This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/3230302e3132332e35342e302f32342d3234203d3e20323732393032.roa
File:                     3230302e3132332e35342e302f32342d3234203d3e20323732393032.roa (raw, json)
Hash identifier:          WnrPHTZeyRxFhAb/BK7V/ZFgVBsEB2k05yTbU+jgG/s=
Subject key identifier:   0D:E6:6A:97:32:36:EA:8E:D7:D2:6E:9F:38:0F:81:73:ED:72:56:31
Certificate issuer:       /CN=54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9
Certificate serial:       01B44B66689F6536677DB2672D0E1C8D462D3A74
Authority key identifier: 54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/3230302e3132332e35342e302f32342d3234203d3e20323732393032.roa
Signing time:             Tue 06 Jan 2026 20:52:29 +0000
ROA not before:           Tue 06 Jan 2026 20:47:29 +0000
ROA not after:            Tue 05 Jan 2027 20:52:29 +0000
asID:                     272902
IP address blocks:        200.123.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b4:4b:66:68:9f:65:36:67:7d:b2:67:2d:0e:1c:8d:46:2d:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9
        Validity
            Not Before: Jan  6 20:47:29 2026 GMT
            Not After : Jan  5 20:52:29 2027 GMT
        Subject: CN=0DE66A973236EA8ED7D26E9F380F8173ED725631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:48:0c:3f:80:d6:46:bd:c2:ed:ac:c0:66:
                    0b:47:c1:ea:38:99:40:44:b6:71:be:3b:df:e8:81:
                    33:bd:31:4a:29:5f:ba:c7:17:d8:fa:de:29:e0:d2:
                    1d:27:64:22:30:20:04:cb:10:92:fe:19:d7:f8:25:
                    2d:27:e0:b0:1f:50:25:48:c9:e7:f2:fc:2e:eb:5c:
                    ae:ec:ee:67:8c:87:e6:23:db:3a:e0:c3:00:86:5b:
                    ae:c5:9a:be:a2:fd:ff:f9:42:57:12:03:50:f0:3d:
                    ad:ae:db:b6:1d:42:ee:19:f0:69:bb:63:11:d0:f2:
                    bd:50:d7:5c:80:4f:cd:50:02:c9:8d:91:01:16:f5:
                    9f:c8:24:82:7f:b6:ec:07:1c:3d:41:fe:69:80:18:
                    de:cb:da:93:c0:ef:ad:96:49:46:ca:4b:d8:67:47:
                    59:e4:cb:b7:1c:fd:99:39:ee:9e:2b:5c:5a:0e:c6:
                    47:f6:f3:61:eb:c9:85:18:e1:1c:49:c0:7f:f8:42:
                    13:61:84:76:f0:b8:93:77:7b:8c:82:98:b2:e5:36:
                    65:78:ac:09:39:e5:67:53:8b:2b:f7:c3:96:49:9f:
                    9b:50:3e:0e:48:72:cf:4a:5e:cd:b2:06:43:49:9b:
                    2e:52:51:e6:d3:8b:f4:0e:37:1b:5f:bc:89:1a:19:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:6A:97:32:36:EA:8E:D7:D2:6E:9F:38:0F:81:73:ED:72:56:31
            X509v3 Authority Key Identifier:
                keyid:54:AE:4F:90:93:F4:3A:67:A2:FE:13:41:FD:24:90:AA:6C:8A:6C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54AE4F9093F43A67A2FE1341FD2490AA6C8A6CF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ABD464BCCC74022684F43D3B94574C085E50A4166D4212577E20B525104EA39/0/3230302e3132332e35342e302f32342d3234203d3e20323732393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:89:fe:c7:3a:1b:59:84:24:5d:9c:ee:78:f7:cd:62:72:34:
         ae:c9:a0:a5:b3:50:76:88:4e:27:e7:34:50:b5:cb:96:8d:d9:
         95:0a:8a:d0:25:08:90:58:fd:9f:cd:ff:66:4c:b0:c3:26:da:
         a8:70:71:2a:7a:15:63:8d:44:56:37:2c:6a:f4:47:10:43:29:
         ef:49:03:6a:8c:74:15:1f:ec:a3:be:b5:27:1f:62:93:78:fb:
         a4:cf:44:cc:a0:0f:5c:48:ce:b0:8c:7a:13:f9:6a:a8:46:4c:
         5d:2d:49:5b:0a:bc:02:a6:75:f2:b4:24:94:41:5b:a7:ea:e4:
         4d:c6:63:66:49:c0:a2:c5:6d:c1:35:c2:21:0f:64:f9:2f:cb:
         3c:16:6d:74:19:2c:91:b1:d5:85:1e:be:18:35:05:9e:b6:3d:
         10:23:ba:16:e6:a3:f2:a5:3f:43:b0:72:9f:71:17:8f:46:2d:
         b5:7e:ef:59:69:49:15:ac:59:ae:67:06:03:e2:11:bd:64:a0:
         a0:28:08:c1:a5:df:61:70:32:68:fd:1d:9d:82:a2:b8:d1:15:
         cf:84:5e:34:09:f0:c1:58:4a:7b:cc:ca:12:f6:88:2b:8c:50:
         3e:6c:5d:59:79:0f:3d:9d:3b:d9:20:28:4c:e2:28:8c:99:74:
         d8:23:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:34 2026 by rpki-client