This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3230302e352e34312e302f32342d3332203d3e2038303438.roa
File:                     3230302e352e34312e302f32342d3332203d3e2038303438.roa (raw, json)
Hash identifier:          HqeEzsoKUMDIvYsBvLZeTytYm4Eo8zRhPcvM3zgp7so=
Subject key identifier:   E2:8C:04:21:8C:05:C1:96:81:26:7A:19:38:52:54:3F:D2:67:93:2F
Certificate issuer:       /CN=3DA13E7C102606651E2FA391CF7802672090E9A5
Certificate serial:       65DE9015064BDBA600046412BC5903644F0C0470
Authority key identifier: 3D:A1:3E:7C:10:26:06:65:1E:2F:A3:91:CF:78:02:67:20:90:E9:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA13E7C102606651E2FA391CF7802672090E9A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3230302e352e34312e302f32342d3332203d3e2038303438.roa
Signing time:             Tue 06 Jan 2026 19:25:31 +0000
ROA not before:           Tue 06 Jan 2026 19:20:31 +0000
ROA not after:            Tue 05 Jan 2027 19:25:31 +0000
asID:                     8048
IP address blocks:        200.5.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3DA13E7C102606651E2FA391CF7802672090E9A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3DA13E7C102606651E2FA391CF7802672090E9A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA13E7C102606651E2FA391CF7802672090E9A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:de:90:15:06:4b:db:a6:00:04:64:12:bc:59:03:64:4f:0c:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DA13E7C102606651E2FA391CF7802672090E9A5
        Validity
            Not Before: Jan  6 19:20:31 2026 GMT
            Not After : Jan  5 19:25:31 2027 GMT
        Subject: CN=E28C04218C05C19681267A193852543FD267932F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:a7:05:45:cd:2b:a1:c4:93:e7:9f:9b:41:
                    89:8d:e1:14:02:3b:0d:0c:bd:13:25:f6:ce:54:18:
                    9f:24:8c:e8:43:d6:5a:99:a1:6e:47:59:6c:7c:10:
                    e0:5b:fd:a7:16:37:05:94:bd:a2:8e:1a:b3:9c:19:
                    24:b9:58:96:03:51:b0:c4:e7:7a:63:9f:31:3e:36:
                    af:59:92:6f:5f:13:a6:13:76:04:f3:b7:f0:f4:5a:
                    b5:ac:c4:1a:0e:7a:e9:27:42:80:82:17:b5:5d:c5:
                    36:86:d2:60:32:06:ac:9f:f8:7f:65:f1:2f:07:95:
                    6a:63:d1:14:8a:5b:ae:52:dc:9c:9e:51:91:14:42:
                    89:46:51:62:36:b1:4b:f2:6b:60:a3:16:e4:c8:27:
                    1b:78:fe:1b:67:c9:76:6e:76:14:bc:51:e2:ea:f5:
                    33:66:b4:2b:6d:14:41:62:87:ed:c3:eb:30:bd:2b:
                    c0:d7:08:20:5d:64:f9:13:09:cb:60:4e:79:6f:39:
                    9a:e3:01:e1:a5:b2:60:b9:9b:c3:c4:4f:fb:11:ca:
                    bf:1a:b1:67:63:5e:15:de:bf:60:b4:57:cd:02:ed:
                    47:16:80:6e:5c:89:86:5a:d5:a5:aa:a0:ea:d5:9f:
                    de:b6:34:b6:e9:06:9d:b9:fc:f8:c3:b1:9c:20:c4:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8C:04:21:8C:05:C1:96:81:26:7A:19:38:52:54:3F:D2:67:93:2F
            X509v3 Authority Key Identifier:
