This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa
File:                     3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa (raw, json)
Hash identifier:          QOQvGxzJHXFSYNKG1Aq+A9ufQmVVSIIY8gBBpY46um0=
Subject key identifier:   CD:4C:B7:04:63:84:73:C3:19:40:85:C5:7A:97:27:88:44:AC:7E:4A
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       44C2006A5C77A8838A30BB7F647737B662E4E078
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:21:12 +0000
ROA not before:           Tue 06 Jan 2026 19:16:12 +0000
ROA not after:            Tue 05 Jan 2027 19:21:12 +0000
asID:                     14754
IP address blocks:        200.119.152.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:00:6a:5c:77:a8:83:8a:30:bb:7f:64:77:37:b6:62:e4:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Jan  6 19:16:12 2026 GMT
            Not After : Jan  5 19:21:12 2027 GMT
        Subject: CN=CD4CB704638473C3194085C57A97278844AC7E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d7:76:d6:df:5f:7a:46:1b:c6:56:f2:3f:a4:
                    8f:2f:1e:9c:13:08:ed:c6:2e:7b:1d:88:f0:aa:44:
                    e3:5d:4c:e0:83:53:4a:66:48:af:36:8b:7b:09:e7:
                    9c:4d:32:d0:13:a4:42:36:7b:09:0b:c6:ff:f6:85:
                    89:bd:80:99:07:32:e2:b4:b3:c8:0a:18:47:de:ba:
                    4b:46:19:32:71:c3:02:b8:44:58:3a:ce:0d:5a:ac:
                    aa:f6:0b:95:f6:03:56:94:06:19:a7:e4:29:c6:f3:
                    60:48:c1:6c:b7:e0:b4:5c:89:31:bc:ca:b8:40:74:
                    21:a5:fb:d5:7c:58:cd:0f:cc:ea:42:30:65:46:50:
                    3d:1d:37:d9:71:75:c7:d5:7d:dc:06:a3:2e:64:d3:
                    e4:61:bd:bb:27:6b:c6:25:25:89:70:44:01:1a:1d:
                    d6:4c:75:22:2f:08:4c:da:46:d7:4a:e6:9c:e5:b0:
                    b3:bf:df:c4:52:a9:79:f5:dc:b0:95:bf:a5:be:52:
                    51:59:97:9b:46:9a:09:7d:67:f5:1c:19:04:33:af:
                    91:ae:f6:07:b0:f3:90:17:c0:4a:44:d3:1f:ed:49:
                    ec:79:f5:9c:2a:61:50:f3:2c:6f:6f:8e:f2:28:03:
                    67:f6:58:40:4e:8f:3c:11:15:b6:01:cc:55:5b:36:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:B7:04:63:84:73:C3:19:40:85:C5:7A:97:27:88:44:AC:7E:4A
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3230302e3131392e3135322e302f32332d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:3f:8c:38:25:78:30:8c:0d:5c:03:e0:3f:a1:ae:89:e2:
         bb:bf:a0:a7:33:d5:e9:db:e9:ad:d7:bb:56:e1:42:86:2f:3b:
         11:e8:4d:05:49:f7:a5:54:24:ad:b6:64:77:30:9c:5d:3e:ef:
         bd:24:1b:47:23:e8:80:0d:3d:0c:7b:46:0a:70:b6:90:bb:75:
         db:44:9d:86:63:0b:c2:77:d7:f7:4a:6e:ac:34:78:ea:4a:23:
         e6:79:8c:4f:b5:71:ff:f0:c1:41:75:20:04:11:8d:78:7b:43:
         10:3a:81:34:33:3f:21:b9:0d:92:ae:f5:9c:f7:e3:49:a2:7e:
         6e:12:f9:c3:75:00:fc:a7:fa:b2:b6:d7:9b:70:2c:b8:01:a4:
         c3:75:06:58:67:d9:e8:b9:22:b8:cb:23:6e:65:e4:c1:be:40:
         d2:f3:f5:5f:5a:96:0a:3a:97:3c:3b:7b:51:10:5d:14:2c:cb:
         cf:e3:c8:8b:8a:9d:d7:51:a3:8b:56:ca:af:60:e7:63:60:4e:
         f6:b2:99:ae:65:5e:78:f7:f4:5b:69:31:7f:7b:fe:1c:4b:c2:
         db:7f:ef:e3:c1:e1:72:4f:3a:ed:1e:c1:4a:98:66:21:b2:56:
         eb:dc:5b:39:e7:e4:68:09:33:d6:79:92:70:e0:6b:82:52:13:
         7c:4e:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:42 2026 by rpki-client