This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          HQb3O1bPv6mLULpvF+FG1+e4Zi22AWA12B20mn9RYZg=
Subject key identifier:   F1:00:45:39:9D:64:C3:6F:A5:D7:A4:A1:4B:0D:A5:13:21:E3:92:00
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       4924AD641C065952C1D4A8C5705420397CEF6048
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 06 Jan 2026 20:58:15 +0000
ROA not before:           Tue 06 Jan 2026 20:53:15 +0000
ROA not after:            Tue 05 Jan 2027 20:58:15 +0000
asID:                     13381
IP address blocks:        200.112.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 11:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:24:ad:64:1c:06:59:52:c1:d4:a8:c5:70:54:20:39:7c:ef:60:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Jan  6 20:53:15 2026 GMT
            Not After : Jan  5 20:58:15 2027 GMT
        Subject: CN=F10045399D64C36FA5D7A4A14B0DA51321E39200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:c3:3f:7c:f5:58:72:95:3f:cb:8a:cf:2a:
                    66:c7:fc:b8:dc:58:6e:e6:75:89:20:72:89:1b:a4:
                    3f:d5:fb:ea:d6:d3:b0:97:9f:a5:0a:7d:10:45:39:
                    73:79:42:ef:1d:0a:d7:63:ac:ee:78:ed:ce:f4:e3:
                    42:3e:a6:9a:5f:58:b6:17:b0:1e:57:99:ba:f1:5c:
                    d7:e9:09:ba:5d:5f:f4:bd:93:9c:ec:e6:81:79:3d:
                    5e:f4:7c:a1:b2:12:4d:e3:9b:ef:92:53:bd:9c:81:
                    b3:e5:f0:cb:f3:8a:aa:77:43:18:04:76:21:21:bb:
                    3a:1c:69:eb:56:fa:da:b4:fb:90:1d:ba:7c:11:42:
                    e2:ea:7c:5c:21:f2:6f:3c:31:d7:44:0d:db:b1:da:
                    46:19:d8:84:af:80:0a:71:62:be:48:5c:9d:5a:30:
                    e8:48:33:0b:92:9b:58:8c:60:98:c0:9e:58:8d:f5:
                    bc:0b:47:52:73:ec:17:a2:16:bb:52:fa:4d:22:93:
                    7e:3a:54:a7:a5:78:81:a6:27:d3:5e:28:4b:58:fe:
                    4b:48:d7:93:f5:c7:7a:7a:3c:1f:c3:8e:bf:dd:3b:
                    be:cb:78:8b:a8:d6:10:87:6e:c1:2e:19:c1:98:44:
                    a5:e2:ff:13:ef:a2:ae:a3:af:9c:42:d0:8e:96:b9:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:00:45:39:9D:64:C3:6F:A5:D7:A4:A1:4B:0D:A5:13:21:E3:92:00
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232362e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f8:d9:22:35:87:71:62:8d:38:d4:d1:89:7b:cf:f6:39:bc:
         b8:09:d2:18:62:96:b1:5c:43:62:87:25:3f:45:2b:11:ec:97:
         00:11:31:06:44:a6:80:83:9b:5d:74:46:c7:79:53:99:dc:8f:
         c7:83:cd:67:c8:15:15:4f:aa:9c:f6:ed:55:de:8c:5a:74:b0:
         e9:4b:e1:ab:38:45:66:d0:16:6b:e9:17:76:94:28:d7:47:ce:
         db:2c:36:b1:f7:b2:18:47:5d:a9:9b:73:2e:00:a1:4d:43:a0:
         73:10:70:75:db:2e:0c:5d:12:18:01:1d:2b:b4:62:7f:ee:1c:
         be:39:03:ed:bc:99:d4:56:c1:d5:c1:5a:4f:64:32:8a:c9:1d:
         12:de:35:91:82:81:12:ef:c5:62:92:4c:2f:5a:c4:a9:9a:b9:
         a1:1f:2e:b9:d2:2a:56:b8:d3:d6:b9:79:6b:37:55:72:4f:49:
         7e:a8:a3:cd:66:03:72:04:5c:0c:63:7b:ad:72:4e:99:63:b4:
         8b:62:c9:c9:ff:db:ee:96:f8:cb:56:9e:02:ee:9b:74:6b:da:
         69:f0:43:d9:1b:6e:ee:7a:1c:ac:e6:60:c2:1f:02:c3:d1:d9:
         6f:15:a2:0f:03:a7:0b:6e:a6:bb:f9:71:c5:ef:2c:2c:45:9f:
         4a:10:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:13:36 2026 by rpki-client