This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa
File:                     3230302e35332e33322e302f31392d3234203d3e203139333332.roa (raw, json)
Hash identifier:          m+ydgslum7mqtAOF3Y0seV22pUoiK8kxRv6x2rB4Sso=
Subject key identifier:   D5:4A:81:E1:C9:C1:C6:2F:FF:F0:9B:E6:F6:80:F8:1F:DB:A4:AC:CA
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       0BADE68AC68F089A849A7A9DC515843FEAE53646
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa
Signing time:             Tue 06 Jan 2026 19:08:12 +0000
ROA not before:           Tue 06 Jan 2026 19:03:12 +0000
ROA not after:            Tue 05 Jan 2027 19:08:12 +0000
asID:                     19332
IP address blocks:        200.53.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ad:e6:8a:c6:8f:08:9a:84:9a:7a:9d:c5:15:84:3f:ea:e5:36:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Jan  6 19:03:12 2026 GMT
            Not After : Jan  5 19:08:12 2027 GMT
        Subject: CN=D54A81E1C9C1C62FFFF09BE6F680F81FDBA4ACCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:07:24:fd:3e:94:fb:21:76:bb:dd:82:6e:1c:
                    32:44:7d:dc:bb:56:1a:b0:9f:0e:b0:11:6b:41:b2:
                    dc:a1:38:db:54:99:6f:80:36:7f:56:ce:ab:e0:c2:
                    55:ae:3c:a6:2b:60:82:80:e2:a5:4c:22:6c:c9:34:
                    90:9c:2f:04:80:3c:af:58:5f:a2:61:54:8c:a0:b5:
                    49:bc:0e:ad:56:77:02:a2:79:0f:3d:bb:a5:72:45:
                    cc:d6:86:30:e4:29:cd:16:16:2f:56:72:65:eb:98:
                    f5:08:b9:56:ac:1d:34:22:2b:df:4f:71:4d:bc:39:
                    d7:b1:b5:73:f3:5a:be:55:2c:a2:ce:aa:15:ac:86:
                    8f:8b:13:ff:cd:24:0b:86:87:05:e4:eb:dc:78:41:
                    d2:99:3d:53:97:fd:d4:9b:c5:c8:6f:70:b2:ee:ee:
                    dc:ae:aa:7f:b9:09:0d:c0:94:23:89:06:0b:66:71:
                    d2:fe:16:01:ce:b2:36:0f:0c:e5:ff:98:b9:4a:d5:
                    76:a3:1a:06:84:6e:b7:23:d1:76:27:9c:f5:b2:99:
                    f5:5e:53:4e:9f:07:47:e5:34:b1:fc:35:7d:c2:fa:
                    1b:82:f3:ac:0f:7d:da:91:9d:d0:bf:40:43:96:bb:
                    a9:7b:6a:0d:c7:2c:9a:f7:3e:ef:5b:e6:7b:2e:be:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:81:E1:C9:C1:C6:2F:FF:F0:9B:E6:F6:80:F8:1F:DB:A4:AC:CA
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35332e33322e302f31392d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:70:f8:12:91:df:f5:36:23:4e:e5:b7:cb:e5:2d:90:32:
         40:75:84:49:38:b3:85:c2:5c:21:8e:b5:38:d1:00:af:a1:f9:
         d3:ee:bd:45:de:55:83:3c:96:91:49:24:36:32:ed:50:63:e4:
         99:32:f0:72:f6:b0:91:9d:89:3b:99:09:10:74:27:a3:cd:bd:
         1f:77:82:55:db:01:b8:86:c0:a2:bf:0b:a9:da:75:05:53:8b:
         c9:ae:62:3a:70:d7:cb:81:6f:ff:99:d5:24:f0:ab:54:14:45:
         1b:25:22:68:4f:41:73:7a:4b:10:6e:53:03:02:bf:cd:bf:03:
         b9:72:00:16:2c:74:56:b1:4e:da:2c:3b:d5:d7:17:73:d1:1f:
         ec:00:54:e8:05:cd:bb:be:98:f6:2a:73:21:fa:1c:65:a4:34:
         ba:5f:c9:e2:bf:91:ed:ab:70:23:68:90:1e:2b:1d:bc:b9:ed:
         5b:17:84:ad:77:de:29:43:0d:a0:d1:28:fc:d4:26:8f:00:c1:
         ec:82:bd:5b:9e:52:38:7f:8e:df:17:a6:db:82:aa:6e:80:c1:
         33:ba:b7:01:f7:62:78:eb:50:07:97:4c:43:8f:24:3f:7d:e3:
         34:3e:fd:aa:53:b5:e5:fa:f3:ad:30:a3:19:c1:b5:98:32:d4:
         a4:07:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:15 2026 by rpki-client