This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3132322e3139322e302f31382d3138203d3e203133343839.roa
File:                     3230302e3132322e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          GjplwbF9pjrAxWph2db4aQOncierGmh9937wQLz+Cq8=
Subject key identifier:   B9:74:37:FA:39:C0:9E:32:6A:E4:5F:34:D3:3D:AE:8C:B9:91:37:06
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       53EA565A63489AE41BE056D0B93AC8F9C3421C88
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3132322e3139322e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:27:48 +0000
ROA not before:           Tue 06 Jan 2026 19:22:48 +0000
ROA not after:            Tue 05 Jan 2027 19:27:48 +0000
asID:                     13489
IP address blocks:        200.122.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:56:5a:63:48:9a:e4:1b:e0:56:d0:b9:3a:c8:f9:c3:42:1c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:48 2026 GMT
            Not After : Jan  5 19:27:48 2027 GMT
        Subject: CN=B97437FA39C09E326AE45F34D33DAE8CB9913706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:3a:ac:1a:ac:43:79:e5:a9:a0:18:f4:ab:
                    9d:48:b1:df:85:70:6a:ea:75:27:ef:52:4d:1c:3a:
                    32:fe:4f:1a:2d:89:6f:89:20:3c:df:26:4e:30:05:
                    33:0a:59:89:47:4d:e5:a7:8d:62:1b:ba:b9:2c:f3:
                    dc:04:bf:ed:0e:c3:4f:f8:bc:fa:ec:9f:29:ce:ae:
                    7d:1c:fd:42:50:e7:05:2b:74:f5:99:95:5c:f4:1a:
                    a4:88:0b:6a:58:9e:74:31:52:82:48:a7:11:ad:5a:
                    b9:7a:29:2a:9c:c7:36:38:10:23:9c:c0:90:73:47:
                    9c:43:7c:66:4a:b7:d7:81:ab:e4:70:81:fc:61:ce:
                    9c:31:db:fd:ea:0f:2c:3a:36:a8:c6:24:4e:db:07:
                    3f:b0:b9:bd:ad:b2:38:05:6f:e5:10:f6:d2:3c:5b:
                    cd:71:f6:3c:f0:78:4a:b8:e9:fa:b4:e6:10:a9:5f:
                    02:8b:cb:2d:89:1a:22:9a:ae:ee:c1:b5:57:5e:c3:
                    a7:e9:18:a1:5d:c8:1e:50:b9:03:e9:43:19:62:f1:
                    bb:4d:59:66:93:18:f8:a5:de:af:c7:3f:8c:83:e6:
                    06:78:cb:6b:0a:08:aa:de:02:88:04:f9:ab:ca:d0:
                    47:33:65:97:96:e2:7a:09:f7:b2:c6:a5:1a:e0:98:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:37:FA:39:C0:9E:32:6A:E4:5F:34:D3:3D:AE:8C:B9:91:37:06
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3132322e3139322e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.122.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:95:f6:91:1c:8b:be:69:ff:06:23:35:e3:96:63:45:36:c3:
         92:87:89:63:d1:09:2e:09:bc:a6:c3:c3:06:6d:7a:55:4c:3d:
         62:5c:15:2d:75:79:34:90:0e:72:f2:e8:c5:b6:fc:22:86:da:
         c5:85:31:7b:0c:d3:be:e6:b6:79:a5:dc:4c:6a:ee:67:c1:4a:
         85:f8:e9:a2:e9:e2:fc:d3:6d:d5:f9:19:6c:7a:a6:af:bd:f2:
         28:38:ed:2d:7b:8b:71:ea:fd:9f:3e:ca:6d:84:de:07:9b:a4:
         ce:00:d2:3a:fa:2f:e8:fc:35:11:67:bc:b9:3d:cc:1f:28:2c:
         6b:37:7f:38:bc:0e:a9:b9:89:eb:fa:8e:14:6b:d9:e4:53:f1:
         b9:49:f8:15:69:34:b0:76:ea:6e:98:0d:7a:7e:0b:f0:0f:95:
         08:22:23:36:37:10:51:3a:a2:a7:39:9b:93:d2:2a:4e:a2:a5:
         8d:21:1a:41:ad:a4:2d:16:8f:9c:df:48:86:00:5a:fe:ed:21:
         bb:96:91:a9:ff:fb:da:47:12:38:a6:e2:27:92:1e:99:6a:a3:
         e0:f2:f1:be:b0:19:b7:8f:c0:e6:de:ec:a0:af:c2:c0:f5:b0:
         a7:e9:cb:8f:56:e9:00:ed:c0:0b:ca:5a:78:6b:1b:0b:b1:cd:
         23:05:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:26:04 2026 by rpki-client