This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131382e302f32332d3234203d3e203236363035.roa
File:                     3230302e31362e3131382e302f32332d3234203d3e203236363035.roa (raw, json)
Hash identifier:          3wIoe7OzZz3VjNYjtGEMVlGT+u2PEeqpQ5MvNQ/Wb2w=
Subject key identifier:   BD:ED:DC:F7:2A:8D:0C:CE:39:44:2E:E9:F3:79:B8:47:A3:8B:C1:E3
Certificate issuer:       /CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Certificate serial:       272C633879DF47A1CFF5CD5DC46A26349B9680B5
Authority key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131382e302f32332d3234203d3e203236363035.roa
Signing time:             Tue 06 Jan 2026 19:34:00 +0000
ROA not before:           Tue 06 Jan 2026 19:29:00 +0000
ROA not after:            Tue 05 Jan 2027 19:34:00 +0000
asID:                     26605
IP address blocks:        200.16.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2c:63:38:79:df:47:a1:cf:f5:cd:5d:c4:6a:26:34:9b:96:80:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
        Validity
            Not Before: Jan  6 19:29:00 2026 GMT
            Not After : Jan  5 19:34:00 2027 GMT
        Subject: CN=BDEDDCF72A8D0CCE39442EE9F379B847A38BC1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:b1:b7:13:dc:46:3a:e0:78:55:3b:e9:38:
                    28:b6:98:47:6d:58:53:3b:5e:40:95:a8:3f:ef:92:
                    36:73:41:20:16:eb:c7:72:7f:a7:a4:43:bc:7a:c2:
                    f0:24:fa:d3:b9:bc:f7:3a:3b:e3:7b:7a:b7:b2:31:
                    07:7e:ee:d6:56:2f:3f:f2:6e:67:d3:07:c3:75:08:
                    43:a3:47:f5:90:d8:5c:6d:80:52:d1:86:07:98:d8:
                    7c:29:a3:78:54:72:a7:24:ce:5d:0d:ad:b7:6d:0f:
                    0d:91:5a:14:a5:ee:68:86:40:26:65:3a:32:ae:d0:
                    f3:e1:62:94:dc:cd:3b:a0:07:d5:54:7e:3a:3d:9b:
                    c9:0c:96:11:21:9a:3c:67:53:2a:70:e5:b5:1e:bd:
                    11:43:6f:6b:1c:98:28:b8:8f:cb:ae:ad:a6:1b:02:
                    d9:7a:f1:59:63:9b:b3:a5:ec:82:c2:3b:4d:21:ab:
                    50:9f:6e:5f:25:7e:f0:38:c7:a0:f2:19:a2:3c:a6:
                    de:bf:b6:dd:89:ed:1d:df:53:5b:cc:b8:e9:9d:46:
                    a2:d4:41:c6:8d:2a:3c:59:04:f2:4b:dd:cc:13:7a:
                    24:17:30:ea:79:c3:e6:18:17:9c:22:c4:e9:eb:d6:
                    56:30:d3:e8:64:70:fb:c3:7b:ce:cd:0a:f2:2f:4e:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:ED:DC:F7:2A:8D:0C:CE:39:44:2E:E9:F3:79:B8:47:A3:8B:C1:E3
            X509v3 Authority Key Identifier:
                keyid:B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131382e302f32332d3234203d3e203236363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:67:79:6c:0c:56:1f:b4:28:97:d0:71:bd:ab:a4:e2:bd:
         13:96:1d:c7:08:63:22:91:2d:8e:76:9a:34:32:1b:6d:26:47:
         c1:d2:d1:3a:11:47:cf:80:f4:b2:50:b1:8d:7e:9a:d4:b4:de:
         3c:b8:0a:ee:e6:0e:25:b8:e9:05:e5:cc:62:c1:4b:25:ff:b7:
         18:5d:d6:29:b5:29:98:68:6e:f0:06:d2:de:66:49:15:8b:5d:
         a0:26:9d:24:56:d8:bf:54:da:a4:b5:f1:f5:72:88:f1:01:f4:
         c0:7f:71:c3:63:0c:2f:e2:8f:14:68:85:2c:52:63:19:49:cf:
         a8:47:32:0b:77:85:e0:6b:99:a0:dc:37:fe:06:94:00:c9:3e:
         ad:48:cf:3d:ea:7d:c2:03:34:41:ef:7c:53:aa:b7:ac:4a:c6:
         f9:58:55:65:60:cf:8e:a7:1e:6d:32:3b:13:78:80:3e:ae:58:
         6b:0d:14:1f:f8:69:d0:8f:f4:49:dc:0a:30:6c:a8:5b:1a:44:
         06:5f:5a:61:e2:69:a2:ea:2c:96:9c:61:b7:d6:3b:86:e5:f2:
         89:1b:80:bf:e3:68:ba:60:48:51:bb:23:db:5e:1c:49:c4:53:
         f1:f0:3a:45:7e:26:c8:0e:73:84:f6:bf:48:df:57:89:5e:bb:
         42:72:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:28 2026 by rpki-client