This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          rw1AE+Rh4UF/sP80XbVNnjJTVZLmqEYP6nWRK7y/qYc=
Subject key identifier:   22:A6:3F:4A:EA:9E:49:D3:F6:14:AD:3E:B0:38:40:C8:35:A9:89:E2
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       234AFFC6DC562E2C84EEA266B398F2B323C358F1
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 06 Jan 2026 19:09:01 +0000
ROA not before:           Tue 06 Jan 2026 19:04:01 +0000
ROA not after:            Tue 05 Jan 2027 19:09:01 +0000
asID:                     52283
IP address blocks:        200.108.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Jan 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:ff:c6:dc:56:2e:2c:84:ee:a2:66:b3:98:f2:b3:23:c3:58:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Jan  6 19:04:01 2026 GMT
            Not After : Jan  5 19:09:01 2027 GMT
        Subject: CN=22A63F4AEA9E49D3F614AD3EB03840C835A989E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:b2:f9:72:47:d7:53:c7:6b:42:07:be:c1:
                    11:35:b0:64:82:d5:06:fe:9a:1c:1d:50:4c:34:d7:
                    3c:8d:1b:a5:33:38:0d:f1:be:97:d9:22:4f:33:18:
                    39:fa:a1:9c:4b:2b:45:56:6b:63:95:4f:de:e9:d8:
                    4d:f9:98:8f:cf:54:31:14:e3:c6:4c:8d:3c:62:c9:
                    fd:2a:9b:00:c7:ab:ab:3d:9d:90:5c:56:57:bf:24:
                    71:40:aa:7b:8d:59:99:e2:c5:5d:89:56:cb:1c:89:
                    50:8b:70:6d:51:b3:05:7e:5b:8c:52:c8:e8:9b:cc:
                    b3:9b:4a:02:5d:e0:55:4c:f5:cd:85:a5:c0:75:8b:
                    b8:a9:ae:38:e4:f6:9d:36:c0:8e:5a:df:5d:82:8b:
                    c8:bb:c1:f8:46:fb:48:8c:bf:75:9e:e6:13:54:60:
                    e8:4f:c0:73:11:d5:ca:ff:1c:a4:17:c7:ff:c8:a0:
                    9f:cf:13:fe:20:2a:2d:29:c1:e1:99:6f:7d:6e:9f:
                    24:e0:76:4d:9f:ff:30:d5:1b:a0:c0:9e:a1:a7:30:
                    55:37:eb:62:2d:f6:22:0b:a1:f2:3a:2e:34:c2:d1:
                    14:1e:12:a4:6e:8b:b3:d5:70:19:1b:bb:9a:50:d1:
                    c9:a3:85:00:09:c0:ac:d7:61:60:fb:30:f4:70:70:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:3F:4A:EA:9E:49:D3:F6:14:AD:3E:B0:38:40:C8:35:A9:89:E2
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131342e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:8f:da:7d:9e:95:f7:c3:46:97:bb:ef:4c:bc:db:73:b5:f5:
         a0:7a:12:b2:02:26:e8:1b:56:87:c2:16:9e:b4:33:2a:2a:87:
         80:d4:ef:b9:10:4b:68:33:2b:4b:99:69:86:bf:61:22:f5:01:
         a8:40:df:87:25:62:63:7e:f5:e6:56:5d:a4:b8:42:fc:13:ba:
         ea:42:8d:0f:b2:96:63:8d:f8:b3:93:c7:d5:8c:50:ba:cd:65:
         28:08:0e:b2:17:54:7b:30:4d:07:4d:39:8d:e1:c0:06:6c:a4:
         76:be:16:30:84:e8:04:08:38:04:5b:51:c1:c0:bb:a5:01:31:
         79:09:90:af:28:03:fc:2b:77:32:c2:b3:b2:75:09:b1:8a:26:
         44:50:9f:53:0d:15:d0:a3:38:01:08:70:13:a5:cc:1a:44:c5:
         79:01:c7:e9:09:dd:cd:3d:ab:8d:a4:7a:1a:f1:f9:1c:6d:a6:
         ec:cf:08:ee:8b:cf:59:76:5f:f6:3e:25:7f:30:4f:dd:2b:12:
         5f:67:f9:6e:e5:52:87:ab:0a:c5:05:30:e8:75:09:fe:f0:09:
         2f:b0:80:7e:24:ab:ef:bf:57:cc:38:9b:86:79:9b:c6:24:c8:
         3e:97:b6:2e:80:af:53:9d:20:0f:83:5c:98:7f:87:50:07:58:
         31:ab:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 22:16:04 2026 by rpki-client