAChr2Q9e2HwCy3cTbwib1Jr5IfSvGZ
73TbhaqGiR9l/qtTdlutJfpVtyGaB23oIIOgI0M6uAEYp+vOA06QmQPUjKJUGXDv
n57w0BgYO6brEAxSnESWTDR+rWoxN1rZi0qI31Aby2583SzSAwVA0+780C4ldcyW
YIMqoGR50/sCxKX1FpH6rwrGivd6JB3VMQJCM8DtIa7QuDmxhVqjwzGHxkyBP8b4
SkIIY1q8nVuUyzhSqBeVKK3jvkLA0vy5Zq8udvspiJhBKl3+d6CE0jM0O4ToZ4Uh
XtjwVN6rLgaw6cUTrSmla5p4sKknr/OKiR4/G0Cpl3g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:19 2026 by rpki-client