This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
File:                     3230302e372e38362e302f32342d3234203d3e203238303031.roa (raw, json)
Hash identifier:          4HOXE5m97vBqn37h0RX3KE12Oq0TNd2N0kJomsIdkf4=
Subject key identifier:   9B:90:EE:B3:55:BF:1B:41:D6:3E:08:31:AC:8F:BF:10:BD:18:E2:2A
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       43817FB8E663F7C9522DBA4061B0FE52C5239E45
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa
Signing time:             Tue 06 Jan 2026 19:15:32 +0000
ROA not before:           Tue 06 Jan 2026 19:10:32 +0000
ROA not after:            Tue 05 Jan 2027 19:15:32 +0000
asID:                     28001
IP address blocks:        200.7.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:81:7f:b8:e6:63:f7:c9:52:2d:ba:40:61:b0:fe:52:c5:23:9e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:32 2026 GMT
            Not After : Jan  5 19:15:32 2027 GMT
        Subject: CN=9B90EEB355BF1B41D63E0831AC8FBF10BD18E22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:4e:bf:00:93:1f:64:96:e0:58:cf:1d:0e:
                    02:99:77:58:42:1a:04:e0:76:79:ba:57:1a:ec:9a:
                    2b:43:a4:34:63:44:67:ea:6c:38:39:ec:fb:b8:52:
                    d9:53:e9:43:ea:e3:59:92:4a:52:82:71:8a:ab:cc:
                    aa:6b:e5:e5:50:24:c2:07:52:84:a6:26:51:42:1e:
                    c6:b0:3e:88:67:0e:e6:dc:0c:40:c9:ef:08:b3:27:
                    3c:76:fd:c1:14:4f:23:93:45:dc:86:47:ea:eb:c2:
                    e0:4f:bd:7a:2a:d5:d9:f9:77:19:68:21:50:a6:e2:
                    44:17:af:ca:4a:98:0a:44:01:66:2b:7b:c3:e6:10:
                    42:07:5e:9d:84:20:5f:ed:c8:77:9c:ab:3c:80:29:
                    59:91:b2:fe:e7:bf:1c:60:03:55:35:e2:1d:6c:ab:
                    a2:cd:d8:81:7e:f1:e1:81:42:c9:45:71:15:a2:c6:
                    cd:10:10:7e:08:66:c4:a2:67:34:56:e6:fd:a3:15:
                    ed:43:6b:95:6f:12:3a:8b:6d:13:34:e9:72:3e:8f:
                    5a:fe:d7:93:52:97:d7:18:b6:4b:89:8b:cd:6d:03:
                    b6:e6:c2:17:9f:00:85:8e:5a:bd:78:10:ee:5b:06:
                    d8:64:cd:28:67:91:fb:54:2f:17:32:26:f8:c7:2b:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:EE:B3:55:BF:1B:41:D6:3E:08:31:AC:8F:BF:10:BD:18:E2:2A
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e372e38362e302f32342d3234203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:45:06:2d:ff:92:71:76:b6:9f:92:4f:c3:98:f0:a0:3b:
         07:c4:61:37:6d:09:6b:b0:f9:20:d7:68:a2:5b:bb:19:28:b7:
         48:77:8b:ae:c8:e8:11:e5:f8:fd:71:cc:f7:92:a2:83:41:22:
         75:58:f3:45:01:65:77:a8:4a:f6:ce:bc:16:47:12:85:ce:32:
         53:98:8b:2e:e8:f8:72:8f:ec:ec:ee:69:d4:44:0b:25:92:89:
         7f:1f:af:e7:6a:82:5d:95:fa:40:8d:86:89:66:0e:dc:6b:09:
         f4:d6:4c:df:e5:ed:fc:8b:cd:cd:05:ea:bb:02:0f:be:46:6e:
         ec:fb:b8:56:69:fe:33:b7:c0:2b:4e:72:fe:ef:b8:88:7e:25:
         81:2b:11:7d:e8:13:8f:cd:53:45:0f:9e:83:39:da:17:ca:aa:
         0c:ba:09:0a:c6:1a:3c:0a:df:7c:97:7a:8c:a4:fa:c4:79:d7:
         55:a2:80:01:21:48:0e:81:e4:33:79:25:28:53:56:52:8f:40:
         66:7a:98:99:70:65:21:22:4e:7f:ad:6b:37:53:6e:84:68:07:
         d9:67:25:f1:b2:95:5b:09:81:b1:4d:7b:76:68:1a:54:26:53:
         50:b0:86:ac:5c:a1:db:a9:e6:b6:c7:33:60:20:db:ca:41:5b:
         7d:33:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:14 2026 by rpki-client