This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
File:                     3230302e36332e3131322e302f32312d3234203d3e203237393731.roa (raw, json)
Hash identifier:          xwqZJyeTPUoNt/2UZltMDP5Xfd7TKD9Q/FhZWgctkkg=
Subject key identifier:   25:3C:21:AB:23:08:55:D8:24:EC:5B:E2:D6:D7:D0:2F:85:4E:A1:48
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       5B6DD9E3AF7984E9BDE226A7EFD6DE8CFE3901B5
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa
Signing time:             Tue 06 Jan 2026 19:04:03 +0000
ROA not before:           Tue 06 Jan 2026 18:59:03 +0000
ROA not after:            Tue 05 Jan 2027 19:04:03 +0000
asID:                     27971
IP address blocks:        200.63.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6d:d9:e3:af:79:84:e9:bd:e2:26:a7:ef:d6:de:8c:fe:39:01:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Jan  6 18:59:03 2026 GMT
            Not After : Jan  5 19:04:03 2027 GMT
        Subject: CN=253C21AB230855D824EC5BE2D6D7D02F854EA148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:c1:17:a4:3d:9d:96:1c:36:3d:ca:94:02:
                    f8:7b:f7:84:25:11:e5:8a:2e:95:31:02:a9:b0:47:
                    98:92:11:72:24:1b:cc:9b:91:d0:07:b5:a3:97:96:
                    a6:07:a2:be:6e:32:ba:2d:e8:36:3d:e6:46:27:e1:
                    ec:79:fc:c5:a8:5e:fb:92:96:bf:fd:83:39:1b:a8:
                    79:33:7c:f9:da:e2:a0:1e:bd:51:30:45:bf:77:58:
                    ec:68:25:c2:5b:03:1f:f2:0e:3a:e5:1f:a5:33:2f:
                    9e:cd:fb:61:de:3c:7c:79:64:fc:7f:39:fa:ce:40:
                    c9:1d:47:4f:48:68:12:23:79:91:5b:e7:4e:54:fa:
                    57:e1:2b:ee:fb:a2:70:88:4e:2e:1c:19:91:ea:9d:
                    7d:dd:20:0d:77:aa:51:0d:e1:60:e3:c3:4d:42:5b:
                    04:d3:21:8b:cf:a8:9b:72:60:62:52:12:74:76:6e:
                    4e:de:b3:ee:2b:92:9c:94:24:f4:18:16:73:db:ee:
                    93:c5:fe:02:c7:f1:85:03:16:15:74:18:04:88:24:
                    b1:34:aa:35:84:df:67:16:ef:ef:2a:c9:2e:d2:3b:
                    b7:eb:d3:93:39:b6:ef:81:f4:f6:a5:5e:45:b7:d5:
                    90:de:0a:c1:bf:9e:11:44:60:03:ee:98:82:53:3d:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3C:21:AB:23:08:55:D8:24:EC:5B:E2:D6:D7:D0:2F:85:4E:A1:48
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3230302e36332e3131322e302f32312d3234203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:78:d1:d4:aa:90:04:54:b0:2d:77:e7:82:25:7b:9b:df:26:
         88:3e:db:f3:32:3d:6d:71:e2:65:15:80:f4:5d:2d:5d:b3:12:
         90:b5:50:fc:c0:d8:d5:1e:07:4e:06:a6:fe:00:0a:4f:5c:66:
         19:c8:b3:2c:20:56:c9:93:1d:0d:da:e2:80:89:89:91:a0:02:
         4e:46:74:76:2d:d9:87:f2:c2:28:08:c1:15:e8:f1:51:76:00:
         7e:fb:f5:6a:95:09:d0:5e:03:fd:60:48:aa:fc:7f:b6:19:a0:
         89:3a:ad:dd:e2:4f:5f:4a:f9:1b:68:00:20:a2:27:82:dd:1e:
         31:02:fa:f7:68:01:63:b5:a3:c8:71:67:19:25:cc:00:c9:b8:
         bf:55:22:33:59:dd:db:8f:25:2f:8b:65:82:9e:fa:ee:a2:18:
         c2:b2:29:4a:56:5c:8b:32:2c:1f:4a:18:4e:26:aa:72:f2:54:
         fc:ec:4b:e3:90:ec:6a:ec:52:73:5b:a1:be:f7:41:80:7d:9b:
         18:3f:ac:89:34:da:d2:34:e8:07:f7:07:33:2f:6d:f7:87:a1:
         22:26:82:c6:4b:d6:32:99:67:47:77:be:2e:2a:b7:25:9e:38:
         6f:df:1b:cb:92:0d:58:83:78:1d:76:f1:cb:c5:d0:11:76:65:
         38:1c:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:25 2026 by rpki-client