This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa
File:                     3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          24DpGTQjnB2pmiU9B8trfRQhADPX7xrOZHznIZ/rW3E=
Subject key identifier:   8E:BB:A2:D0:C9:D5:B0:54:72:0A:99:B0:43:9A:5F:76:B2:38:10:3F
Certificate issuer:       /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial:       2D5955F44343819FE7E814746DABED6FA09E07C1
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa
Signing time:             Tue 06 Jan 2026 19:33:42 +0000
ROA not before:           Tue 06 Jan 2026 19:28:42 +0000
ROA not after:            Tue 05 Jan 2027 19:33:42 +0000
asID:                     262202
IP address blocks:        200.119.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:55:f4:43:43:81:9f:e7:e8:14:74:6d:ab:ed:6f:a0:9e:07:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
        Validity
            Not Before: Jan  6 19:28:42 2026 GMT
            Not After : Jan  5 19:33:42 2027 GMT
        Subject: CN=8EBBA2D0C9D5B054720A99B0439A5F76B238103F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:91:76:89:cd:d6:28:45:8c:a4:a9:ca:b7:
                    38:0b:09:17:93:0d:f3:4d:0c:71:51:47:32:7f:1f:
                    02:20:2d:dd:7b:c3:bb:19:5b:2c:a2:3f:44:85:46:
                    2f:74:1b:b9:43:07:d6:88:ea:a2:9f:c2:32:34:5c:
                    a7:ab:9c:16:98:3a:05:a9:c7:3e:c6:fa:19:6a:ee:
                    3b:49:56:f2:97:16:40:b1:78:13:ea:23:ad:15:2e:
                    c6:01:7b:fc:38:dd:9c:9d:15:8b:8e:5f:7d:33:7d:
                    8e:90:ac:77:19:17:c3:a5:3e:72:00:be:3b:d2:a5:
                    b7:a3:6c:6f:8a:c6:d1:7e:f4:4b:c3:08:0f:3a:01:
                    cb:f8:61:00:5d:2f:b8:e6:af:ab:66:81:d3:e9:78:
                    53:a3:f9:f7:f5:18:e7:6a:79:d6:83:d7:06:2c:60:
                    8a:7c:77:8b:d6:de:d8:da:c6:14:76:76:3b:4b:3c:
                    ba:a1:0b:d8:f1:88:f9:86:75:e5:96:d1:1b:62:c6:
                    a6:73:52:a7:4d:8a:7b:7d:19:e6:e1:9b:c8:02:05:
                    6b:14:5a:32:36:d6:07:09:43:4f:a4:49:4c:41:ce:
                    27:10:95:ff:f1:91:b2:cc:ef:fe:6b:53:6b:db:fd:
                    6d:51:e3:21:4c:de:9b:46:6a:ec:c3:f6:e0:c1:99:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BB:A2:D0:C9:D5:B0:54:72:0A:99:B0:43:9A:5F:76:B2:38:10:3F
            X509v3 Authority Key Identifier:
                keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3230302e3131392e3138342e302f32312d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:b4:86:82:62:b2:f3:c3:3f:59:ad:67:8f:0f:6f:e3:3b:
         1a:cb:13:8a:d0:bf:01:0b:b4:b6:c5:15:e6:9e:35:ef:24:e4:
         34:00:17:31:e9:c9:87:89:d5:3c:ae:e0:42:e9:47:57:7a:38:
