This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa
File:                     3230302e33322e36352e302f32342d3234203d3e203133353931.roa (raw, json)
Hash identifier:          hVjldMp+QEpcU3X9WnafAVuTxj2XHZ0mqCeyxrUdh6Q=
Subject key identifier:   DD:3E:DD:D1:EB:29:93:4B:26:89:F4:7D:29:E2:78:C0:71:BD:4A:D5
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       28E5A101D01449EC9CC3A6F30D4D27E4D4DD7076
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa
Signing time:             Tue 06 Jan 2026 19:35:18 +0000
ROA not before:           Tue 06 Jan 2026 19:30:18 +0000
ROA not after:            Tue 05 Jan 2027 19:35:18 +0000
asID:                     13591
IP address blocks:        200.32.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e5:a1:01:d0:14:49:ec:9c:c3:a6:f3:0d:4d:27:e4:d4:dd:70:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:18 2026 GMT
            Not After : Jan  5 19:35:18 2027 GMT
        Subject: CN=DD3EDDD1EB29934B2689F47D29E278C071BD4AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a2:04:1f:fb:cc:7b:54:9b:81:2c:37:af:1d:
                    47:a8:67:21:97:fa:d4:a6:f0:d6:1b:cf:c8:0b:26:
                    a3:6c:29:e0:32:57:39:c3:76:b5:4a:b4:4d:be:74:
                    9c:01:ea:50:3d:5f:e6:a4:b6:b1:47:cd:75:b3:15:
                    5a:18:6f:4f:cf:ac:1e:2a:1a:1d:03:12:3e:ef:3e:
                    bc:97:81:f2:f9:44:ae:5f:42:0f:84:d5:99:a3:0e:
                    58:d1:b1:ad:22:2b:15:2e:24:34:58:0d:de:72:07:
                    6c:5f:8f:fb:27:f9:43:e2:0e:39:b4:cd:05:c0:6b:
                    d3:56:54:d9:87:ee:5b:54:0a:ad:57:d1:7f:bc:1d:
                    db:26:73:bc:35:c3:00:d9:76:14:7b:0d:a1:05:aa:
                    46:71:9d:4b:f2:29:5d:90:ac:d0:fe:f9:f1:80:dc:
                    c1:52:4c:60:8a:cd:b2:4f:c9:f4:3a:b2:dd:05:c2:
                    35:a7:8d:16:5c:01:16:43:6f:a1:35:80:e9:64:36:
                    b5:b5:d3:52:30:ce:16:57:ec:23:38:a9:0a:0d:90:
                    13:78:c6:c9:5c:2e:e1:5d:a3:52:d8:8b:bd:da:f3:
                    c5:f7:01:c3:f4:cc:0f:d8:87:08:55:27:28:9b:14:
                    37:80:99:53:9c:89:e6:be:44:05:0a:64:63:5c:58:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:DD:D1:EB:29:93:4B:26:89:F4:7D:29:E2:78:C0:71:BD:4A:D5
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36352e302f32342d3234203d3e203133353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:74:67:86:dc:e1:52:3c:3e:9d:ed:f1:fc:7e:16:fc:0c:
         d0:bb:54:58:5e:3e:c2:95:29:38:28:b7:88:e0:05:d6:a9:86:
         57:d8:6d:23:31:e0:6d:5e:fd:ac:fc:b9:c1:73:4b:a1:08:b2:
         ee:ae:b4:1f:66:9b:38:ee:27:83:f0:ee:66:e2:17:24:64:ea:
         0f:d6:fc:78:b9:1e:69:b9:49:4c:8d:1b:39:16:0e:43:78:0a:
         29:c7:55:be:89:1d:b2:8d:42:ad:fc:d7:0a:97:0e:2d:d6:2c:
         99:9b:60:f7:25:7a:d9:90:e0:3b:51:0c:4d:56:32:c7:3e:23:
         b1:b4:48:a7:7b:e9:45:ef:5d:4c:ea:b3:d3:16:91:f7:29:57:
         8a:c0:9a:dc:1c:7f:b1:3b:86:79:8d:2b:0e:9a:2f:7f:6f:d5:
         de:06:ab:da:2e:ff:4a:bf:1c:54:1d:90:86:2b:fe:e1:43:ed:
         8d:9f:c8:8f:83:9c:92:06:11:d9:4c:dc:42:87:93:c1:ac:3d:
         e8:fc:1c:bd:c2:fd:c2:5c:5a:d3:11:fb:ed:2d:d5:0f:af:ce:
         fb:1b:9a:7c:72:39:d0:1e:84:43:17:43:a4:a9:fe:60:b0:6b:
         a4:c1:aa:80:9c:2b:69:fb:d2:9c:8a:d4:38:4f:de:36:bd:e3:
         38:2f:07:3e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKOWhAdAUSeycw6bzDU0n5NTdcHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAxMDYxOTMwMThaFw0yNzAxMDUxOTM1MThaMDMxMTAvBgNV
BAMTKEREM0VEREQxRUIyOTkzNEIyNjg5RjQ3RDI5RTI3OEMwNzFCRDRBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhogQf+8x7VJuBLDevHUeoZyGX
+tSm8NYbz8gLJqNsKeAyVznDdrVKtE2+dJwB6lA9X+aktrFHzXWzFVoYb0/PrB4q
Gh0DEj7vPryXgfL5RK5fQg+E1ZmjDljRsa0iKxUuJDRYDd5yB2xfj/sn+UPiDjm0
zQXAa9NWVNmH7ltUCq1X0X+8Hdsmc7w1wwDZdhR7DaEFqkZxnUvyKV2QrND++fGA
3MFSTGCKzbJPyfQ6st0FwjWnjRZcARZDb6E1gOlkNrW101IwzhZX7CM4qQoNkBN4
xslcLuFdo1LYi73a88X3AcP0zA/YhwhVJyibFDeAmVOciea+RAUKZGNcWHpNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3T7d0espk0smifR9KeJ4wHG9StUwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMDJlMzMzMjJlMzYzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIEEwDQYJ
KoZIhvcNAQELBQADggEBADqydGeG3OFSPD6d7fH8fhb8DNC7VFhePsKVKTgot4jg
BdaphlfYbSMx4G1e/az8ucFzS6EIsu6utB9mmzjuJ4Pw7mbiFyRk6g/W/Hi5Hmm5
SUyNGzkWDkN4CinHVb6JHbKNQq381wqXDi3WLJmbYPcletmQ4DtRDE1WMsc+I7G0
SKd76UXvXUzqs9MWkfcpV4rAmtwcf7E7hnmNKw6aL39v1d4Gq9ou/0q/HFQdkIYr
/uFD7Y2fyI+DnJIGEdlM3EKHk8GsPej8HL3C/cJcWtMR++0t1Q+vzvsbmnxyOdAe
hEMXQ6Sp/mCwa6TBqoCcK2n70pyK1DhP3ja94zgvBz4=
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:13 2026 by rpki-client