This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130312e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          EtAO+SPMFtidocq0l4J6yWebVRCZB6R5Lj2c0nUZENc=
Subject key identifier:   31:61:F1:60:C0:94:16:DE:70:D9:3D:E7:AB:7F:8E:D6:27:8B:28:91
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       571310F0401EAB7D2DB0BF1D24E799B1803257BF
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:50 +0000
ROA not before:           Tue 06 Jan 2026 19:00:50 +0000
ROA not after:            Tue 05 Jan 2027 19:05:50 +0000
asID:                     27823
IP address blocks:        200.58.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:10:f0:40:1e:ab:7d:2d:b0:bf:1d:24:e7:99:b1:80:32:57:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:50 2026 GMT
            Not After : Jan  5 19:05:50 2027 GMT
        Subject: CN=3161F160C09416DE70D93DE7AB7F8ED6278B2891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:aa:cf:b7:8f:61:e6:25:d3:96:06:14:2c:
                    2c:01:44:6a:dd:07:2e:89:f4:a9:e3:5c:8d:06:b1:
                    1c:dd:45:0f:99:3f:88:18:46:8f:ac:da:3a:4d:0d:
                    21:4d:89:c7:06:9f:68:28:59:04:5e:d9:bb:6a:d9:
                    15:4e:30:09:b6:75:f3:41:b8:8b:e8:11:22:c3:94:
                    b6:4a:ac:3f:ce:9d:b2:2e:a1:7e:a1:97:35:7c:55:
                    67:80:45:9f:1e:f3:7b:e8:72:79:05:cd:29:50:07:
                    24:f2:cf:cc:5c:d0:24:a0:50:5a:a4:79:eb:e3:53:
                    e0:7a:56:6c:49:28:47:2d:4b:f8:ed:4d:82:1f:36:
                    59:ea:2c:cf:15:47:7d:68:ee:92:9b:ba:ab:79:e7:
                    3b:48:bd:25:1c:58:2b:00:40:ff:48:e6:5f:51:63:
                    64:3d:5b:e1:e2:8d:87:ec:32:13:57:34:72:0a:c0:
                    04:be:59:09:ac:79:4f:1c:17:12:34:fb:e3:d6:59:
                    70:ef:ce:9c:92:57:34:50:ce:65:56:9a:1e:26:66:
                    73:b1:c6:45:13:24:63:a4:7a:e1:3e:68:cf:b7:37:
                    50:be:4a:32:e4:cf:fc:bd:4c:79:b6:7c:9e:2b:1c:
                    d9:cb:ea:df:09:9b:74:de:92:ea:02:b0:f8:e9:f5:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:F1:60:C0:94:16:DE:70:D9:3D:E7:AB:7F:8E:D6:27:8B:28:91
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:0c:02:5c:c6:e3:cf:ac:24:5a:ce:27:e0:c8:6d:2c:af:
         c8:10:9f:a6:52:2d:4c:bb:67:f5:dc:08:76:ba:d7:ba:6e:33:
         8d:1c:4a:5e:3e:37:1f:73:5b:08:9e:5f:23:e6:ab:45:a9:1a:
         e1:cc:87:26:66:7b:bb:42:72:80:1c:36:30:de:07:b7:26:5e:
         32:a9:80:70:e2:a4:d4:56:81:52:15:ec:9f:ea:4f:a0:34:03:
         82:d5:09:14:cf:3d:85:89:a5:82:38:14:29:2d:22:26:fe:77:
         3b:33:77:74:2a:09:6f:53:26:e4:e7:f7:20:1a:6c:5c:02:e4:
         a7:45:a9:df:cb:3b:24:70:a6:0c:1e:ad:62:16:e0:4b:75:f7:
         f9:e7:28:46:d6:45:24:50:db:e3:aa:18:4c:e6:0b:5e:2d:f0:
         3a:b0:8e:a6:89:77:90:ee:83:da:8c:83:03:26:36:9d:0f:12:
         cd:2e:36:6d:32:61:d7:84:5d:21:c8:b8:b5:b0:0d:6f:3a:bf:
         41:03:cd:4b:e0:c7:47:04:b0:6a:e9:9e:93:b1:b6:c0:48:bb:
         71:0f:69:b0:01:f4:f6:80:4c:ee:97:e4:69:25:34:62:43:de:
         7e:c2:ba:29:2f:e3:30:5f:e1:11:5e:a6:2c:22:66:22:2b:e7:
         d5:d1:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:18:38 2026 by rpki-client