This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa
File:                     3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa (raw, json)
Hash identifier:          vHldP4t2A+lgG3tV3YpIosqv6r04bSvIUXodFFLgn+s=
Subject key identifier:   8C:4E:06:41:FA:86:69:36:26:33:9F:3D:26:93:7C:AD:04:25:F6:B9
Certificate issuer:       /CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
Certificate serial:       7F4F317F4283E1100FEC7D7690D335F46F0AD73A
Authority key identifier: 4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa
Signing time:             Tue 06 Jan 2026 19:43:09 +0000
ROA not before:           Tue 06 Jan 2026 19:38:09 +0000
ROA not after:            Tue 05 Jan 2027 19:43:09 +0000
asID:                     262201
IP address blocks:        200.124.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4f:31:7f:42:83:e1:10:0f:ec:7d:76:90:d3:35:f4:6f:0a:d7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8316B6CF34B7C2F1C2C530327209662EFB61C7
        Validity
            Not Before: Jan  6 19:38:09 2026 GMT
            Not After : Jan  5 19:43:09 2027 GMT
        Subject: CN=8C4E0641FA86693626339F3D26937CAD0425F6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:c1:79:8e:58:3f:0f:61:4b:b4:2d:20:ca:
                    02:fa:c3:0c:53:a9:a1:8b:cb:e5:9d:e9:3f:4c:ce:
                    7c:ec:25:f8:13:52:5b:e4:69:dc:64:65:c2:c9:61:
                    36:40:af:88:ff:60:33:ae:f6:95:b3:3c:5c:8c:04:
                    a2:ac:f5:09:8a:ea:2c:eb:92:5d:38:14:19:0f:43:
                    51:92:5c:2d:19:f9:d9:9f:1f:ed:1b:6f:f6:3a:0f:
                    09:5b:83:d6:7e:ee:84:c9:da:e5:de:c1:81:89:5c:
                    7e:3b:26:43:f8:c0:86:1f:4e:50:a6:e7:34:05:78:
                    45:a2:cb:ec:70:4c:ca:a9:d0:c0:cd:7f:25:f7:ea:
                    b6:58:a5:0e:35:5d:93:d5:11:cf:64:6d:2f:68:76:
                    48:34:2e:0d:e6:35:28:f5:14:06:e8:d0:9f:39:ec:
                    56:d0:ec:c6:29:c2:e9:82:31:f4:8c:23:e5:94:fc:
                    30:a7:e8:7d:93:5f:14:b3:3c:85:5e:ac:3d:d2:8f:
                    80:20:ed:28:bf:b0:99:5c:9a:60:e1:1d:94:16:65:
                    9c:82:5c:3a:28:d5:9a:0a:d0:fe:b3:3e:a7:28:87:
                    75:91:99:d8:ed:b3:24:fe:f4:97:eb:70:e8:82:b8:
                    ba:8f:c2:e6:f5:01:28:cb:89:14:37:52:bd:6b:de:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4E:06:41:FA:86:69:36:26:33:9F:3D:26:93:7C:AD:04:25:F6:B9
            X509v3 Authority Key Identifier:
                keyid:4C:83:16:B6:CF:34:B7:C2:F1:C2:C5:30:32:72:09:66:2E:FB:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C8316B6CF34B7C2F1C2C530327209662EFB61C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F5D26BEC6E7F7A647F76BC0689594595D89196B4CD8251EECE9AADF0A39DBB/0/3230302e3132342e3132362e302f32342d3234203d3e20323632323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:71:36:fe:a3:09:7e:61:25:a5:ce:42:52:81:e8:eb:70:01:
         92:36:72:c8:86:69:22:c3:58:47:20:02:06:8a:91:19:12:79:
         22:32:0c:3d:d3:8b:84:6d:c8:a0:73:7c:27:5d:63:f1:18:4b:
         ba:45:17:47:a3:d5:0d:b5:84:b9:c5:c2:d2:f5:2c:c0:35:19:
         ee:cf:45:34:b9:52:07:ab:f3:1c:c5:16:c8:bb:b0:2a:a6:a2:
         2e:6f:24:e7:aa:2a:de:c3:ea:f3:df:ba:11:12:7c:87:d6:b2:
         a1:f7:42:6e:4f:c6:31:f1:68:d3:65:dc:10:3d:c0:80:6c:0b:
         c1:07:de:0a:87:4d:6e:25:b4:06:63:f7:b1:fe:80:9a:99:1b:
         c7:91:a4:21:c6:3b:48:8e:b6:df:4a:f3:15:62:bd:0f:f0:f3:
         1d:49:e5:aa:f4:17:f3:c2:fa:1a:9d:2f:a9:03:66:c4:bc:19:
         0d:62:0d:f1:5d:75:0a:77:6e:16:99:07:c4:fe:d7:34:24:63:
         19:a9:1e:4c:fd:a0:d9:b9:ba:65:26:eb:55:0c:fb:1f:2b:bd:
         89:55:86:74:bc:7b:2a:93:6e:b4:7d:b5:02:ae:56:b2:f5:7f:
         0f:5d:5c:bb:1a:f2:a6:13:e6:11:75:86:ae:d3:fc:1a:71:df:
         65:04:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:23:01 2026 by rpki-client