This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa
File:                     3230302e31302e36322e302f32332d3234203d3e203238303030.roa (raw, json)
Hash identifier:          0GvApB5kc53Fmw+GP8eOy4o5Iynla44JZzHgCK+zrqU=
Subject key identifier:   30:57:2E:43:7E:C5:AF:49:7A:DF:F9:46:36:23:C9:8F:E1:69:06:FF
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       5C5022E5ACE32399FEFE2B30DAC3C893394D1D14
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:29 +0000
ROA not before:           Tue 06 Jan 2026 19:10:29 +0000
ROA not after:            Tue 05 Jan 2027 19:15:29 +0000
asID:                     28000
IP address blocks:        200.10.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:50:22:e5:ac:e3:23:99:fe:fe:2b:30:da:c3:c8:93:39:4d:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:29 2026 GMT
            Not After : Jan  5 19:15:29 2027 GMT
        Subject: CN=30572E437EC5AF497ADFF9463623C98FE16906FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:7d:86:1f:cf:4e:d1:4a:96:80:3a:9e:86:
                    57:c0:fa:17:bf:c4:49:ab:b0:f7:4e:c4:7e:62:7b:
                    a6:a7:dd:04:b7:15:56:e0:84:2d:54:2f:3d:c4:3a:
                    6f:3f:5f:59:2a:f7:62:c0:52:d5:be:14:f9:86:e4:
                    a6:b1:5d:55:c1:f3:66:a5:e3:20:0a:d8:6c:36:20:
                    0c:df:a4:47:22:d5:9d:1e:5b:d3:6c:40:1a:1d:91:
                    09:60:7a:ef:45:43:69:4c:09:04:61:bf:4a:e4:b7:
                    de:d0:ba:66:35:89:87:ad:6a:23:3f:19:99:7f:1f:
                    b7:e9:b9:bc:9f:b6:d2:3b:ad:57:4e:67:58:f9:f6:
                    88:9a:13:d6:c6:34:5b:9c:4e:27:d5:c9:5d:d5:9b:
                    67:74:b0:03:2a:c2:3e:7b:40:d0:7b:02:9e:dd:5c:
                    8d:4f:ff:5d:72:bb:78:92:64:18:a7:06:bb:6f:64:
                    89:21:71:1f:52:e8:0f:f8:1b:23:2a:31:d7:00:ee:
                    cd:9c:e9:06:60:7e:ad:18:b4:f5:d4:b0:fb:ea:37:
                    83:ee:61:6d:88:39:a4:60:98:94:a9:23:30:ed:00:
                    8d:8a:83:04:19:d0:f2:2f:f3:34:6e:ac:64:f3:51:
                    13:ee:7a:84:6e:4d:b2:c3:44:2d:c1:43:6d:34:e0:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:57:2E:43:7E:C5:AF:49:7A:DF:F9:46:36:23:C9:8F:E1:69:06:FF
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36322e302f32332d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:93:e1:2a:b6:a4:0f:dd:d1:47:cc:b9:00:25:ae:b2:fa:
         5f:a3:c6:b2:c9:f0:d6:f2:c4:c8:95:97:79:08:5d:30:3a:cf:
         d3:f5:9a:e5:f2:5c:7c:2c:41:74:79:7f:aa:b9:44:d9:d3:8b:
         eb:1f:e4:1d:26:81:fe:f6:9e:ce:25:df:6f:81:db:37:d0:00:
         55:41:5c:d3:fb:a9:29:ae:6d:f9:5e:61:a9:5e:d1:88:29:0e:
         40:5f:01:88:80:20:fe:da:0e:e1:26:8f:75:30:01:02:e6:56:
         9b:31:81:5a:7d:f7:c3:82:e2:01:c4:d1:a2:cc:09:0a:c8:a6:
         2d:6d:84:f0:ec:2e:0f:60:13:f4:af:9a:16:fb:e7:09:86:a0:
         e7:6d:98:2a:43:0e:f8:d7:25:49:aa:4a:b6:c4:3e:41:8f:85:
         17:c3:48:01:f3:98:18:89:d0:de:d8:dc:3a:14:1e:cb:ac:1b:
         9f:53:6d:39:03:92:16:c6:6c:88:4c:1c:e3:59:e0:67:b3:d7:
         72:ba:c5:f0:ee:dc:e6:d6:8c:73:c0:1b:e2:74:3b:77:b2:a4:
         bc:6c:5f:df:81:bd:ff:5c:51:76:8f:55:a4:ec:a0:dd:8e:30:
         a6:b3:ce:a1:b1:ad:47:14:d6:b1:8e:30:63:84:b5:63:bf:a2:
         b6:f8:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:27:41 2026 by rpki-client