This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa
File:                     3230302e31342e3131362e302f32342d3234203d3e203532333134.roa (raw, json)
Hash identifier:          C6/YNk7oHEai0KKZNj1iGpqlO7tuEmzIaNJf2ahzzcM=
Subject key identifier:   E1:78:A4:CC:E7:F8:F7:8F:53:8C:1B:8B:D9:D3:F6:AA:A9:E9:F8:AB
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       1BC3432674162639D63A70FF364A8513B64766F8
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa
Signing time:             Tue 06 Jan 2026 20:57:19 +0000
ROA not before:           Tue 06 Jan 2026 20:52:19 +0000
ROA not after:            Tue 05 Jan 2027 20:57:19 +0000
asID:                     52314
IP address blocks:        200.14.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:43:26:74:16:26:39:d6:3a:70:ff:36:4a:85:13:b6:47:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Jan  6 20:52:19 2026 GMT
            Not After : Jan  5 20:57:19 2027 GMT
        Subject: CN=E178A4CCE7F8F78F538C1B8BD9D3F6AAA9E9F8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:c4:4f:06:95:18:c2:01:a7:ed:28:25:cc:
                    a6:b7:64:26:a3:4e:1f:d5:a1:26:48:d7:8a:f3:f4:
                    45:2c:4c:c6:33:9d:d9:34:b5:41:e2:f2:b3:9e:b6:
                    89:fc:c3:b7:ff:24:f1:cf:98:2a:d9:63:02:51:28:
                    5c:a2:ea:40:8c:9c:64:d8:df:0a:67:58:0c:6d:8b:
                    74:34:2b:e7:72:fa:e2:25:7a:df:ce:ea:9f:e1:4a:
                    fc:38:31:25:fa:d3:1b:0c:fa:6b:08:08:8a:1b:9a:
                    fd:62:3f:f4:3e:0c:cf:5a:9c:6c:7b:fa:a0:19:74:
                    19:cb:0f:a9:d0:20:4d:c9:f9:f6:af:73:e2:e3:07:
                    c0:cc:40:1c:2e:2b:61:41:38:ab:df:9e:fe:2a:04:
                    cf:36:9e:e5:0c:a7:fb:c6:84:b0:af:e8:8b:1e:26:
                    5e:5d:9a:1d:64:a2:79:72:23:e9:db:c9:6b:35:b1:
                    9e:31:f4:11:4f:a7:93:25:d2:46:26:88:55:9e:b2:
                    79:d7:0f:73:7f:3b:5f:71:be:45:ff:a8:fb:8f:51:
                    e2:0a:76:9f:d8:64:76:bf:12:ae:94:28:cd:76:03:
                    a9:9f:3c:0e:44:fb:58:c1:51:d9:c5:60:95:2e:ee:
                    4a:16:77:71:9b:22:5c:12:1b:1c:59:e5:42:1b:a1:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:A4:CC:E7:F8:F7:8F:53:8C:1B:8B:D9:D3:F6:AA:A9:E9:F8:AB
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3230302e31342e3131362e302f32342d3234203d3e203532333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:1e:db:bc:69:1d:72:41:82:85:be:b4:e9:f0:70:95:c8:
         3b:0f:01:49:0a:f5:68:27:0c:72:89:97:75:40:38:bb:38:3e:
         bb:57:13:6d:03:24:8a:e6:5d:00:ed:d1:97:22:b4:4e:84:d2:
