This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa
File:                     3230302e33332e38322e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier:          lIwiXzFu/FHyqUCdjHbzkIfppe1ZlJwHYOnqA3N5DPE=
Subject key identifier:   22:D9:BA:92:8F:B2:E7:FF:D5:E4:E5:C5:1A:C0:B5:4E:F7:86:E4:84
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       02C5673844CDEAC7E04FF5C7ED78598E7F3A05FA
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa
Signing time:             Wed 07 Jan 2026 20:59:18 +0000
ROA not before:           Wed 07 Jan 2026 20:54:18 +0000
ROA not after:            Wed 06 Jan 2027 20:59:18 +0000
asID:                     52376
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:67:38:44:cd:ea:c7:e0:4f:f5:c7:ed:78:59:8e:7f:3a:05:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  7 20:54:18 2026 GMT
            Not After : Jan  6 20:59:18 2027 GMT
        Subject: CN=22D9BA928FB2E7FFD5E4E5C51AC0B54EF786E484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:d4:d9:ea:6f:e2:3b:8b:41:87:20:07:39:
                    6b:b6:dd:c3:1f:81:e4:a7:08:ac:cb:97:dc:53:26:
                    16:41:14:28:5f:57:9d:44:a4:83:1e:e6:b5:f2:86:
                    8a:7b:2c:31:18:dc:63:a3:17:77:a8:d1:e8:0a:9b:
                    fb:5d:54:a0:a7:ce:cf:a2:d4:b6:07:63:47:d0:a4:
                    1a:fb:9c:7d:84:dc:61:15:de:c8:4b:1b:50:b9:f3:
                    62:27:84:f7:4b:67:29:a7:9c:fe:07:03:ae:44:0e:
                    a7:4b:15:9b:e9:2c:3b:d5:4a:a7:a7:b2:32:cd:14:
                    b1:57:61:ea:6e:4a:29:1f:4a:ab:8a:cd:a1:54:49:
                    80:b0:91:3f:8c:1d:6d:47:dc:52:15:7a:4c:62:47:
                    70:72:9b:d8:e5:7b:87:8d:4f:c8:16:d8:da:bf:e3:
                    12:81:80:21:58:93:d6:84:f5:20:95:b1:40:9b:ce:
                    c3:13:9d:ea:b7:10:56:55:fc:ee:fc:04:ed:b0:11:
                    c1:0a:0a:cc:1d:e7:3d:4f:48:db:68:6b:ac:bf:52:
                    dc:e5:43:21:33:87:25:e1:7b:25:5b:76:84:10:ad:
                    6f:63:7d:eb:a2:ba:b2:67:53:96:a8:13:b0:e2:65:
                    1f:21:9a:b5:c4:91:ef:b1:57:3d:c2:f2:6b:a0:0f:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:BA:92:8F:B2:E7:FF:D5:E4:E5:C5:1A:C0:B5:4E:F7:86:E4:84
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:79:b0:8d:7d:4b:db:86:de:76:0e:e9:52:65:06:d2:64:9e:
         bf:37:91:39:dd:96:de:f9:a8:a8:51:4a:f7:29:8e:2b:7d:03:
         18:12:fe:fc:a4:dc:10:ee:db:9a:23:94:e7:60:da:09:5f:6c:
         59:77:ef:fc:ab:33:ac:ad:07:1b:84:4a:86:87:45:05:12:e6:
         a1:f9:c8:d8:86:1f:21:7b:fd:cc:89:78:ff:5c:9b:65:a1:86:
         8e:c1:e0:c7:0b:05:63:af:16:d7:ad:cf:1a:f7:51:c0:2e:d7:
         16:88:72:ce:2f:75:28:18:f9:3d:4f:f6:a6:90:0e:9b:e5:52:
         32:46:e4:1f:b1:48:0b:a2:20:1f:10:f7:a4:b4:e4:b3:f6:de:
         85:8d:b4:82:44:30:b8:4d:81:eb:84:b7:bd:57:ba:6e:93:f7:
         1a:e5:bf:01:9c:aa:24:7e:dd:bf:37:e2:1a:66:6b:7f:64:0a:
         53:ec:46:08:24:8b:15:85:ad:1d:0b:6b:0a:ec:ed:9d:55:dd:
         98:1d:6d:c9:90:4a:fd:1f:58:48:7d:2a:9e:56:3a:2d:94:8e:
         02:38:1f:b4:44:1d:30:95:cb:b1:2a:5c:69:e0:1a:e8:39:1c:
         9b:c9:a3:34:42:dd:9f:cc:91:23:f1:f4:a3:88:5c:74:e3:56:
         b3:bb:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:32:15 2026 by rpki-client