This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
File:                     3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa (raw, json)
Hash identifier:          w6SsM+uWHviGxLG25s6wNrxYtu1JWM9ySiChhHHRlwE=
Subject key identifier:   04:4D:B6:C5:2F:00:AA:7C:8D:E0:D0:32:8F:66:81:06:C7:90:84:5C
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       068BD16912E71158D28A98D3EFA2D6C0C70E9097
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa
Signing time:             Tue 06 Jan 2026 20:58:30 +0000
ROA not before:           Tue 06 Jan 2026 20:53:30 +0000
ROA not after:            Tue 05 Jan 2027 20:58:30 +0000
asID:                     272885
IP address blocks:        200.123.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8b:d1:69:12:e7:11:58:d2:8a:98:d3:ef:a2:d6:c0:c7:0e:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Jan  6 20:53:30 2026 GMT
            Not After : Jan  5 20:58:30 2027 GMT
        Subject: CN=044DB6C52F00AA7C8DE0D0328F668106C790845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:5b:0a:f8:cb:a6:20:65:4a:df:96:d6:f0:
                    2d:d6:c8:83:16:65:94:92:37:09:88:71:e2:65:05:
                    70:2f:37:a9:09:c3:ee:ea:9c:21:e2:4e:d1:81:17:
                    30:e7:5c:34:f8:15:ce:a9:21:78:18:cf:78:52:f4:
                    e1:36:dd:90:a2:03:23:b1:08:c1:78:c8:b6:17:87:
                    9f:b6:e7:3a:11:9a:17:1c:20:b0:39:45:16:b3:23:
                    b1:ef:7a:8f:29:01:c3:9f:48:f8:7a:18:40:8e:da:
                    cf:94:f3:8a:48:f2:00:76:6a:82:da:0c:c4:12:9c:
                    05:02:78:89:2d:02:60:ac:bc:81:63:08:51:52:a6:
                    37:81:ab:ac:22:0a:6c:53:7d:85:b2:c8:3d:3d:6b:
                    ca:ea:d7:6a:34:32:cc:09:80:7d:5c:69:e8:7e:ef:
                    17:09:c8:d2:55:b8:f0:97:7d:41:36:06:c0:00:43:
                    23:e6:e4:ca:75:56:4a:29:36:b5:5d:b5:83:26:5d:
                    e1:8a:1d:66:f4:7a:a6:21:55:8c:3b:3e:a5:4a:b3:
                    16:9a:2e:67:3d:07:29:c6:1f:b1:a5:c9:67:3a:5b:
                    b3:04:d5:50:e3:2b:c6:66:76:e2:df:93:7b:84:67:
                    22:74:0e:54:69:94:7f:6e:c5:ff:d5:8c:b9:05:41:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:B6:C5:2F:00:AA:7C:8D:E0:D0:32:8F:66:81:06:C7:90:84:5C
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33342e302f32332d3234203d3e20323732383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:af:b5:a6:93:b4:83:0d:2e:6e:88:ff:dd:ab:b6:d9:7b:b5:
         fc:de:8e:d2:28:04:ab:e1:2a:cb:63:72:ac:7e:5e:8f:10:27:
         4b:9f:76:91:0b:4d:bb:6f:b6:ce:24:a2:9e:b9:c2:e3:c7:fb:
