This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa
File:                     3230302e35392e35322e302f32322d3234203d3e203136373332.roa (raw, json)
Hash identifier:          TzSrmcuwYgf4L9FmphbK6n79OBSqar9PKEtpJZrXF34=
Subject key identifier:   F1:4A:F0:95:5E:9B:A4:C2:2C:41:69:26:0D:A9:89:0A:78:08:B9:AD
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       7E56A1C507F537F97744FD52776DF2AD52690A1A
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa
Signing time:             Tue 06 Jan 2026 19:45:40 +0000
ROA not before:           Tue 06 Jan 2026 19:40:40 +0000
ROA not after:            Tue 05 Jan 2027 19:45:40 +0000
asID:                     16732
IP address blocks:        200.59.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:56:a1:c5:07:f5:37:f9:77:44:fd:52:77:6d:f2:ad:52:69:0a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Jan  6 19:40:40 2026 GMT
            Not After : Jan  5 19:45:40 2027 GMT
        Subject: CN=F14AF0955E9BA4C22C4169260DA9890A7808B9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:bd:b3:b8:a3:07:c5:8a:16:9b:93:ab:b8:
                    28:33:34:24:5f:00:96:5d:e3:b4:02:17:1c:7a:44:
                    8d:65:d8:a4:33:00:06:61:33:0a:57:32:95:01:c3:
                    3f:d6:9f:9b:0f:6a:75:47:09:14:1b:5c:3c:9f:46:
                    1d:0b:da:ee:47:a0:0b:97:80:bf:2c:0e:a9:8b:9f:
                    6e:a9:b4:6b:fa:9d:96:3d:b0:c8:d3:03:ef:53:f7:
                    92:f5:6f:f5:82:94:f7:76:04:81:ad:a9:bf:0d:08:
                    75:04:ba:52:00:96:2d:e2:6e:59:d1:3e:2d:4e:fc:
                    d8:39:5f:d4:d5:76:1a:b8:e2:db:8b:d5:03:5f:a8:
                    dd:49:6d:ef:78:31:33:1e:ab:de:14:27:d7:63:9c:
                    a9:66:e7:56:9b:ef:b5:37:15:1d:a0:a0:82:d4:b3:
                    a0:a1:d6:f8:1c:60:60:20:b6:1c:a7:79:f7:d7:82:
                    db:4e:b7:1c:d7:ff:dc:3d:12:4a:cd:b5:81:03:e3:
                    3a:83:39:63:16:6c:b6:ae:64:dc:69:d9:40:a5:5f:
                    e2:89:f3:4e:9e:fb:10:e2:15:e2:eb:ec:41:94:5d:
                    c0:40:0e:54:02:5f:a6:3c:0b:26:87:92:2c:93:9b:
                    f1:6d:52:17:df:dd:13:52:43:45:58:57:d2:41:bd:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:F0:95:5E:9B:A4:C2:2C:41:69:26:0D:A9:89:0A:78:08:B9:AD
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32322d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:e5:a1:cb:17:cc:ff:70:28:10:d9:6f:52:f6:47:80:ad:
         8f:19:62:04:44:95:14:af:6f:57:5d:e9:71:f4:7c:a0:4a:45:
         f3:21:fb:2e:92:ec:8d:4a:bd:cd:4f:c3:ce:13:6e:64:44:9e:
         f0:b1:28:46:1d:1b:e8:e8:4d:3c:87:fb:ad:08:c8:3f:98:b7:
         c5:6f:8a:e8:d0:15:f3:66:de:3e:e6:10:2d:eb:e8:80:4b:cb:
         e5:af:5d:e0:c4:bd:31:80:5b:a1:32:07:f4:09:10:fb:9d:ce:
         6a:1a:4d:14:4b:dd:8f:f5:c8:bb:59:05:e2:4b:e6:5d:b2:c7:
         b3:90:d0:f8:3f:24:93:58:5a:41:74:ad:c4:2e:56:bf:ca:f0:
         40:2e:42:66:19:55:1e:73:98:b7:18:0f:43:cd:71:8e:bf:b0:
         71:0d:ca:8d:40:38:73:57:f1:0a:a6:2e:36:48:0f:b4:37:36:
         67:df:d5:39:04:7a:ee:a9:1f:cb:79:84:51:0a:12:b8:a5:58:
         6b:71:9b:8f:09:a6:75:52:87:a9:d8:93:c0:ee:ff:2f:90:77:
         58:59:6e:88:98:3c:13:5d:7e:36:d5:6a:cf:f0:33:2e:3f:6e:
         0c:ce:69:25:0b:aa:86:44:6d:b6:d3:a5:b6:dd:01:df:a3:3a:
         1f:b3:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 23:23:22 2026 by rpki-client