This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
File:                     3230302e34392e3132302e302f32312d3233203d3e203237393630.roa (raw, json)
Hash identifier:          boVCxlENXha7zIsXOyHQOxXODOg5vWloo3aUQmvUIp8=
Subject key identifier:   22:08:3A:F4:ED:E7:A8:71:01:2C:58:36:D9:CB:88:AD:F4:7D:ED:EB
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       6E664562E52AD91C0B7F60224FA2C150786B854D
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa
Signing time:             Tue 06 Jan 2026 19:25:48 +0000
ROA not before:           Tue 06 Jan 2026 19:20:48 +0000
ROA not after:            Tue 05 Jan 2027 19:25:48 +0000
asID:                     27960
IP address blocks:        200.49.120.0/21 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:66:45:62:e5:2a:d9:1c:0b:7f:60:22:4f:a2:c1:50:78:6b:85:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Jan  6 19:20:48 2026 GMT
            Not After : Jan  5 19:25:48 2027 GMT
        Subject: CN=22083AF4EDE7A871012C5836D9CB88ADF47DEDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:07:9b:a9:7e:ab:71:69:80:aa:03:14:c8:
                    39:5d:4c:61:3a:17:13:68:49:98:49:22:14:6e:d8:
                    61:0f:99:d8:95:c8:24:a6:27:49:e6:ec:6e:9a:e2:
                    ad:59:42:0c:76:20:62:12:bf:be:22:54:9e:cc:53:
                    b6:20:a8:79:eb:bc:0b:e5:5d:4f:56:57:f2:c7:fb:
                    dd:8f:be:1a:08:c7:5f:dd:86:e8:c5:fa:23:ae:34:
                    2a:09:ed:c7:db:7d:b6:47:19:ee:1e:6e:d2:4e:d9:
                    a7:12:b7:9c:6c:89:72:2e:d3:44:35:16:2c:f4:c3:
                    25:20:f0:d0:58:cd:85:85:25:5e:af:6a:d8:da:8d:
                    24:00:5e:2f:53:39:4f:b0:30:de:1e:17:d1:ad:5c:
                    9e:18:f7:de:ba:3b:69:4b:58:fa:65:cd:75:58:a2:
                    8d:2f:82:c6:c0:06:43:82:23:0c:08:60:98:dd:7e:
                    78:25:6e:71:0c:5e:35:e5:85:60:5f:0f:8e:f4:6f:
                    2a:f7:b4:90:f4:a6:b0:10:16:c1:a8:07:db:fa:a1:
                    ba:17:fe:14:3f:05:ab:2d:9c:25:70:5f:ef:20:7e:
                    94:01:20:70:57:66:c3:5e:2b:b0:53:07:67:3b:16:
                    20:da:f7:5c:c1:38:b7:b7:80:68:2f:0c:58:0f:b4:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:3A:F4:ED:E7:A8:71:01:2C:58:36:D9:CB:88:AD:F4:7D:ED:EB
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3230302e34392e3132302e302f32312d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:f4:4e:f4:94:3d:64:ce:b4:9f:59:b7:42:fe:ec:be:10:
         b2:43:1d:c8:c9:ee:cd:1c:2f:77:c9:bd:3d:56:d2:0e:1a:8c:
         42:ea:0e:57:d1:22:d9:75:78:f1:2b:8e:8b:96:d8:35:d3:a7:
         ef:3d:ee:34:79:ed:cf:7f:ed:7e:97:55:4e:14:3f:74:7c:95:
         d7:68:38:ba:b8:06:b3:7e:82:83:61:04:63:9c:c1:62:76:30:
         94:02:5d:c8:a0:19:3c:78:d6:67:a3:30:a9:a2:c5:68:36:a9:
         51:5c:34:d0:64:cc:ca:03:1b:30:04:3b:2e:43:ba:d9:31:8a:
         00:c5:0f:84:ba:c4:a4:b4:4e:c6:1b:40:75:b8:eb:ed:be:af:
         ee:6c:93:32:78:32:b7:9b:c9:06:cf:05:92:df:d7:31:a2:15:
         85:9c:1d:f7:25:78:83:63:de:7f:88:b5:2b:ac:25:79:ac:13:
         1c:c9:d2:c3:4b:eb:19:6d:b9:fe:49:94:49:c8:c4:60:fa:1b:
         a8:5e:2e:33:03:8d:e4:42:83:79:b4:fb:d3:ce:b2:51:54:ba:
         d2:76:2c:29:74:7d:6d:bc:6d:ac:20:15:f0:ab:43:ad:33:f2:
         c6:9b:9f:cc:11:9d:56:af:36:22:b4:9c:2d:f2:dc:d9:ec:30:
         cf:87:ba:9c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbmZFYuUq2RwLf2AiT6LBUHhrhU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNGMkYwRTQ4RTBB
NDYzMzY2NjAeFw0yNjAxMDYxOTIwNDhaFw0yNzAxMDUxOTI1NDhaMDMxMTAvBgNV
BAMTKDIyMDgzQUY0RURFN0E4NzEwMTJDNTgzNkQ5Q0I4OEFERjQ3REVERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATgebqX6rcWmAqgMUyDldTGE6
FxNoSZhJIhRu2GEPmdiVyCSmJ0nm7G6a4q1ZQgx2IGISv74iVJ7MU7YgqHnrvAvl
XU9WV/LH+92PvhoIx1/dhujF+iOuNCoJ7cfbfbZHGe4ebtJO2acSt5xsiXIu00Q1
Fiz0wyUg8NBYzYWFJV6vatjajSQAXi9TOU+wMN4eF9GtXJ4Y9966O2lLWPplzXVY
oo0vgsbABkOCIwwIYJjdfnglbnEMXjXlhWBfD470byr3tJD0prAQFsGoB9v6oboX
/hQ/BastnCVwX+8gfpQBIHBXZsNeK7BTB2c7FiDa91zBOLe3gGgvDFgPtBH5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIgg69O3nqHEBLFg22cuIrfR97eswHwYDVR0j
BBgwFoAU25+nf35eXijMWVvPLw5I4KRjNmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4
REE3QzA5QzQxMUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUy
OENDNTk1QkNGMkYwRTQ4RTBBNDYzMzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjlGQTc3RjdFNUU1RTI4Q0M1
OTVCQ0YyRjBFNDhFMEE0NjMzNjY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2RDUwMjZDMUYwOERBN0MwOUM0
MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzMyMzAzMDJlMzQzOTJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzMzIwM2QzZTIwMzIzNzM5MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gxeDAN
BgkqhkiG9w0BAQsFAAOCAQEAXT/0TvSUPWTOtJ9Zt0L+7L4QskMdyMnuzRwvd8m9
PVbSDhqMQuoOV9Ei2XV48SuOi5bYNdOn7z3uNHntz3/tfpdVThQ/dHyV12g4urgG
s36Cg2EEY5zBYnYwlAJdyKAZPHjWZ6MwqaLFaDapUVw00GTMygMbMAQ7LkO62TGK
AMUPhLrEpLROxhtAdbjr7b6v7myTMngyt5vJBs8Fkt/XMaIVhZwd9yV4g2Pef4i1
K6wleawTHMnSw0vrGW25/kmUScjEYPobqF4uMwON5EKDebT7086yUVS60nYsKXR9
bbxtrCAV8KtDrTPyxpufzBGdVq82IrScLfLc2ewwz4e6nA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:29:53 2026 by rpki-client