This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa
File:                     3230302e34322e3232342e302f32302d3234203d3e203238313138.roa (raw, json)
Hash identifier:          wwXQhe7fDKJS3KTzMSwLMuz2O3hRsIA76VWR2z9w7T8=
Subject key identifier:   B4:55:D2:60:9D:58:35:8C:17:F9:02:E8:E8:20:D0:78:E7:2F:DC:86
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       4BCB65C8DD92624BD50B852DB77F55C36AF700D7
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:50 +0000
ROA not before:           Tue 06 Jan 2026 19:34:50 +0000
ROA not after:            Tue 05 Jan 2027 19:39:50 +0000
asID:                     28118
IP address blocks:        200.42.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cb:65:c8:dd:92:62:4b:d5:0b:85:2d:b7:7f:55:c3:6a:f7:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:50 2026 GMT
            Not After : Jan  5 19:39:50 2027 GMT
        Subject: CN=B455D2609D58358C17F902E8E820D078E72FDC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:4e:3b:10:37:36:ce:f2:c2:2e:2b:d2:d6:
                    83:5d:34:01:a0:86:33:9e:53:9f:e3:16:4d:0c:74:
                    7c:9e:93:ec:ba:a7:92:bd:86:5a:2f:ca:f4:52:3b:
                    79:df:43:c5:73:f9:22:97:71:ac:a7:34:5f:eb:71:
                    0b:cc:4f:63:77:26:b2:cb:0c:04:f0:27:97:a0:8e:
                    32:b2:db:c1:93:aa:dc:4f:04:8d:34:02:8d:38:ba:
                    da:8c:26:ac:23:3d:d2:9d:dc:d7:8b:f2:7b:e7:04:
                    d1:66:07:ff:16:37:d7:72:16:a0:1c:2e:24:99:7e:
                    f8:ed:2d:39:df:89:7b:4e:84:7f:d9:81:8d:c8:06:
                    21:2a:95:36:6b:2b:9d:5d:d1:9c:88:fe:e8:7d:a9:
                    6a:8c:b0:2c:5a:9d:fd:ea:98:74:ac:6a:95:aa:0b:
                    6a:f8:58:34:11:9f:89:fa:ae:53:d9:77:2e:02:7b:
                    db:24:bf:cc:8b:b7:c4:f6:e5:8e:1c:8c:b1:e2:c9:
                    d6:c6:de:15:28:f7:0c:b8:d8:77:a1:97:2c:39:5e:
                    4f:36:eb:0a:9a:2d:4b:c9:c3:55:17:3a:e9:94:17:
                    16:26:2a:6d:a1:93:48:f0:a3:bd:0c:f5:d8:12:5c:
                    0d:f7:0b:73:0a:a8:25:55:d2:3c:fc:e0:fa:27:7b:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:D2:60:9D:58:35:8C:17:F9:02:E8:E8:20:D0:78:E7:2F:DC:86
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3232342e302f32302d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:a5:e6:79:28:70:75:b4:10:de:f1:cc:fe:d2:24:cc:78:
         af:8e:74:00:f9:e8:1c:c3:19:a6:06:f1:92:54:b5:aa:04:51:
         55:b4:01:f2:2b:01:54:7e:e4:68:7a:b4:72:ca:dd:c9:c1:99:
         68:64:f8:24:4e:7e:6c:12:da:97:f9:e4:33:c6:2f:ce:d6:80:
         c0:56:24:01:49:d0:fa:c8:60:9d:46:fa:17:78:81:92:13:7a:
         5b:2f:09:0d:90:54:bd:32:1c:2e:11:97:5a:21:7c:46:70:84:
         ac:f6:35:b5:08:6f:17:d8:9c:0d:f9:6c:33:d9:29:c7:75:4f:
         2f:42:92:37:74:07:60:fa:85:44:67:a2:93:6b:1f:59:33:c2:
         e9:ae:be:e0:bc:fc:85:69:1c:7b:66:7c:38:c9:a5:62:a4:c5:
         08:25:75:bc:4f:f3:c1:0d:47:c2:c4:37:4e:c8:68:14:78:c1:
         f5:0b:60:0a:89:e6:db:ab:ea:cd:be:bd:ef:8c:24:d7:a4:a8:
         01:c2:4d:ec:7a:5c:31:fe:3c:0a:08:fd:46:df:18:7c:9d:f7:
         9e:52:97:d3:00:98:b0:83:52:20:58:1e:a0:20:4a:ea:9a:0e:
         9a:a2:99:56:4e:b1:78:be:c1:e4:89:6a:85:19:39:e2:b2:f1:
         82:f6:e6:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUS8tlyN2SYkvVC4Utt39Vw2r3ANcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNjAxMDYxOTM0NTBaFw0yNzAxMDUxOTM5NTBaMDMxMTAvBgNV
BAMTKEI0NTVEMjYwOUQ1ODM1OEMxN0Y5MDJFOEU4MjBEMDc4RTcyRkRDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9047EDc2zvLCLivS1oNdNAGg
hjOeU5/jFk0MdHyek+y6p5K9hlovyvRSO3nfQ8Vz+SKXcaynNF/rcQvMT2N3JrLL
DATwJ5egjjKy28GTqtxPBI00Ao04utqMJqwjPdKd3NeL8nvnBNFmB/8WN9dyFqAc
LiSZfvjtLTnfiXtOhH/ZgY3IBiEqlTZrK51d0ZyI/uh9qWqMsCxanf3qmHSsapWq
C2r4WDQRn4n6rlPZdy4Ce9skv8yLt8T25Y4cjLHiydbG3hUo9wy42Hehlyw5Xk82
6wqaLUvJw1UXOumUFxYmKm2hk0jwo70M9dgSXA33C3MKqCVV0jz84Pone+z9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUtFXSYJ1YNYwX+QLo6CDQeOcv3IYwHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMyMzAzMDJlMzQzMjJlMzIzMjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMxMzEzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMgq4DAN
BgkqhkiG9w0BAQsFAAOCAQEALUil5nkocHW0EN7xzP7SJMx4r450APnoHMMZpgbx
klS1qgRRVbQB8isBVH7kaHq0csrdycGZaGT4JE5+bBLal/nkM8YvztaAwFYkAUnQ
+shgnUb6F3iBkhN6Wy8JDZBUvTIcLhGXWiF8RnCErPY1tQhvF9icDflsM9kpx3VP
L0KSN3QHYPqFRGeik2sfWTPC6a6+4Lz8hWkce2Z8OMmlYqTFCCV1vE/zwQ1HwsQ3
TshoFHjB9QtgConm26vqzb6974wk16SoAcJN7HpcMf48Cgj9Rt8YfJ33nlKX0wCY
sINSIFgeoCBK6poOmqKZVk6xeL7B5IlqhRk54rLxgvbmWQ==
-----END CERTIFICATE-----
Generated at Wed Jan 14 01:31:58 2026 by rpki-client