This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34302e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          0enKF4C9JBF0GrKWGlsjMX8fKfFOm0v8mrKo6OU9cn8=
Subject key identifier:   EA:A4:F0:BB:21:4C:E9:CF:90:3C:7E:78:76:89:92:DA:78:32:9E:7D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       65E15E98DFC39450B0198CCFAB814B5A61E48F06
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:04:19 +0000
ROA not before:           Tue 06 Jan 2026 18:59:19 +0000
ROA not after:            Tue 05 Jan 2027 19:04:19 +0000
asID:                     26617
IP address blocks:        200.12.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e1:5e:98:df:c3:94:50:b0:19:8c:cf:ab:81:4b:5a:61:e4:8f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Jan  6 18:59:19 2026 GMT
            Not After : Jan  5 19:04:19 2027 GMT
        Subject: CN=EAA4F0BB214CE9CF903C7E78768992DA78329E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:94:e2:8a:f5:05:8b:a5:2e:a5:40:ec:38:
                    ba:ee:39:b5:b8:e5:07:86:53:ad:74:80:9c:a9:79:
                    86:5b:bc:04:4d:ee:bf:c6:c1:18:0f:11:e4:01:05:
                    22:cf:24:69:1a:27:94:7d:0a:bb:74:27:2b:1b:20:
                    bf:90:ce:2d:51:93:1f:e9:64:de:aa:8a:49:ff:ad:
                    d6:40:bc:ee:ba:76:43:f2:52:e5:90:74:04:c7:80:
                    44:bb:0d:e9:c1:d9:93:71:a1:57:8c:7a:10:c7:82:
                    04:4f:fb:e2:ea:fa:7b:61:e7:a9:fc:b2:f8:dc:ef:
                    d4:0e:c8:40:6d:25:dc:0a:3c:ed:15:e3:57:27:f1:
                    33:82:7f:40:c6:03:26:4f:30:7d:dc:9b:ee:f3:d5:
                    cf:f1:82:95:df:b6:c5:a0:76:3d:e6:8a:6a:45:6f:
                    5e:82:23:c3:45:4a:52:bc:39:fd:b2:dd:c2:17:da:
                    ad:6f:d8:18:f7:0f:d8:5c:54:c6:86:6e:a7:b8:a2:
                    4d:17:c8:a2:aa:0d:47:dd:94:9a:b9:76:af:c4:4c:
                    a2:20:9a:89:ee:1d:ea:9f:ec:94:f5:18:84:bc:9a:
                    e6:ef:1f:b4:60:ca:b0:5c:f9:10:58:ee:3e:5e:b3:
                    c2:98:71:0b:bb:f5:ad:78:26:4e:40:40:e5:75:2f:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:F0:BB:21:4C:E9:CF:90:3C:7E:78:76:89:92:DA:78:32:9E:7D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34302e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:a6:41:5c:e1:aa:56:b9:32:dd:1b:b8:28:f0:91:4c:85:
         9d:72:a1:60:d5:30:d5:55:27:ff:2c:79:69:91:a8:52:2e:47:
         0a:91:2b:c2:c1:21:45:3d:5e:2c:0c:df:8b:11:85:6b:0b:38:
         36:d7:c8:60:cc:04:04:e6:e0:38:cf:8c:f1:45:bc:16:30:02:
         12:81:51:55:b8:27:6c:62:08:99:9b:f2:b1:8c:93:24:e5:30:
         3e:00:ee:00:71:60:54:ac:54:86:7d:f9:67:3b:9a:bb:ea:f5:
         76:a4:cc:fb:8e:4e:1d:0b:57:60:2c:25:45:c7:2d:f6:32:37:
         7e:0a:cb:e9:dc:cf:3c:35:87:21:c4:17:8e:51:94:f8:e1:5e:
         87:2a:61:69:48:a3:d2:9b:4b:ee:d2:e3:4e:d9:f5:44:01:17:
         c0:d5:d0:fa:3b:97:db:24:5e:5d:d1:36:eb:e8:fb:0f:af:a9:
         58:fe:24:c7:53:11:a4:90:3b:60:2a:ee:23:94:79:d7:37:d3:
         68:84:4b:23:ef:75:a6:9f:46:b7:3d:89:cc:35:ca:a8:d7:c2:
         ea:f2:34:28:7f:94:eb:46:e3:14:4b:aa:fe:75:f7:56:18:8b:
         60:5a:19:bc:11:fc:1d:a5:cd:1c:b6:3b:0f:db:8a:27:1d:25:
         6c:e1:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:41:07 2026 by rpki-client