This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130342e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130342e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          JwaVOpMzpksh3G2dc7n7tCTW0H6eGazGxrjW4FtHjKc=
Subject key identifier:   E7:BB:8D:B0:D6:1D:38:C7:6E:1A:76:86:13:2E:B8:0A:E9:4A:7A:81
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       6CAD5EA4B6814F9437E9F38523DA18138D2643B4
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130342e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:48 +0000
ROA not before:           Tue 06 Jan 2026 19:00:48 +0000
ROA not after:            Tue 05 Jan 2027 19:05:48 +0000
asID:                     27823
IP address blocks:        200.58.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ad:5e:a4:b6:81:4f:94:37:e9:f3:85:23:da:18:13:8d:26:43:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:48 2026 GMT
            Not After : Jan  5 19:05:48 2027 GMT
        Subject: CN=E7BB8DB0D61D38C76E1A7686132EB80AE94A7A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:ed:9b:ce:96:df:de:6a:62:95:62:d9:df:
                    b6:dd:d2:72:a8:b3:c2:b2:7d:a1:cf:71:f5:b7:53:
                    15:82:5d:19:8a:21:36:fa:4d:b7:88:da:79:16:be:
                    7c:31:1d:86:fb:e7:3c:16:d0:44:2d:82:c9:74:e1:
                    4b:62:94:fe:f0:5f:25:db:bb:d5:ad:80:64:f2:fe:
                    53:da:b5:74:35:f1:14:fb:ed:ea:6b:9c:fc:73:53:
                    90:82:db:4c:bf:14:77:23:8f:5f:ea:40:c2:93:6c:
                    5d:c7:09:a1:f2:8c:ae:cf:2a:4f:61:9f:9d:d8:c3:
                    5e:17:c6:d0:82:ca:f1:1f:36:ef:36:b1:b4:bb:f7:
                    b2:97:a4:57:36:58:67:5c:28:b1:b6:36:f1:59:c2:
                    22:2e:83:56:de:22:53:b5:f4:d6:21:ac:1b:37:e4:
                    f9:09:c5:12:59:be:f2:3a:d2:94:9f:c9:16:60:2d:
                    92:fa:53:36:9b:29:5c:3c:b7:99:6d:6c:13:53:03:
                    b0:8a:72:db:8f:ad:9b:e4:c5:83:9c:4d:ab:2f:e2:
                    06:29:61:1a:e2:92:05:3e:2c:44:2b:e8:f6:ad:60:
                    19:be:69:09:b6:04:8e:5b:9c:c0:3e:0f:b4:9f:ad:
                    ad:1d:29:da:83:ef:0e:da:af:4c:2e:bc:97:e3:6a:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:8D:B0:D6:1D:38:C7:6E:1A:76:86:13:2E:B8:0A:E9:4A:7A:81
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130342e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:c7:97:8b:3a:42:61:33:08:82:49:30:00:07:7c:8c:bd:
         38:75:9e:9d:01:63:27:dd:13:fd:ed:6c:94:50:e3:6c:47:d4:
         53:2a:54:f2:8e:65:ed:37:4d:ec:ab:95:25:03:80:78:96:f8:
         df:f6:f6:e4:9b:4f:9f:ce:1a:bf:5e:25:14:bf:47:2b:41:47:
         5b:00:37:2d:d5:4a:40:97:94:39:76:63:7f:f6:06:6f:40:8d:
         78:52:fe:6e:6d:b1:e9:45:ef:ec:b0:e9:ff:f4:ac:e4:9f:64:
         9f:43:a9:39:cd:3f:fc:0e:d5:30:0e:8d:fd:37:c0:f1:54:7a:
         2b:69:da:02:26:a2:55:07:72:d3:44:33:bb:4a:39:78:8f:83:
         bc:5d:78:4f:6b:11:8c:c5:dc:c7:4b:f0:d7:e0:90:e7:26:4c:
         bd:d8:5b:04:97:3e:c5:c9:3c:4c:32:3a:96:5d:1b:39:0d:f0:
         b3:1c:14:da:51:be:91:34:70:05:bd:3f:e7:7e:3d:4c:b2:11:
         0c:bc:2a:a6:12:fa:d3:0b:40:fd:9e:06:10:f3:1c:c4:80:4d:
         08:66:f9:0a:b0:d8:f9:b4:07:8d:dc:50:6b:f2:eb:e7:ab:39:
         07:76:ba:ca:29:42:76:95:09:5d:23:bc:98:c3:f0:31:61:fc:
         79:7b:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:43 2026 by rpki-client