This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235302e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          SjNty+biW7wyLFBMg1kJcsZEhDBwGJyEVm4JvNsNtbU=
Subject key identifier:   82:0A:D2:F0:FD:5F:7C:0D:20:04:71:13:84:BC:3A:4D:15:89:AE:0D
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       1721C1573B2B10E4E0515ED6467028B34420CB2C
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 06 Jan 2026 19:27:18 +0000
ROA not before:           Tue 06 Jan 2026 19:22:18 +0000
ROA not after:            Tue 05 Jan 2027 19:27:18 +0000
asID:                     28050
IP address blocks:        200.74.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:21:c1:57:3b:2b:10:e4:e0:51:5e:d6:46:70:28:b3:44:20:cb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Jan  6 19:22:18 2026 GMT
            Not After : Jan  5 19:27:18 2027 GMT
        Subject: CN=820AD2F0FD5F7C0D2004711384BC3A4D1589AE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:cc:83:be:f0:a4:95:5e:d5:64:4f:38:3c:
                    1a:22:6a:27:91:e3:29:b9:73:0d:6e:34:ea:af:5e:
                    d6:e7:f5:98:6b:9c:82:6c:89:9c:14:20:66:63:f9:
                    fd:8c:5a:e8:5d:e8:54:fe:51:7d:51:61:d2:0d:38:
                    1d:16:4e:52:dd:9e:08:e7:5c:38:cc:22:35:55:cd:
                    48:ef:e6:94:4c:10:bf:aa:56:02:be:62:be:11:93:
                    2c:45:57:c8:ac:99:d5:f6:f9:a5:0d:a0:2b:4b:eb:
                    54:a3:93:49:de:71:e4:38:9b:09:11:52:69:2b:b7:
                    96:8c:70:50:f7:86:63:b9:af:e2:c8:c0:ce:35:a0:
                    3f:33:4c:4a:d2:55:5d:d9:71:47:dc:75:81:3b:87:
                    d3:ad:30:e9:b9:ac:41:0e:76:db:ee:81:90:2e:4b:
                    bb:d0:a7:ed:d1:1d:8e:21:17:92:44:7f:a9:2d:40:
                    07:b7:cf:4e:2e:01:d4:1d:58:d3:7d:6b:c5:7a:54:
                    e6:b6:b8:85:1b:5e:ee:df:55:0a:da:04:14:87:79:
                    14:6e:e1:10:b3:88:cd:02:e0:43:fe:39:6a:de:85:
                    6e:ae:49:b6:e2:7f:76:d3:0b:6c:85:8e:bd:c0:96:
                    8a:93:69:9d:3e:74:07:f3:55:27:35:40:bd:a1:87:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:D2:F0:FD:5F:7C:0D:20:04:71:13:84:BC:3A:4D:15:89:AE:0D
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235302e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:84:3f:8f:36:ec:57:c6:ce:d4:55:9b:f3:a3:f7:ef:15:
         58:04:72:2f:60:57:57:c6:e8:10:59:bf:5c:6f:21:21:c9:45:
         c5:d0:69:16:e2:c0:5b:2d:97:1e:5f:d3:26:e8:ad:42:20:e9:
         48:2e:9a:a0:b7:2f:88:48:29:f2:a3:e3:ad:1a:6b:34:65:41:
         0c:ef:62:66:7e:e6:c9:94:0e:e9:8d:16:7f:5c:16:36:0e:6c:
         90:a9:f9:89:af:3d:de:ac:2d:84:26:64:cc:8d:61:18:34:f0:
         39:53:64:0e:97:4f:7e:39:00:7a:98:45:90:ea:c0:f4:fe:a0:
         cf:c7:88:69:5e:09:87:c0:cb:01:3b:b0:ce:d1:1c:95:47:a3:
         33:3b:3e:9a:02:08:8d:fe:47:2f:37:a9:da:cd:25:f1:28:83:
         c5:68:3a:f3:17:ac:88:ce:1b:90:4c:52:d8:a0:f5:00:6c:13:
         81:34:43:58:ea:82:69:8a:ba:fe:1b:4f:27:6c:11:4f:11:c4:
         eb:5b:10:24:9d:25:9c:0b:a7:91:be:2d:f4:41:94:7b:b2:13:
         59:1a:9e:ef:4a:51:ba:62:0b:5b:b5:45:58:55:43:ac:11:d5:
         e8:96:84:a1:84:b7:7e:63:55:47:6f:50:99:9e:b8:77:8f:01:
         98:74:85:a6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFyHBVzsrEOTgUV7WRnAos0QgyywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1QzhCM0I5RjVBRDFFMTIyNTkwQjNBOEM4NDlCNjdD
RTA5QjUwQjAeFw0yNjAxMDYxOTIyMThaFw0yNzAxMDUxOTI3MThaMDMxMTAvBgNV
BAMTKDgyMEFEMkYwRkQ1RjdDMEQyMDA0NzExMzg0QkMzQTREMTU4OUFFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj08yDvvCklV7VZE84PBoiaieR
4ym5cw1uNOqvXtbn9ZhrnIJsiZwUIGZj+f2MWuhd6FT+UX1RYdINOB0WTlLdngjn
XDjMIjVVzUjv5pRMEL+qVgK+Yr4RkyxFV8ismdX2+aUNoCtL61Sjk0neceQ4mwkR
Umkrt5aMcFD3hmO5r+LIwM41oD8zTErSVV3ZcUfcdYE7h9OtMOm5rEEOdtvugZAu
S7vQp+3RHY4hF5JEf6ktQAe3z04uAdQdWNN9a8V6VOa2uIUbXu7fVQraBBSHeRRu
4RCziM0C4EP+OWrehW6uSbbif3bTC2yFjr3AloqTaZ0+dAfzVSc1QL2hh74zAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUggrS8P1ffA0gBHEThLw6TRWJrg0wHwYDVR0j
BBgwFoAUvVyLO59a0eEiWQs6jISbZ84JtQswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjM5QTg5Qjg5RjlCMzM0MTczMzg3QjIxMzk2Q0RBQ0JG
NDM4NDcxNzFEQjMyMTkxQkFFOTQxODU0OUI1OUY0LzAvQkQ1QzhCM0I5RjVBRDFF
MTIyNTkwQjNBOEM4NDlCNjdDRTA5QjUwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDVDOEIzQjlGNUFEMUUxMjI1
OTBCM0E4Qzg0OUI2N0NFMDlCNTBCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYzOUE4OUI4OUY5QjMzNDE3MzM4N0IyMTM5NkNEQUNCRjQzODQ3MTcx
REIzMjE5MUJBRTk0MTg1NDlCNTlGNC8wLzMyMzAzMDJlMzczNDJlMzIzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhK+jAN
BgkqhkiG9w0BAQsFAAOCAQEAjnyEP4827FfGztRVm/Oj9+8VWARyL2BXV8boEFm/
XG8hIclFxdBpFuLAWy2XHl/TJuitQiDpSC6aoLcviEgp8qPjrRprNGVBDO9iZn7m
yZQO6Y0Wf1wWNg5skKn5ia893qwthCZkzI1hGDTwOVNkDpdPfjkAephFkOrA9P6g
z8eIaV4Jh8DLATuwztEclUejMzs+mgIIjf5HLzep2s0l8SiDxWg68xesiM4bkExS
2KD1AGwTgTRDWOqCaYq6/htPJ2wRTxHE61sQJJ0lnAunkb4t9EGUe7ITWRqe70pR
umILW7VFWFVDrBHV6JaEoYS3fmNVR29QmZ64d48BmHSFpg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:51:04 2026 by rpki-client