This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          4Oo/c66J2CwhX1SNHPDm+QuEtoaulOSxKkla2IC6hWA=
Subject key identifier:   36:9D:64:CC:F0:9F:D1:D9:DF:D6:88:8A:53:BD:FB:A3:19:2A:38:C9
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       6C65EABF02B717BE0DC0ABCC27B7AF24CCD96146
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:16 +0000
ROA not before:           Tue 06 Jan 2026 20:53:16 +0000
ROA not after:            Tue 05 Jan 2027 20:58:16 +0000
asID:                     13381
IP address blocks:        200.112.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:65:ea:bf:02:b7:17:be:0d:c0:ab:cc:27:b7:af:24:cc:d9:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:16 2026 GMT
            Not After : Jan  5 20:58:16 2027 GMT
        Subject: CN=369D64CCF09FD1D9DFD6888A53BDFBA3192A38C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:5e:3b:00:d3:6f:b4:74:fe:9e:29:3f:12:
                    7a:70:bd:16:82:f8:cc:b3:58:43:44:30:f4:91:4e:
                    ba:42:47:1a:55:42:23:83:ae:87:bd:aa:a2:8a:00:
                    2f:29:27:84:98:19:9d:42:a9:95:5a:44:e0:52:93:
                    d2:ce:27:dc:91:81:c3:27:9d:3e:84:e4:56:c0:66:
                    bf:62:b8:89:b7:7d:f8:d9:a3:f4:74:95:12:7a:23:
                    40:de:ad:81:e4:ae:d6:5c:40:9c:4f:2f:e5:c8:a4:
                    7d:9d:a1:89:41:12:67:0c:a8:ef:83:f4:b1:2f:c0:
                    74:13:fc:81:55:d2:a4:c9:e8:cf:2e:fb:58:07:4e:
                    0a:6f:e2:50:21:ea:be:6a:fc:75:60:33:7d:41:5f:
                    24:ad:95:2a:ff:d1:f6:08:b0:9a:98:57:6f:f5:bb:
                    c6:42:62:6a:94:45:ff:03:1a:8d:84:41:01:52:33:
                    d4:d7:ed:f5:88:69:8e:d2:08:ae:b1:02:71:77:94:
                    03:8f:50:5f:bb:ba:07:06:7a:0b:83:5b:d5:5c:1e:
                    0a:55:ff:f6:85:70:cf:62:4e:37:c5:9f:e7:f1:8d:
                    af:65:79:bb:65:7c:a1:65:91:ee:c0:1f:12:39:45:
                    b7:ce:3b:35:c4:e7:2b:62:e5:3a:18:b5:ee:f8:09:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9D:64:CC:F0:9F:D1:D9:DF:D6:88:8A:53:BD:FB:A3:19:2A:38:C9
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234382e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:11:f3:e3:7e:f6:e0:a3:14:3b:db:f9:73:3c:51:13:27:
         e9:e3:54:c6:62:f2:39:bc:d0:3a:57:62:9e:5d:dd:3d:f5:d7:
         f8:6d:8f:c8:0c:8f:0e:a7:61:cc:9e:92:b2:fb:bc:ef:47:2f:
         15:a6:1c:2b:65:9c:97:91:5f:bf:0b:88:d0:6c:8d:42:34:2c:
         77:b8:4f:cf:0e:a5:5c:8c:10:9a:b2:7d:78:c6:08:fb:a6:d6:
         98:c2:7c:9b:b5:7d:8c:89:20:e2:ff:d3:1f:83:5b:0e:1a:b3:
         5a:b4:80:e4:28:7f:c8:fe:b5:5b:fe:84:87:1a:3d:d6:e0:f3:
         50:10:78:c2:88:28:59:70:66:28:41:ab:fc:a5:0e:40:29:d1:
         3d:a9:4d:ef:27:7b:d9:a3:72:48:bd:f3:a0:bb:d2:87:02:3e:
         78:b9:19:a1:f1:89:87:8c:11:b7:38:6b:1b:7d:dc:77:3e:17:
         fe:71:c9:1f:bb:52:15:d0:2c:fd:a3:f3:13:a4:5b:54:5d:68:
         28:50:7a:8c:fe:ab:c9:6c:39:fb:e8:1a:f2:25:50:af:17:5e:
         34:43:ed:25:2f:96:2e:a7:0e:b0:c0:4d:59:61:8a:78:54:10:
         78:83:90:01:30:33:4c:73:7a:2a:ec:82:5e:e2:5f:fa:ba:e7:
         cf:0f:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 08:16:44 2026 by rpki-client