This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/3230302e33332e32382e302f32342d3234203d3e20323733303734.roa
File:                     3230302e33332e32382e302f32342d3234203d3e20323733303734.roa (raw, json)
Hash identifier:          VALVcGyHyZeqU+VIDY2kD+2hKj278x1YRV5jiwgOErg=
Subject key identifier:   A9:1E:2E:DD:4C:19:0F:C7:F9:1D:4D:C5:A4:74:0C:7C:F6:52:63:8D
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       13145EFB8E5E67448AB8961D8BC8DAE627C5DB5E
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/3230302e33332e32382e302f32342d3234203d3e20323733303734.roa
Signing time:             Tue 06 Jan 2026 19:03:37 +0000
ROA not before:           Tue 06 Jan 2026 18:58:37 +0000
ROA not after:            Tue 05 Jan 2027 19:03:37 +0000
asID:                     273074
IP address blocks:        200.33.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:14:5e:fb:8e:5e:67:44:8a:b8:96:1d:8b:c8:da:e6:27:c5:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Jan  6 18:58:37 2026 GMT
            Not After : Jan  5 19:03:37 2027 GMT
        Subject: CN=A91E2EDD4C190FC7F91D4DC5A4740C7CF652638D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:d0:d7:0c:bc:8a:43:97:b8:7e:5c:3e:46:
                    3e:5e:01:a6:85:7e:ce:b1:a5:92:ea:3c:dd:2d:f1:
                    c4:13:74:ae:e8:9b:08:fd:e9:26:95:89:42:b7:a2:
                    be:39:31:7d:aa:19:a0:fd:13:e7:92:73:73:ad:6c:
                    83:51:b8:b6:15:81:98:08:ff:ca:b1:c0:74:fc:8b:
                    ed:1f:f9:1e:47:20:3d:7a:43:6a:8a:19:a5:e5:da:
                    05:8b:87:6f:b5:93:b8:b1:99:87:ae:91:e2:36:96:
                    f4:d5:61:bd:cd:98:e8:40:1f:75:8b:f7:02:c6:8b:
                    c3:42:14:40:c5:ed:d6:93:15:7b:8f:4a:78:88:d1:
                    a7:5f:ca:b9:75:b7:d6:b1:05:e2:12:b1:93:bd:54:
                    66:b1:e3:80:85:a2:d6:db:ee:a0:5d:0a:de:a2:64:
                    4b:27:dd:e1:33:ac:ed:0f:26:c7:65:e3:e5:c4:35:
                    31:ef:13:36:9e:07:d2:5c:86:b1:a8:70:c4:52:14:
                    1a:8d:b8:f5:97:43:69:22:ed:12:21:a3:5b:e6:86:
                    c5:ba:68:de:d5:3f:33:f7:f3:33:f1:93:a8:28:1a:
                    ce:eb:eb:a4:03:48:ff:5c:10:69:c1:39:dc:b9:2f:
                    50:11:1b:6f:82:8b:62:9b:34:66:30:14:62:18:e9:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:2E:DD:4C:19:0F:C7:F9:1D:4D:C5:A4:74:0C:7C:F6:52:63:8D
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/3230302e33332e32382e302f32342d3234203d3e20323733303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:c4:be:36:eb:b3:25:7a:f1:ad:28:75:c7:a9:92:4f:96:
         1b:c0:cc:82:95:23:6f:0c:64:41:ea:2b:7c:f5:31:68:ba:f6:
         51:6f:08:8d:ab:2f:a6:9f:b3:03:04:df:e6:da:91:1c:22:19:
         ed:f1:d6:8e:b1:2f:13:e3:df:e6:b6:f1:85:d1:16:67:9a:e2:
         1d:9a:99:d6:91:3a:7c:57:5e:c0:ef:d5:2f:37:70:a6:88:cb:
         4f:23:a2:50:ff:de:05:4d:8f:f9:b7:17:1a:2b:48:ef:f1:cb:
         39:6a:a6:ae:a8:06:3f:7d:0b:4b:ed:d4:b6:84:8d:98:32:59:
         93:af:4a:34:88:00:dd:d4:4e:0c:9b:a9:61:dc:4a:99:15:17:
         92:8a:20:fe:d7:72:e8:82:bd:9b:ac:8b:ac:44:64:3f:3a:5a:
         47:a2:8f:e0:93:da:84:67:bf:bb:2e:8a:ed:7a:8b:67:44:be:
         aa:28:6a:ee:15:17:49:25:23:8c:98:54:73:ee:ad:5e:e5:2a:
         3b:16:5c:63:64:32:47:bd:c0:4e:f4:d1:f1:37:9c:20:ce:b8:
         1e:53:46:6e:76:0b:9e:54:48:51:df:0b:4e:86:52:99:0d:ab:
         4a:cf:44:ed:87:50:a8:32:5f:18:41:15:d1:79:e9:2b:a7:98:
         c0:a7:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:43 2026 by rpki-client