         02:e0:dd:2d:53:10:13:25:26:24:b2:25:0a:73:11:ba:40:9a:
         44:d2:cf:ee:cc:bd:a9:3b:9b:4c:eb:42:2b:27:04:3e:95:18:
         9f:4e:6d:52:63:50:6a:84:7f:a1:be:32:b4:6f:53:6c:2b:9b:
         28:a7:e3:e8:dc:d2:34:50:15:a2:46:2c:50:b6:12:f1:4b:67:
         67:2f:35:4e:eb:10:dc:d4:8c:d5:af:41:86:0d:01:b4:b9:c5:
         43:41:81:93:0a:32:b2:f6:83:fa:dc:c4:80:d8:4b:75:c8:bb:
         32:03:6b:39:6c:ca:38:93:93:1e:f8:ee:8f:57:4c:2c:d5:18:
         6e:2a:df:fa:2d:a2:d8:25:51:d2:eb:8b:99:19:7b:b4:a9:82:
         6b:c6:ba:05:21:d2:c6:ba:98:d1:f0:d7:82:ae:1f:39:b9:d0:
         41:e6:2c:30:17:e9:61:3d:33:39:0e:75:b5:9c:81:fd:a8:06:
         3c:d5:a1:9e:a9:ea:1a:ab:71:1b:83:12:10:94:d1:d3:dc:a2:
         31:bc:71:69
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG8NDJnQWJjnWOnD/NkqFE7ZHZvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBNEI2NDVCQ0UxQTZGQTc0NkM4OUEzRjZFMjI4ODlG
OEYyMDg4QzAeFw0yNjAxMDYyMDUyMTlaFw0yNzAxMDUyMDU3MTlaMDMxMTAvBgNV
BAMTKEUxNzhBNENDRTdGOEY3OEY1MzhDMUI4QkQ5RDNGNkFBQTlFOUY4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6sRPBpUYwgGn7SglzKa3ZCaj
Th/VoSZI14rz9EUsTMYzndk0tUHi8rOeton8w7f/JPHPmCrZYwJRKFyi6kCMnGTY
3wpnWAxti3Q0K+dy+uIlet/O6p/hSvw4MSX60xsM+msICIobmv1iP/Q+DM9anGx7
+qAZdBnLD6nQIE3J+favc+LjB8DMQBwuK2FBOKvfnv4qBM82nuUMp/vGhLCv6Ise
Jl5dmh1konlyI+nbyWs1sZ4x9BFPp5Ml0kYmiFWesnnXD3N/O19xvkX/qPuPUeIK
dp/YZHa/Eq6UKM12A6mfPA5E+1jBUdnFYJUu7koWd3GbIlwSGxxZ5UIbocSzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4XikzOf4949TjBuL2dP2qqnp+KswHwYDVR0j
BBgwFoAUmaS2Rbzhpvp0bImj9uIoifjyCIwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTRFMjA1OTg2NzREQzlEQTgwRTE3NkQ4MzVBRDI3MTY4
QzZDQjgwMjg5RTY0RTIxQzE2MTVCMzVFNTdBMUMwLzAvOTlBNEI2NDVCQ0UxQTZG
QTc0NkM4OUEzRjZFMjI4ODlGOEYyMDg4Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUE0QjY0NUJDRTFBNkZBNzQ2
Qzg5QTNGNkUyMjg4OUY4RjIwODhDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkE0RTIwNTk4Njc0REM5REE4MEUxNzZEODM1QUQyNzE2OEM2Q0I4MDI4
OUU2NEUyMUMxNjE1QjM1RTU3QTFDMC8wLzMyMzAzMDJlMzEzNDJlMzEzMTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgOdDAN
BgkqhkiG9w0BAQsFAAOCAQEAkfse27xpHXJBgoW+tOnwcJXIOw8BSQr1aCcMcomX
dUA4uzg+u1cTbQMkiuZdAO3RlyK0ToTSAuDdLVMQEyUmJLIlCnMRukCaRNLP7sy9
qTubTOtCKycEPpUYn05tUmNQaoR/ob4ytG9TbCubKKfj6NzSNFAVokYsULYS8Utn
Zy81TusQ3NSM1a9Bhg0BtLnFQ0GBkwoysvaD+tzEgNhLdci7MgNrOWzKOJOTHvju
j1dMLNUYbirf+i2i2CVR0uuLmRl7tKmCa8a6BSHSxrqY0fDXgq4fObnQQeYsMBfp
YT0zOQ51tZyB/agGPNWhnqnqGqtxG4MSEJTR09yiMbxxaQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:51:13 2026 by rpki-client