                keyid:3D:A1:3E:7C:10:26:06:65:1E:2F:A3:91:CF:78:02:67:20:90:E9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3DA13E7C102606651E2FA391CF7802672090E9A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA13E7C102606651E2FA391CF7802672090E9A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E1FEC9125768E4A09A5DE79139D92F28B6B4B9BC1456A565555E921F2C8CC9D/0/3230302e352e34312e302f32342d3332203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:31:e6:61:83:6f:e3:3f:ed:40:f5:03:22:94:2b:9e:2b:
         08:b7:67:8f:9e:96:f1:11:98:c5:57:28:ec:10:a5:69:94:3f:
         a7:64:73:0c:67:b8:4f:d5:da:30:c7:7d:69:48:91:f5:47:d6:
         fb:89:77:b8:ab:19:63:5d:25:87:3f:5a:a2:82:eb:1a:65:27:
         5d:d2:9c:2c:94:1d:79:5c:c1:7c:20:15:c7:3c:63:13:be:bc:
         27:c9:8e:cd:56:93:9d:3f:37:da:c7:30:17:fd:6e:fe:a6:2c:
         7e:97:e4:2a:00:36:02:54:a9:f1:5b:ed:28:44:aa:61:6d:58:
         f1:6f:72:7e:18:2f:08:c7:4c:01:94:1d:a9:f7:e1:a7:21:da:
         6c:3d:49:bc:82:6c:26:8e:09:66:6a:1f:1e:4b:4c:a9:14:76:
         4b:57:fd:8e:9d:5d:d9:df:00:80:04:7a:b6:6f:c1:b8:24:0d:
         eb:43:0e:59:e2:15:dc:69:28:a0:11:07:70:d3:9e:6b:c2:0e:
         51:cf:b7:9e:07:74:15:d2:05:cf:03:d6:6d:e9:63:95:d6:33:
         0d:be:1c:6b:d6:fb:77:c4:f6:e0:c7:dd:26:0b:9a:46:99:c6:
         4c:93:96:df:c1:24:37:72:8e:9a:91:c3:ad:a7:f9:bd:74:d5:
         27:00:30:96
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUZd6QFQZL26YABGQSvFkDZE8MBHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RBMTNFN0MxMDI2MDY2NTFFMkZBMzkxQ0Y3ODAyNjcy
MDkwRTlBNTAeFw0yNjAxMDYxOTIwMzFaFw0yNzAxMDUxOTI1MzFaMDMxMTAvBgNV
BAMTKEUyOEMwNDIxOEMwNUMxOTY4MTI2N0ExOTM4NTI1NDNGRDI2NzkzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMqcFRc0rocST55+bQYmN4RQC
Ow0MvRMl9s5UGJ8kjOhD1lqZoW5HWWx8EOBb/acWNwWUvaKOGrOcGSS5WJYDUbDE
53pjnzE+Nq9Zkm9fE6YTdgTzt/D0WrWsxBoOeuknQoCCF7VdxTaG0mAyBqyf+H9l
8S8HlWpj0RSKW65S3JyeUZEUQolGUWI2sUvya2CjFuTIJxt4/htnyXZudhS8UeLq
9TNmtCttFEFih+3D6zC9K8DXCCBdZPkTCctgTnlvOZrjAeGlsmC5m8PET/sRyr8a
sWdjXhXev2C0V80C7UcWgG5ciYZa1aWqoOrVn962NLbpBp25/PjDsZwgxGXzAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU4owEIYwFwZaBJnoZOFJUP9Jnky8wHwYDVR0j
BBgwFoAUPaE+fBAmBmUeL6ORz3gCZyCQ6aUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRTFGRUM5MTI1NzY4RTRBMDlBNURFNzkxMzlEOTJGMjhC
NkI0QjlCQzE0NTZBNTY1NTU1RTkyMUYyQzhDQzlELzAvM0RBMTNFN0MxMDI2MDY2
NTFFMkZBMzkxQ0Y3ODAyNjcyMDkwRTlBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zREExM0U3QzEwMjYwNjY1MUUy
RkEzOTFDRjc4MDI2NzIwOTBFOUE1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEUxRkVDOTEyNTc2OEU0QTA5QTVERTc5MTM5RDkyRjI4QjZCNEI5QkMx
NDU2QTU2NTU1NUU5MjFGMkM4Q0M5RC8wLzMyMzAzMDJlMzUyZTM0MzEyZTMwMmYz
MjM0MmQzMzMyMjAzZDNlMjAzODMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgFKTANBgkqhkiG
9w0BAQsFAAOCAQEAMrYx5mGDb+M/7UD1AyKUK54rCLdnj56W8RGYxVco7BClaZQ/
p2RzDGe4T9XaMMd9aUiR9UfW+4l3uKsZY10lhz9aooLrGmUnXdKcLJQdeVzBfCAV
xzxjE768J8mOzVaTnT832scwF/1u/qYsfpfkKgA2AlSp8VvtKESqYW1Y8W9yfhgv
CMdMAZQdqffhpyHabD1JvIJsJo4JZmofHktMqRR2S1f9jp1d2d8AgAR6tm/BuCQN
60MOWeIV3GkooBEHcNOea8IOUc+3ngd0FdIFzwPWbeljldYzDb4ca9b7d8T24Mfd
JguaRpnGTJOW38EkN3KOmpHDraf5vXTVJwAwlg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:50 2026 by rpki-client