This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
File:                     3230302e35342e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          lwNPoJ4TzUqNRx/pZUV2f6wDzDHn/HHjtCxh56BK+JE=
Subject key identifier:   2C:CD:BC:55:F3:61:9A:EE:14:AA:5E:D8:78:39:F2:15:A6:B8:5C:5E
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       3D05148EF5FF1FEF4187435FDFB346D4B34BB079
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:26:36 +0000
ROA not before:           Tue 06 Jan 2026 19:21:36 +0000
ROA not after:            Tue 05 Jan 2027 19:26:36 +0000
asID:                     16629
IP address blocks:        200.54.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:05:14:8e:f5:ff:1f:ef:41:87:43:5f:df:b3:46:d4:b3:4b:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Jan  6 19:21:36 2026 GMT
            Not After : Jan  5 19:26:36 2027 GMT
        Subject: CN=2CCDBC55F3619AEE14AA5ED87839F215A6B85C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:b9:33:6c:9e:3f:cd:9d:06:dc:a9:5f:cc:
                    5b:7c:36:02:ba:05:f8:4f:f3:f5:d9:b1:33:58:89:
                    d5:2b:02:7b:39:d7:e5:ab:c0:37:b4:06:84:72:20:
                    93:b6:40:d4:60:3c:11:dc:93:91:3a:d8:3a:bb:79:
                    08:b3:7e:f1:ff:f3:33:31:57:b2:6d:57:1c:8b:36:
                    6f:d6:4f:c4:d4:ea:69:b9:68:27:cf:a0:cd:4b:af:
                    6d:b4:9c:67:87:bf:61:8f:f1:34:87:06:1f:8f:07:
                    5e:b7:09:7b:d6:6f:9d:2b:ea:f3:5e:95:69:ab:1a:
                    a7:54:6e:ff:f5:ea:e1:f0:95:67:cf:1d:e1:ac:e1:
                    73:0d:68:48:64:c6:29:b2:fb:17:8c:1b:c6:bc:ce:
                    3b:ea:0d:0e:15:11:e2:50:2b:b1:19:80:40:cc:79:
                    25:7c:0e:ba:47:9c:7f:f6:c8:07:7c:01:b0:d0:ed:
                    8b:17:9c:6b:d6:2d:c0:82:d2:7f:8b:6b:8c:b0:11:
                    1a:96:77:44:da:da:bb:f6:e9:08:5b:c3:0c:79:f8:
                    21:47:e4:4e:ee:5e:7b:80:5e:1a:60:3e:dc:0b:16:
                    90:7c:f9:33:b2:44:7f:00:f5:eb:b1:0c:31:42:2b:
                    da:54:fc:fa:ad:5e:e3:00:3c:00:1b:b4:d1:d9:d2:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CD:BC:55:F3:61:9A:EE:14:AA:5E:D8:78:39:F2:15:A6:B8:5C:5E
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:b5:94:05:7b:a9:f3:70:32:2f:8e:92:43:c4:2c:0c:2f:
         01:35:0f:dd:3d:a5:b8:83:30:ac:78:e1:ba:3c:fe:c7:10:66:
         1a:5a:18:02:b2:d5:9b:a7:29:94:45:05:be:3c:a0:60:e3:85:
         af:67:d3:13:6b:42:4d:95:11:b5:13:a5:0e:d3:56:7b:de:e9:
         13:a8:47:c2:bf:a4:26:de:7b:86:9b:95:70:21:d8:31:a9:de:
         b5:99:cf:9e:46:5b:8d:d9:ef:2a:be:bf:45:c8:ec:45:e7:60:
         ff:93:1f:b0:d9:9a:88:e9:38:ae:aa:26:c7:9d:32:58:b8:ed:
         0d:d5:6d:51:1a:ab:f0:9b:ee:be:94:64:1c:cd:5f:70:af:39:
         6e:16:ef:83:3b:e2:44:d1:51:40:80:20:78:53:fd:c1:8f:34:
         b2:17:3e:66:c6:cd:2d:4e:72:f4:0e:05:96:3f:52:44:09:a6:
         11:94:ed:0d:cd:ab:be:52:90:c0:fa:68:c9:75:12:7f:05:92:
         8e:fa:1a:14:cc:31:03:68:81:d4:b9:99:eb:58:46:9a:ef:2d:
         fd:52:c6:8f:81:e8:6b:cb:3c:b5:54:08:31:8c:72:f1:64:24:
         52:27:23:7b:37:d0:0a:76:f4:21:31:47:02:79:37:a4:9c:cc:
         6c:f3:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 08:22:25 2026 by rpki-client