This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa
File:                     3230302e33362e3135362e302f32332d3234203d3e2036313437.roa (raw, json)
Hash identifier:          sAUC8GDKveeLPI4dwgerHhxtC+X3u+NxCRPYBd/yYno=
Subject key identifier:   92:98:47:ED:5A:B1:77:CD:FA:D8:EC:A0:4C:CD:F2:74:CA:84:94:AA
Certificate issuer:       /CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
Certificate serial:       37538175E8563A4145E4A8E0D8E94AB6172DAFB7
Authority key identifier: BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 19:46:10 +0000
ROA not before:           Tue 06 Jan 2026 19:41:10 +0000
ROA not after:            Tue 05 Jan 2027 19:46:10 +0000
asID:                     6147
IP address blocks:        200.36.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:53:81:75:e8:56:3a:41:45:e4:a8:e0:d8:e9:4a:b6:17:2d:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBCA603806A413EA387A2C7FF72A6366E56F516B
        Validity
            Not Before: Jan  6 19:41:10 2026 GMT
            Not After : Jan  5 19:46:10 2027 GMT
        Subject: CN=929847ED5AB177CDFAD8ECA04CCDF274CA8494AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:c1:ad:0c:02:59:1d:0c:31:f2:d3:96:e0:
                    6e:59:c5:a0:f9:e9:53:0f:2d:e6:1f:e3:ab:4f:3d:
                    47:5f:6d:a0:09:2d:32:24:f8:7b:f3:e1:71:aa:a4:
                    ab:ad:11:74:c4:2f:f1:20:6a:6e:7b:7d:33:42:3a:
                    11:7a:f0:bd:cf:9e:74:af:51:f1:4c:60:da:8f:08:
                    ae:97:d3:53:62:41:30:57:79:f9:bd:44:cb:66:e2:
                    ce:a8:30:8e:90:85:d2:b8:6c:0b:31:c8:6e:91:bc:
                    13:eb:82:7a:36:fc:93:7a:62:ee:b8:34:11:91:38:
                    00:ce:4e:65:4b:db:11:29:b0:9a:df:90:5a:d4:4b:
                    89:a1:7f:bb:d5:65:b2:96:fd:97:0a:b2:cb:54:1f:
                    61:77:4f:97:89:45:05:36:71:5a:9e:04:19:15:ad:
                    ec:29:d6:36:d6:10:bf:07:a9:91:00:e0:ce:02:8f:
                    be:b8:ad:8a:fc:f6:3a:11:39:24:81:9d:85:8c:69:
                    61:2b:c5:29:86:9d:a2:3e:1a:c8:71:34:fc:6f:d9:
                    b9:28:06:a1:68:ce:e2:33:c5:ff:82:09:94:ba:9d:
                    2c:e9:78:36:e2:e0:c6:b2:71:33:b0:3a:cf:c0:95:
                    87:73:1a:5b:10:ab:6e:e0:fa:55:3d:b2:6a:d4:b3:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:98:47:ED:5A:B1:77:CD:FA:D8:EC:A0:4C:CD:F2:74:CA:84:94:AA
            X509v3 Authority Key Identifier:
                keyid:BB:CA:60:38:06:A4:13:EA:38:7A:2C:7F:F7:2A:63:66:E5:6F:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBCA603806A413EA387A2C7FF72A6366E56F516B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A0AE48F728FCD2DC9FBE93F7EC322A9DFD445DF79F9AE17913B5D15E39CB51D/0/3230302e33362e3135362e302f32332d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:26:47:5e:bf:ed:72:c2:5b:5c:13:97:e1:38:40:3a:04:
