This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa
File:                     3230302e31302e36342e302f31392d3234203d3e2036313437.roa (raw, json)
Hash identifier:          2T2PgwSvNYjHMjWqzn2UkdnFWhloFdwTwZbYau9IcrM=
Subject key identifier:   D7:29:8D:3A:0D:39:C4:30:9D:BF:E6:48:C6:9F:5E:5C:BE:A0:93:0C
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       47C4BC3CB9E0460C1BB79B4407452032F9C9C100
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:55:59 +0000
ROA not before:           Tue 06 Jan 2026 20:50:59 +0000
ROA not after:            Tue 05 Jan 2027 20:55:59 +0000
asID:                     6147
IP address blocks:        200.10.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c4:bc:3c:b9:e0:46:0c:1b:b7:9b:44:07:45:20:32:f9:c9:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:50:59 2026 GMT
            Not After : Jan  5 20:55:59 2027 GMT
        Subject: CN=D7298D3A0D39C4309DBFE648C69F5E5CBEA0930C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:fe:cd:67:1c:e7:91:08:ad:10:63:90:b0:
                    5b:12:0f:19:eb:17:57:19:11:37:94:47:a7:d3:c4:
                    83:79:c7:4c:f1:10:5e:30:50:5d:72:6f:7c:eb:1a:
                    fe:80:8f:c9:25:72:21:87:6d:c2:ca:1b:77:07:58:
                    a3:2b:f9:d9:4a:f9:fe:f6:d7:93:ab:2d:55:0a:da:
                    49:5c:ce:e1:aa:de:6a:9c:88:14:89:45:c3:29:29:
                    de:18:48:ca:31:0a:49:b5:39:55:77:de:1f:31:25:
                    cb:56:be:70:7d:84:80:ed:ca:75:f9:d3:af:0d:77:
                    18:1a:15:de:08:9f:1c:dd:2a:ed:25:63:66:cd:aa:
                    e4:f7:0d:3d:99:af:6f:1e:bc:09:ef:8c:02:98:51:
                    3d:3a:7f:72:79:50:1f:28:7d:82:a2:4e:5f:6e:f8:
                    6e:6c:29:7d:21:df:1d:00:99:85:98:45:27:f8:8e:
                    4f:72:08:76:5f:95:55:66:b0:b2:3c:68:2a:40:6c:
                    10:fd:2f:da:92:a6:0f:da:e0:33:a4:32:93:54:25:
                    9b:f5:1c:bf:a6:ae:34:13:d5:44:cb:b8:38:fc:36:
                    64:45:82:d3:fe:7e:fe:fc:03:19:9d:46:d2:dd:58:
                    36:01:12:a5:6c:22:1c:e0:75:bd:ef:a8:f2:76:d8:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:29:8D:3A:0D:39:C4:30:9D:BF:E6:48:C6:9F:5E:5C:BE:A0:93:0C
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e31302e36342e302f31392d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:87:04:41:d1:ac:bd:bd:a5:5b:c9:ae:6d:e0:49:3a:eb:f5:
         25:93:17:10:13:c3:84:56:03:82:80:ea:bb:3c:94:95:ee:59:
         c6:c6:11:b8:25:e3:38:d3:85:ad:61:f6:40:77:cc:58:2a:27:
         7e:c9:93:b5:0f:29:88:e5:75:b7:83:97:13:32:4b:58:3c:8a:
         4c:55:00:88:8a:31:05:e5:d2:75:6c:cb:19:d1:95:d7:06:b8:
         d5:01:27:84:e4:31:e8:5a:e1:1c:c0:d6:2d:65:f6:62:b3:ac:
         bc:0e:ee:04:22:3b:2f:ee:f7:41:19:04:20:05:10:f5:35:14:
         93:40:e9:29:ac:24:39:c2:ea:65:3b:89:e6:a9:43:9d:1b:0a:
         31:18:98:71:4a:45:b9:70:32:8a:a5:10:9b:89:d9:fa:26:9f:
         d5:ac:91:9d:20:8e:05:6c:61:6b:41:d1:ef:30:c2:52:35:aa:
         a2:d9:ba:ca:ee:c8:7f:be:a6:e3:42:5b:16:33:c6:2e:87:fb:
         45:f7:81:41:0b:62:30:72:91:c8:e7:f1:8d:4b:2d:e3:3e:5b:
         96:3b:f6:94:f8:30:a8:a4:84:81:11:e0:e6:2c:e8:0e:b2:45:
         30:70:50:7f:ce:f7:b0:66:ca:57:75:81:bd:23:e7:75:dd:5e:
         c2:01:cb:20
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUR8S8PLngRgwbt5tEB0UgMvnJwQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNjAxMDYyMDUwNTlaFw0yNzAxMDUyMDU1NTlaMDMxMTAvBgNV
BAMTKEQ3Mjk4RDNBMEQzOUM0MzA5REJGRTY0OEM2OUY1RTVDQkVBMDkzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/f7NZxznkQitEGOQsFsSDxnr
F1cZETeUR6fTxIN5x0zxEF4wUF1yb3zrGv6Aj8klciGHbcLKG3cHWKMr+dlK+f72
15OrLVUK2klczuGq3mqciBSJRcMpKd4YSMoxCkm1OVV33h8xJctWvnB9hIDtynX5
068NdxgaFd4InxzdKu0lY2bNquT3DT2Zr28evAnvjAKYUT06f3J5UB8ofYKiTl9u
+G5sKX0h3x0AmYWYRSf4jk9yCHZflVVmsLI8aCpAbBD9L9qSpg/a4DOkMpNUJZv1
HL+mrjQT1UTLuDj8NmRFgtP+fv78AxmdRtLdWDYBEqVsIhzgdb3vqPJ22Ne/AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU1ymNOg05xDCdv+ZIxp9eXL6gkwwwHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMDJlMzEzMDJlMzYzNDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM2MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyApAMA0GCSqG
SIb3DQEBCwUAA4IBAQBWhwRB0ay9vaVbya5t4Ek66/UlkxcQE8OEVgOCgOq7PJSV
7lnGxhG4JeM404WtYfZAd8xYKid+yZO1DymI5XW3g5cTMktYPIpMVQCIijEF5dJ1
bMsZ0ZXXBrjVASeE5DHoWuEcwNYtZfZis6y8Du4EIjsv7vdBGQQgBRD1NRSTQOkp
rCQ5wuplO4nmqUOdGwoxGJhxSkW5cDKKpRCbidn6Jp/VrJGdII4FbGFrQdHvMMJS
Naqi2brK7sh/vqbjQlsWM8Yuh/tF94FBC2IwcpHI5/GNSy3jPluWO/aU+DCopISB
EeDmLOgOskUwcFB/zvewZspXdYG9I+d13V7CAcsg
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:11:15 2026 by rpki-client