This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131332e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3131332e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          vFGRPfmHVgWYgqwTxELKXn9/OmdXVVaD9Ekq2lZqhuo=
Subject key identifier:   A8:36:7D:B2:2B:6B:C8:77:AE:80:B6:2E:C6:02:8F:14:5E:48:04:0B
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       7E30090EC51D18EDDEC68D57BCCA2570D4391204
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131332e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:55 +0000
ROA not before:           Tue 06 Jan 2026 19:00:55 +0000
ROA not after:            Tue 05 Jan 2027 19:05:55 +0000
asID:                     27823
IP address blocks:        200.58.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:30:09:0e:c5:1d:18:ed:de:c6:8d:57:bc:ca:25:70:d4:39:12:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:55 2026 GMT
            Not After : Jan  5 19:05:55 2027 GMT
        Subject: CN=A8367DB22B6BC877AE80B62EC6028F145E48040B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:b1:11:5e:4b:d2:c8:64:26:f4:61:b8:77:
                    a9:eb:a6:4d:ec:99:7f:da:6f:72:7a:d5:db:e0:e2:
                    4b:27:63:e5:65:39:bc:a0:76:d0:2f:e7:8e:28:70:
                    05:a8:7b:fd:27:6e:23:98:21:0f:fe:2e:ff:db:23:
                    ca:64:45:c7:b9:eb:2a:bd:c0:3d:50:d4:47:80:b3:
                    95:6e:2e:43:d6:af:3c:eb:e0:81:87:68:f6:53:ba:
                    0c:e7:f2:3b:f0:c2:1f:5a:c7:94:d5:21:35:0d:b8:
                    03:73:45:1e:6e:cd:2b:f1:be:b3:18:ec:97:b9:54:
                    98:9f:48:f4:7e:7b:8c:9a:a2:18:aa:37:d6:58:b3:
                    4a:56:13:bc:b1:4d:d5:f2:cf:4b:5d:d1:95:ea:73:
                    8c:9b:bc:00:10:af:7d:79:a4:b3:a6:83:fb:aa:b7:
                    45:01:e7:94:52:15:95:f3:0c:20:fd:06:90:d9:69:
                    3c:9e:89:2d:80:0b:ed:1f:b9:ff:03:4b:40:7f:03:
                    12:d9:a7:62:8a:bc:76:e0:ed:b8:02:72:95:3e:45:
                    22:6a:91:71:35:bc:41:d8:c7:b6:49:30:95:72:7e:
                    ab:6f:e2:fa:65:d2:3f:14:04:7f:58:ae:dd:47:52:
                    6c:c9:5a:b6:31:eb:e7:b4:b7:44:8e:5f:93:f5:59:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:7D:B2:2B:6B:C8:77:AE:80:B6:2E:C6:02:8F:14:5E:48:04:0B
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131332e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:9f:a8:dc:96:49:f0:a8:0e:42:71:11:f1:b1:13:e1:c1:
         d6:34:55:a1:00:0e:88:1b:86:63:ac:a5:8a:1a:bb:0d:9f:4b:
         5a:d7:92:56:48:a3:fd:b6:d7:dd:5a:5c:b0:36:0f:04:94:a5:
         94:8f:e9:1c:bf:9f:7b:af:0f:9e:f2:25:04:9f:de:7f:8f:07:
         38:e9:11:b5:db:38:75:1d:00:ca:70:d4:f9:06:27:21:97:a1:
         0d:41:7c:bd:87:c2:fe:0d:a3:90:74:1e:7c:6d:7d:ef:00:4f:
         4c:58:4d:0f:85:97:72:42:ad:da:10:44:62:43:7f:4c:94:e9:
         46:dc:8c:20:1e:b2:23:80:3c:05:23:bd:ab:da:92:1b:6b:38:
         c9:d0:8e:cc:b0:97:ea:29:81:79:7e:88:94:18:56:5a:98:1e:
         6c:23:9b:d7:b0:64:76:5a:7b:e0:3a:97:e3:eb:71:19:0c:ba:
         d9:8a:b0:f7:09:77:e0:6a:8e:d6:df:3a:eb:7f:be:48:7c:46:
         c0:59:ed:2a:ff:e7:fe:0f:99:fe:d0:26:33:71:35:e1:73:51:
         55:12:7a:e2:41:6a:f2:91:9c:46:c5:bd:0d:3a:1e:71:c2:78:
         a8:81:a5:8a:e3:c7:14:c7:0a:f5:ee:3f:f3:42:fc:bb:ad:da:
         8d:9b:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:58 2026 by rpki-client