This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa
File:                     3230302e312e3137352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          Dor9QxpSqK+spTbInBMKtCs6pw6qqJyn2G8Z5btDQPQ=
Subject key identifier:   C5:4C:69:1C:CB:FE:FD:62:C0:D5:D2:DF:A4:96:26:95:B9:42:F9:7F
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       5C34C9A8BBCB988158057E47E9CC4CD4254E4D97
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 06 Jan 2026 19:04:53 +0000
ROA not before:           Tue 06 Jan 2026 18:59:53 +0000
ROA not after:            Tue 05 Jan 2027 19:04:53 +0000
asID:                     3356
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 07:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:34:c9:a8:bb:cb:98:81:58:05:7e:47:e9:cc:4c:d4:25:4e:4d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Jan  6 18:59:53 2026 GMT
            Not After : Jan  5 19:04:53 2027 GMT
        Subject: CN=C54C691CCBFEFD62C0D5D2DFA4962695B942F97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:d3:69:63:a7:1f:8c:34:75:bd:95:02:09:
                    4f:05:a3:e8:6a:e0:df:de:66:55:75:7d:13:61:92:
                    ad:26:28:b3:77:38:82:62:52:a2:24:ad:21:08:96:
                    d0:5d:cb:86:e0:af:69:5b:13:bb:41:90:4a:a4:32:
                    8f:6a:2c:06:ae:f3:2d:24:86:42:3e:2b:10:3b:44:
                    b5:07:a8:8c:20:26:87:0b:7b:24:23:46:a7:b6:d0:
                    66:5d:86:46:ae:0f:09:76:51:92:51:d4:96:1a:ff:
                    42:e5:e6:ce:95:c6:5b:bd:67:e1:30:3f:e7:cf:c5:
                    e7:e0:69:6d:83:85:54:17:7f:fa:8f:82:78:0c:ab:
                    5c:e1:d3:ae:ed:6c:69:07:81:80:0c:1d:71:ec:50:
                    21:f8:15:31:50:ee:b5:8f:57:27:f4:b6:75:5f:ac:
                    1b:1e:6b:14:f2:65:ac:78:05:39:fd:cf:c6:eb:f0:
                    88:09:3d:26:22:d4:98:43:88:97:67:9e:78:4d:7a:
                    79:ae:f7:1e:0d:cb:13:fc:8c:55:4f:fc:03:cc:24:
                    94:b9:29:cd:0d:c0:3c:51:6d:b0:ff:fb:ba:4f:7e:
                    7d:a0:17:20:43:f6:87:f3:f1:2c:bb:66:c0:6f:74:
                    eb:20:5b:67:59:46:07:72:ce:8a:cf:0b:e9:11:47:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4C:69:1C:CB:FE:FD:62:C0:D5:D2:DF:A4:96:26:95:B9:42:F9:7F
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:e5:6b:6b:a8:84:19:3a:01:b8:fa:60:b4:aa:10:04:db:
         5c:49:88:e5:29:98:c3:81:38:c9:17:b1:19:60:6c:f4:56:ed:
         75:0f:62:01:17:97:2c:eb:60:5a:a8:c4:b0:a6:4a:3c:e1:34:
         ff:22:d3:23:7e:11:91:d2:9d:39:20:b0:2d:f0:db:bc:2f:e4:
         cb:14:06:e6:1e:2c:2c:74:3b:a4:35:36:a3:db:16:5c:e4:13:
         6a:52:ca:c5:80:ad:ae:ba:e5:41:d9:6c:a2:d5:bd:83:29:06:
         77:04:1d:a4:10:43:5a:0e:90:e7:4a:1f:bc:ca:01:80:84:ea:
         ca:e8:4a:ac:ea:60:1c:94:51:47:95:90:69:c8:88:fc:f3:a2:
         88:9a:2e:ca:4c:83:f4:c7:ca:b1:ad:de:cc:45:03:6f:03:ff:
         3c:5e:e2:c3:9f:e2:e9:7e:01:75:0e:01:59:f4:5c:05:de:0d:
         ac:40:73:2b:63:8a:e1:aa:79:9c:2e:af:3d:14:2d:d0:ce:db:
         a9:93:48:61:50:17:29:77:f7:d6:5b:f0:67:78:3d:4c:85:cc:
         0a:b3:93:34:75:ab:40:51:ba:e3:8f:13:22:5c:40:cc:45:0d:
         1c:b5:99:43:37:bc:28:fe:af:65:ec:33:da:a3:68:da:18:1e:
         39:92:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:56:24 2026 by rpki-client