This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131392e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3131392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          LOn9w+oLl02EO9iJcjnjZlqtQTakdSJAIFcHvRfkluI=
Subject key identifier:   13:F4:D6:98:B9:D5:F0:55:19:F6:44:33:A6:F0:A6:7E:AE:67:72:3C
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5B3D4EC5446B8E7A40D1265F4C3F394075425F90
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:59 +0000
ROA not before:           Tue 06 Jan 2026 19:00:59 +0000
ROA not after:            Tue 05 Jan 2027 19:05:59 +0000
asID:                     27823
IP address blocks:        200.58.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3d:4e:c5:44:6b:8e:7a:40:d1:26:5f:4c:3f:39:40:75:42:5f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:59 2026 GMT
            Not After : Jan  5 19:05:59 2027 GMT
        Subject: CN=13F4D698B9D5F05519F64433A6F0A67EAE67723C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:3d:ac:c0:e6:b3:d0:f6:ff:e2:4c:7f:cd:
                    84:68:5d:6a:36:29:55:e6:49:f5:5f:83:b4:be:a5:
                    65:ab:ee:80:66:56:36:49:ea:20:08:10:11:af:2c:
                    6e:6d:14:9f:f2:66:d0:e6:9f:32:76:73:52:44:48:
                    07:17:5b:61:95:4f:6f:f7:5a:ee:98:ec:b8:52:5b:
                    0d:c9:07:a4:ed:ca:81:ee:10:1f:c7:46:b6:a5:ec:
                    0f:87:a1:ff:5c:34:19:86:f6:ac:87:76:6a:b2:10:
                    6f:30:86:09:f8:5c:7c:4b:f5:88:4c:34:dc:b8:74:
                    38:97:ca:66:7e:18:86:03:a5:6c:56:ad:3f:c4:e1:
                    8a:73:d5:0e:fe:e2:0e:b6:4c:c5:d0:2b:45:be:a8:
                    e1:0c:28:e7:cc:6d:fc:9c:64:69:14:85:12:ff:77:
                    90:7a:75:96:00:ca:1a:1e:51:42:d9:c6:b9:db:7d:
                    bf:35:1f:ec:ed:81:e7:ae:ae:50:c7:7c:e4:b3:bd:
                    e8:2f:10:29:80:e9:58:81:33:21:2d:9c:f2:43:17:
                    5c:42:0e:db:c8:f6:11:20:e7:4b:9b:8d:79:7d:82:
                    99:1c:e5:3c:9a:93:e4:c1:03:67:98:84:1d:13:c9:
                    3e:db:78:c8:b0:c3:35:84:87:53:e1:18:04:b2:e3:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F4:D6:98:B9:D5:F0:55:19:F6:44:33:A6:F0:A6:7E:AE:67:72:3C
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3131392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:50:07:9c:e2:ae:c7:83:6d:4d:9c:27:50:b7:ae:45:2e:4c:
         ba:ad:1b:9b:e6:37:52:04:6a:48:de:0e:39:b9:12:fa:4e:c7:
         51:81:a3:e6:6b:4f:17:54:dd:ab:1c:b0:7d:62:e8:09:83:83:
         44:ae:29:ca:d4:6a:90:3f:89:ac:09:e5:94:53:68:fa:95:41:
         97:72:6a:ba:1d:dd:60:39:6c:87:75:c5:75:ea:ac:6b:a8:f5:
         95:a5:8e:37:ee:46:0a:3e:ed:0f:47:db:64:49:52:94:d0:27:
         d3:f9:e7:7d:30:c5:ca:86:68:56:ed:1f:01:5e:54:1d:7a:e7:
         ba:0b:00:38:0b:82:01:89:b1:a6:eb:cc:70:02:60:dc:3b:30:
         92:31:77:1f:81:ae:0b:16:9a:cc:60:37:8f:5b:1f:a4:9e:74:
         36:41:68:02:b6:f5:f8:66:e6:9a:d7:2e:bd:af:02:a0:10:29:
         b2:39:0f:8d:52:75:5f:3a:68:8e:f7:48:90:9d:63:14:ac:03:
         7e:9f:1f:d5:ad:ad:42:b5:ba:44:db:9b:26:cc:11:e8:cc:98:
         44:fd:d6:5f:15:c0:b5:3b:ec:f3:71:a1:97:97:73:b0:1b:c6:
         84:1d:c2:92:17:82:f9:1b:51:97:5f:8d:f9:66:46:3b:e0:ac:
         fb:bb:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:59 2026 by rpki-client