         eb:a4:71:42:0e:2a:fc:a6:80:b5:12:17:36:bd:35:d5:71:92:
         37:76:b4:37:d6:b1:c2:06:c0:f2:45:19:f6:67:a6:4d:c8:14:
         e9:4b:2b:6d:f6:28:46:9e:f8:7d:7d:0f:af:45:cf:3b:ad:2c:
         a5:02:77:bb:53:e7:5a:80:7a:20:c5:15:23:90:05:40:68:0f:
         da:d2:d0:cd:22:4a:21:89:36:29:a5:da:cd:76:bf:03:ff:85:
         ec:56:2b:c6:30:f9:c1:9b:23:a7:0a:a9:79:bf:1d:6b:11:a3:
         fd:71:55:18:e7:97:8a:d9:06:0c:ff:a8:12:9a:26:0c:ec:0e:
         05:5d:fa:41:72:a9:bd:15:07:15:46:0f:f9:29:9f:a9:a3:09:
         1e:d6:3a:92:9a:46:73:e0:5e:81:bc:9f:a3:70:84:d8:c8:b3:
         d1:ae:c1:1f:43:41:76:23:04:47:5c:68:2a:f7:6b:e8:43:24:
         77:c7:e6:26:43:eb:e1:27:b1:25:7a:9e:7d:02:7f:13:71:db:
         99:78:12:58:ba:b3:72:ac:3b:ea:c0:cc:5b:c8:aa:3b:62:1f:
         ae:eb:eb:c6:e8:46:bd:3d:b1:b8:19:3a:71:d6:a2:78:5c:b6:
         1f:d2:ac:f0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUN1OBdehWOkFF5Kjg2OlKthctr7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJDQTYwMzgwNkE0MTNFQTM4N0EyQzdGRjcyQTYzNjZF
NTZGNTE2QjAeFw0yNjAxMDYxOTQxMTBaFw0yNzAxMDUxOTQ2MTBaMDMxMTAvBgNV
BAMTKDkyOTg0N0VENUFCMTc3Q0RGQUQ4RUNBMDRDQ0RGMjc0Q0E4NDk0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzMGtDAJZHQwx8tOW4G5ZxaD5
6VMPLeYf46tPPUdfbaAJLTIk+Hvz4XGqpKutEXTEL/Egam57fTNCOhF68L3PnnSv
UfFMYNqPCK6X01NiQTBXefm9RMtm4s6oMI6QhdK4bAsxyG6RvBPrgno2/JN6Yu64
NBGROADOTmVL2xEpsJrfkFrUS4mhf7vVZbKW/ZcKsstUH2F3T5eJRQU2cVqeBBkV
rewp1jbWEL8HqZEA4M4Cj764rYr89joROSSBnYWMaWErxSmGnaI+GshxNPxv2bko
BqFozuIzxf+CCZS6nSzpeDbi4MaycTOwOs/AlYdzGlsQq27g+lU9smrUs+ivAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUkphH7Vqxd8362OygTM3ydMqElKowHwYDVR0j
BBgwFoAUu8pgOAakE+o4eix/9ypjZuVvUWswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTBBRTQ4RjcyOEZDRDJEQzlGQkU5M0Y3RUMzMjJBOURG
RDQ0NURGNzlGOUFFMTc5MTNCNUQxNUUzOUNCNTFELzAvQkJDQTYwMzgwNkE0MTNF
QTM4N0EyQzdGRjcyQTYzNjZFNTZGNTE2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkNBNjAzODA2QTQxM0VBMzg3
QTJDN0ZGNzJBNjM2NkU1NkY1MTZCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEEwQUU0OEY3MjhGQ0QyREM5RkJFOTNGN0VDMzIyQTlERkQ0NDVERjc5
RjlBRTE3OTEzQjVEMTVFMzlDQjUxRC8wLzMyMzAzMDJlMzMzNjJlMzEzNTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIJJwwDQYJ
KoZIhvcNAQELBQADggEBABYsJkdev+1ywltcE5fhOEA6BOukcUIOKvymgLUSFza9
NdVxkjd2tDfWscIGwPJFGfZnpk3IFOlLK232KEae+H19D69FzzutLKUCd7tT51qA
eiDFFSOQBUBoD9rS0M0iSiGJNiml2s12vwP/hexWK8Yw+cGbI6cKqXm/HWsRo/1x
VRjnl4rZBgz/qBKaJgzsDgVd+kFyqb0VBxVGD/kpn6mjCR7WOpKaRnPgXoG8n6Nw
hNjIs9GuwR9DQXYjBEdcaCr3a+hDJHfH5iZD6+EnsSV6nn0CfxNx25l4Eli6s3Ks
O+rAzFvIqjtiH67r68boRr09sbgZOnHWonhcth/SrPA=
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:15 2026 by rpki-client