         57:b2:7d:0d:3b:46:96:8c:6b:a9:fb:1c:09:f5:67:8c:da:01:
         f9:31:02:50:1e:cf:37:d3:77:0e:45:1d:af:9c:7c:69:f9:6c:
         5e:be:cc:cd:5b:90:2e:e9:c8:3a:12:a5:31:a4:ed:ba:ed:e7:
         dc:04:c0:0a:38:56:bf:44:25:95:d1:32:84:25:ab:64:07:45:
         a4:37:e4:4a:d1:b8:dc:04:35:ec:d3:a6:e6:00:d1:b6:a9:e9:
         f0:5b:bf:e8:4b:c8:85:0c:2e:5a:78:db:d9:ba:81:38:99:ef:
         d7:e1:0c:0f:e8:cb:b0:45:fd:a7:ab:c2:fa:0c:97:76:74:5d:
         5c:3a:51:53:09:01:ac:a7:2b:da:32:e9:8e:fe:2f:4d:3e:45:
         56:cb:80:35:42:b7:82:43:82:f0:93:e8:58:88:f5:17:39:f4:
         9c:8d:d9:fe:ff:c4:65:77:6a:43:08:9a:25:08:2e:ca:22:f0:
         e8:c3:03:45:1d:b4:52:db:6e:0f:d1:6d:28:38:7a:41:1e:54:
         bf:3e:74:f6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBovRaRLnEVjSipjT76LWwMcOkJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQwNUZGOTYyQzEyNDBCMkU4Q0M2OEI0RUE0MUQxODdD
NTUwOTU5MTAeFw0yNjAxMDYyMDUzMzBaFw0yNzAxMDUyMDU4MzBaMDMxMTAvBgNV
BAMTKDA0NERCNkM1MkYwMEFBN0M4REUwRDAzMjhGNjY4MTA2Qzc5MDg0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+1sK+MumIGVK35bW8C3WyIMW
ZZSSNwmIceJlBXAvN6kJw+7qnCHiTtGBFzDnXDT4Fc6pIXgYz3hS9OE23ZCiAyOx
CMF4yLYXh5+25zoRmhccILA5RRazI7Hveo8pAcOfSPh6GECO2s+U84pI8gB2aoLa
DMQSnAUCeIktAmCsvIFjCFFSpjeBq6wiCmxTfYWyyD09a8rq12o0MswJgH1caeh+
7xcJyNJVuPCXfUE2BsAAQyPm5Mp1VkopNrVdtYMmXeGKHWb0eqYhVYw7PqVKsxaa
Lmc9BynGH7GlyWc6W7ME1VDjK8ZmduLfk3uEZyJ0DlRplH9uxf/VjLkFQRALAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBE22xS8AqnyN4NAyj2aBBseQhFwwHwYDVR0j
BBgwFoAU7QX/liwSQLLozGi06kHRh8VQlZEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQkM4MUUzQzhCRkMwMjhFRkFDRjA4NjE0OTUxRkQwREI5
QTg2MjMyQ0MyNUNGOEI2MDZCQTcwNzVENjA2M0Y1LzAvRUQwNUZGOTYyQzEyNDBC
MkU4Q0M2OEI0RUE0MUQxODdDNTUwOTU5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDA1RkY5NjJDMTI0MEIyRThD
QzY4QjRFQTQxRDE4N0M1NTA5NTkxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUJDODFFM0M4QkZDMDI4RUZBQ0YwODYxNDk1MUZEMERCOUE4NjIzMkND
MjVDRjhCNjA2QkE3MDc1RDYwNjNGNS8wLzMyMzAzMDJlMzEzMjMzMmUzMzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByHsi
MA0GCSqGSIb3DQEBCwUAA4IBAQBhr7Wmk7SDDS5uiP/dq7bZe7X83o7SKASr4SrL
Y3Ksfl6PECdLn3aRC027b7bOJKKeucLjx/tXsn0NO0aWjGup+xwJ9WeM2gH5MQJQ
Hs8303cORR2vnHxp+WxevszNW5Au6cg6EqUxpO267efcBMAKOFa/RCWV0TKEJatk
B0WkN+RK0bjcBDXs06bmANG2qenwW7/oS8iFDC5aeNvZuoE4me/X4QwP6MuwRf2n
q8L6DJd2dF1cOlFTCQGspyvaMumO/i9NPkVWy4A1QreCQ4Lwk+hYiPUXOfScjdn+
/8Rld2pDCJolCC7KIvDowwNFHbRS224P0W0oOHpBHlS/PnT2
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:41:31 2026 by rpki-client