         49:c8:7c:b8:90:ee:ef:b0:e5:90:dc:c3:fa:c3:aa:15:ac:ff:
         2a:07:11:fb:21:37:c8:91:cb:ac:57:69:c0:01:97:e3:cc:ea:
         00:76:e4:89:90:95:7c:c0:60:2f:7d:8e:19:72:79:a2:df:d8:
         26:82:12:11:34:57:e5:77:f3:06:d1:a9:f6:fc:7b:dc:00:70:
         51:49:cc:fc:0c:ba:d9:2b:96:9b:c3:a6:11:e5:27:c0:9d:b5:
         ea:90:77:be:8e:1e:53:37:e5:3a:e7:57:f7:62:d7:e3:60:bc:
         58:14:89:97:af:90:f0:9b:11:51:b0:fc:cb:87:d6:ce:62:95:
         69:a2:ef:05:9b:30:1a:e6:49:67:9b:d3:f1:47:b1:e7:e8:36:
         fa:30:b0:71:c5:74:00:a4:bd:39:13:21:4f:ac:fb:4c:6d:77:
         57:8e:c6:fa:1b:ff:49:c6:e5:64:2f:e5:b5:20:e7:c3:28:25:
         a6:5e:39:6b:2e:b9:41:38:b0:ed:85:bc:12:ac:e2:d7:fa:52:
         f3:d7:97:ee
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIULVlV9ENDgZ/n6BR0bavtb6CeB8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNBNEM3MkQ2MTNCODkyMjA4ODZFQ0EwMDc1NTQ5OEFC
RjFGNjYzRjAeFw0yNjAxMDYxOTI4NDJaFw0yNzAxMDUxOTMzNDJaMDMxMTAvBgNV
BAMTKDhFQkJBMkQwQzlENUIwNTQ3MjBBOTlCMDQzOUE1Rjc2QjIzODEwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkH5F2ic3WKEWMpKnKtzgLCReT
DfNNDHFRRzJ/HwIgLd17w7sZWyyiP0SFRi90G7lDB9aI6qKfwjI0XKernBaYOgWp
xz7G+hlq7jtJVvKXFkCxeBPqI60VLsYBe/w43ZydFYuOX30zfY6QrHcZF8OlPnIA
vjvSpbejbG+KxtF+9EvDCA86Acv4YQBdL7jmr6tmgdPpeFOj+ff1GOdqedaD1wYs
YIp8d4vW3tjaxhR2djtLPLqhC9jxiPmGdeWW0RtixqZzUqdNint9Gebhm8gCBWsU
WjI21gcJQ0+kSUxBzicQlf/xkbLM7/5rU2vb/W1R4yFM3ptGauzD9uDBmfkRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUjrui0MnVsFRyCpmwQ5pfdrI4ED8wHwYDVR0j
BBgwFoAUw6THLWE7iSIIhuygB1VJir8fZj8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRThFMTY4NUUxNTNGQzRFQjk5MTlDNTJDN0RBMkI3OTND
MzAxODAwMjMzNjVFOTZGNzNFN0RBQzZBMDRFOUZELzAvQzNBNEM3MkQ2MTNCODky
MjA4ODZFQ0EwMDc1NTQ5OEFCRjFGNjYzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DM0E0QzcyRDYxM0I4OTIyMDg4
NkVDQTAwNzU1NDk4QUJGMUY2NjNGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0U4RTE2ODVFMTUzRkM0RUI5OTE5QzUyQzdEQTJCNzkzQzMwMTgwMDIz
MzY1RTk2RjczRTdEQUM2QTA0RTlGRC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM4MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMwMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPI
d7gwDQYJKoZIhvcNAQELBQADggEBADW4tIaCYrLzwz9ZrWePD2/jOxrLE4rQvwEL
tLbFFeaeNe8k5DQAFzHpyYeJ1Tyu4ELpR1d6OEnIfLiQ7u+w5ZDcw/rDqhWs/yoH
EfshN8iRy6xXacABl+PM6gB25ImQlXzAYC99jhlyeaLf2CaCEhE0V+V38wbRqfb8
e9wAcFFJzPwMutkrlpvDphHlJ8CdteqQd76OHlM35TrnV/di1+NgvFgUiZevkPCb
EVGw/MuH1s5ilWmi7wWbMBrmSWeb0/FHsefoNvowsHHFdACkvTkTIU+s+0xtd1eO
xvob/0nG5WQv5bUg58MoJaZeOWsuuUE4sO2FvBKs4tf6UvPXl+4=
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:10:43 2026 by rpki-client