This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3230332e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          vqLkuXmqWzqCgZJqI2qHgk4ePVKWIp+S/V930w0xMVA=
Subject key identifier:   41:6D:DC:96:18:20:40:31:30:40:09:2F:C3:19:85:23:E2:5B:B6:1F
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       0BE64A3EB61C703DF77526958BD0C5087CDBBE39
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 06 Jan 2026 19:09:28 +0000
ROA not before:           Tue 06 Jan 2026 19:04:28 +0000
ROA not after:            Tue 05 Jan 2027 19:09:28 +0000
asID:                     10269
IP address blocks:        200.32.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:4a:3e:b6:1c:70:3d:f7:75:26:95:8b:d0:c5:08:7c:db:be:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Jan  6 19:04:28 2026 GMT
            Not After : Jan  5 19:09:28 2027 GMT
        Subject: CN=416DDC96182040313040092FC3198523E25BB61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:b4:a1:bd:22:04:7d:4e:df:e2:af:65:f7:
                    bf:68:4b:6b:70:58:e5:22:08:bd:9c:5e:55:69:d4:
                    c3:60:21:e6:19:36:29:d6:c7:c5:b9:e4:6c:6b:73:
                    82:4e:14:c1:94:ec:2d:05:38:c9:2e:7d:d6:27:3d:
                    8c:1a:0d:0b:fc:aa:85:9a:52:55:3c:ea:db:e9:9e:
                    f6:ec:a8:27:ef:dc:f5:0d:78:ce:8e:3f:c2:98:0f:
                    25:47:54:d9:81:66:79:8c:ba:31:15:38:07:7f:b1:
                    cc:7a:9e:57:01:66:ee:48:c4:67:97:0e:b2:26:7a:
                    e8:fa:a7:0f:62:8b:ef:7a:33:f0:8a:38:37:78:2c:
                    f9:8f:3c:cc:e8:12:de:0c:2e:3d:fb:fb:44:de:6d:
                    a8:70:ec:28:64:ee:fc:34:e0:a3:b0:c6:c8:4a:f9:
                    60:05:db:1d:79:51:16:53:7e:c6:bc:38:8f:e1:39:
                    55:70:bb:9a:4b:6d:c0:1e:3c:11:63:54:ed:7e:ec:
                    15:f3:97:83:d2:19:33:7b:3e:38:44:96:3e:4c:cf:
                    ac:f1:20:73:d8:46:91:bf:a3:65:85:68:a7:7f:9b:
                    33:fe:3c:ae:ee:4c:d8:bc:65:0b:28:3e:df:19:86:
                    83:22:da:db:90:0a:50:1b:a6:0d:a0:0f:e8:48:b4:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6D:DC:96:18:20:40:31:30:40:09:2F:C3:19:85:23:E2:5B:B6:1F
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3230332e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:c5:ec:7f:1c:36:fe:cc:81:ce:5e:50:e8:44:3f:88:a7:
         19:1c:28:01:d3:d5:21:11:b7:d2:65:48:b5:b7:f7:ac:91:06:
         cc:7d:4c:3e:2f:f0:5b:a1:2e:bb:31:d4:2d:cd:e6:1a:5a:62:
         72:36:db:d4:c8:d5:d7:fc:69:70:c0:23:c4:dd:3b:19:0e:6b:
         6c:1b:05:92:1b:fa:4d:3a:0f:a5:9f:58:7f:3d:a7:76:33:e1:
         c7:93:05:6f:5d:d4:48:e0:98:a6:53:3d:1d:07:65:11:f4:e7:
         c1:66:26:a2:96:e6:78:72:7e:33:7c:f8:0b:1a:c2:f3:4c:2a:
         86:33:76:c1:0e:01:75:14:56:11:cc:ca:ac:25:bc:66:18:63:
         e6:01:3a:0c:2a:9a:4c:eb:a2:af:09:78:e6:64:6e:d6:85:82:
         dd:76:06:cb:e8:2c:b3:b1:e0:53:8c:8c:37:fd:1e:93:4a:3c:
         84:85:18:31:de:2b:d5:ea:6e:6b:c3:a2:d2:2b:bf:24:d3:f8:
         66:d8:07:62:ec:75:d5:b0:00:05:bd:57:4c:7e:63:14:b2:2d:
         46:f9:eb:21:e9:d1:5e:c9:c3:3e:e2:6d:50:7d:c3:3e:22:19:
         c5:69:b3:f5:e4:59:75:7d:3a:68:2d:be:27:ba:ff:dc:a4:67:
         0c:b4:25:d3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC+ZKPrYccD33dSaVi9DFCHzbvjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNjAxMDYxOTA0MjhaFw0yNzAxMDUxOTA5MjhaMDMxMTAvBgNV
BAMTKDQxNkREQzk2MTgyMDQwMzEzMDQwMDkyRkMzMTk4NTIzRTI1QkI2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9irShvSIEfU7f4q9l979oS2tw
WOUiCL2cXlVp1MNgIeYZNinWx8W55Gxrc4JOFMGU7C0FOMkufdYnPYwaDQv8qoWa
UlU86tvpnvbsqCfv3PUNeM6OP8KYDyVHVNmBZnmMujEVOAd/scx6nlcBZu5IxGeX
DrImeuj6pw9ii+96M/CKODd4LPmPPMzoEt4MLj37+0Tebahw7Chk7vw04KOwxshK
+WAF2x15URZTfsa8OI/hOVVwu5pLbcAePBFjVO1+7BXzl4PSGTN7PjhElj5Mz6zx
IHPYRpG/o2WFaKd/mzP+PK7uTNi8ZQsoPt8ZhoMi2tuQClAbpg2gD+hItA1pAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQW3clhggQDEwQAkvwxmFI+Jbth8wHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzMDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMggyzAN
BgkqhkiG9w0BAQsFAAOCAQEAD6DF7H8cNv7Mgc5eUOhEP4inGRwoAdPVIRG30mVI
tbf3rJEGzH1MPi/wW6EuuzHULc3mGlpicjbb1MjV1/xpcMAjxN07GQ5rbBsFkhv6
TToPpZ9Yfz2ndjPhx5MFb13USOCYplM9HQdlEfTnwWYmopbmeHJ+M3z4CxrC80wq
hjN2wQ4BdRRWEczKrCW8Zhhj5gE6DCqaTOuirwl45mRu1oWC3XYGy+gss7HgU4yM
N/0ek0o8hIUYMd4r1epua8Oi0iu/JNP4ZtgHYux11bAABb1XTH5jFLItRvnrIenR
XsnDPuJtUH3DPiIZxWmz9eRZdX06aC2+J7r/3KRnDLQl0w==
-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:50 2026 by rpki-client