This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa
File:                     3230302e35392e35322e302f32332d3234203d3e2037303439.roa (raw, json)
Hash identifier:          7/Z6DFArKjfF14340pTLvtpflY+znaxPiUgBvNTn87w=
Subject key identifier:   51:17:25:A8:1C:04:DC:00:3E:92:8A:D4:32:40:F2:F9:B2:C8:47:33
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       4653FBE6D124237C02877FC1DA47BDB79367EF01
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa
Signing time:             Tue 06 Jan 2026 19:45:39 +0000
ROA not before:           Tue 06 Jan 2026 19:40:39 +0000
ROA not after:            Tue 05 Jan 2027 19:45:39 +0000
asID:                     7049
IP address blocks:        200.59.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:53:fb:e6:d1:24:23:7c:02:87:7f:c1:da:47:bd:b7:93:67:ef:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Jan  6 19:40:39 2026 GMT
            Not After : Jan  5 19:45:39 2027 GMT
        Subject: CN=511725A81C04DC003E928AD43240F2F9B2C84733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:a1:b3:c1:2b:9f:f5:96:d3:af:f0:8a:26:
                    df:ae:fb:63:b7:9b:68:60:4a:41:37:59:d3:18:1a:
                    71:3e:bf:cf:88:50:7d:69:7b:51:62:c3:d6:af:c3:
                    4a:7f:fe:8c:eb:0b:26:8d:b0:c1:53:00:05:98:c6:
                    ca:fe:5c:04:9c:65:45:d8:05:1e:42:c2:e9:20:58:
                    96:ef:80:41:48:23:3e:d2:13:69:75:47:d8:bf:0d:
                    f5:72:da:1d:83:46:3d:cd:e5:96:03:1d:f5:07:c7:
                    c6:af:27:5e:58:03:64:7b:88:01:d9:f8:f9:c3:7b:
                    13:e6:71:9d:d1:7d:56:7e:2a:7f:d7:5e:bb:66:b0:
                    9f:30:88:98:ad:23:97:27:ba:e5:79:c0:64:c9:c7:
                    b4:df:4e:96:14:52:44:bb:92:89:ad:d1:8c:f7:ad:
                    71:75:64:c9:d4:74:e9:26:f2:7b:76:b1:c3:e0:89:
                    fc:3f:3d:61:03:ce:90:b1:ca:e6:f5:42:7d:a8:28:
                    a3:30:05:39:66:0c:ca:30:4b:fb:28:4c:1b:5d:20:
                    d8:07:dc:91:48:08:e1:ae:60:8f:f2:44:0c:fc:8b:
                    5d:da:17:95:b2:24:b2:f5:c9:4b:5f:fb:55:29:33:
                    bf:c4:06:bb:98:52:06:2a:13:23:45:32:7b:b3:17:
                    19:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:25:A8:1C:04:DC:00:3E:92:8A:D4:32:40:F2:F9:B2:C8:47:33
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e35322e302f32332d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:cb:bb:6a:80:5e:f6:d0:8b:8a:7e:3f:be:c1:39:f6:6e:
         67:5f:1c:ac:00:86:97:68:9f:76:27:a3:a5:74:9a:02:3b:d1:
         06:2a:49:b7:36:fe:e9:10:a5:03:9f:71:cb:84:ef:ea:4c:a4:
         95:d1:33:17:0a:3d:c8:7e:23:d9:72:83:c5:d8:59:f5:ce:b1:
         af:79:5b:c9:dd:8c:87:78:ce:d1:23:c0:09:36:5c:f0:c7:20:
         a8:85:54:6b:b6:14:92:b3:40:9b:52:d0:46:d9:46:29:a6:df:
         2e:eb:5e:10:d3:d3:68:fa:27:27:a7:01:36:fc:ea:6a:74:0b:
         fb:43:4c:94:ea:06:da:23:5e:09:b2:78:ef:50:06:92:67:40:
         b8:44:7b:e5:68:27:0d:33:bf:54:57:cf:d3:3d:67:04:6a:f1:
         b4:c2:b7:1c:66:87:4f:c5:01:ba:14:33:0d:5c:a9:0b:1f:70:
         af:c4:58:f7:bb:b5:1e:ca:84:a2:4d:e7:35:79:93:b0:44:ab:
         11:ae:fc:87:8c:8b:a6:8c:52:be:85:43:4f:35:fb:4e:0d:b5:
         9a:a5:db:01:e8:b6:d8:ba:56:b4:81:fa:2b:0a:e2:9f:28:9f:
         71:47:c0:c9:06:b2:d2:41:a0:0f:f7:03:4c:a8:99:05:53:f1:
         c5:98:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:30:55 2026 by rpki-client