This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa
File:                     3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          W2wACpyPI6/ugCdhDltOTvK46+VHdReluS6sDy4eezA=
Subject key identifier:   F1:BE:F5:54:F1:53:FC:26:E9:DC:95:F5:81:65:C6:F8:96:E3:7C:26
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       1F34392E910EB16DCA7C30E06F369422A1ACA2EA
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa
Signing time:             Tue 06 Jan 2026 19:20:44 +0000
ROA not before:           Tue 06 Jan 2026 19:15:44 +0000
ROA not after:            Tue 05 Jan 2027 19:20:44 +0000
asID:                     263242
IP address blocks:        200.12.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:34:39:2e:91:0e:b1:6d:ca:7c:30:e0:6f:36:94:22:a1:ac:a2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Jan  6 19:15:44 2026 GMT
            Not After : Jan  5 19:20:44 2027 GMT
        Subject: CN=F1BEF554F153FC26E9DC95F58165C6F896E37C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:a3:68:40:81:ed:c9:fa:84:79:72:a4:e5:
                    f6:a2:b2:a2:3c:e0:b6:72:ce:0a:62:fc:7b:fa:d2:
                    02:cf:a5:ab:f6:53:5f:5b:98:f3:02:4f:3c:ee:cf:
                    63:52:b1:57:68:73:9d:98:42:96:1c:65:49:0e:6d:
                    34:52:f2:93:d0:aa:82:7e:12:00:8c:a8:51:18:33:
                    8d:55:4d:60:08:44:04:64:87:f3:d8:a0:1a:32:39:
                    8b:ae:3c:ca:7d:e3:fa:06:e7:89:22:8b:eb:ec:7b:
                    3f:ba:1b:c3:51:04:95:14:9d:0c:1f:59:d5:72:e9:
                    33:03:4b:81:6d:05:a0:2c:de:13:70:58:85:5c:4d:
                    dc:eb:86:6a:0c:27:d9:22:65:c0:3b:07:03:f0:d1:
                    2f:dc:3b:7c:12:ca:e2:a8:c3:3c:aa:32:71:e9:d3:
                    e2:f5:76:ba:ec:fa:28:18:a7:ff:1a:6c:12:bf:6d:
                    ae:dd:56:1b:77:9d:17:33:c0:8e:da:79:1c:97:6b:
                    17:cb:5a:50:d0:0c:ed:75:a4:10:3a:2c:fc:db:78:
                    98:2a:38:96:9a:19:82:14:77:38:2a:14:15:4b:77:
                    65:bd:68:08:48:fc:04:3d:e8:80:a7:02:13:d1:62:
                    78:bc:26:4b:1b:49:6c:39:62:f3:7b:00:69:0f:e6:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:F5:54:F1:53:FC:26:E9:DC:95:F5:81:65:C6:F8:96:E3:7C:26
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235302e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:a3:a8:d7:d6:e8:e9:4e:6c:08:58:24:ff:e0:3d:23:75:
         d2:38:d2:c8:fc:48:1c:18:cd:c8:00:1b:c1:44:c1:29:50:5a:
         4d:ab:85:17:b5:3c:59:68:c3:ef:e2:0f:ab:e6:4b:e5:35:b5:
         9f:1f:72:93:e6:06:15:80:e6:ec:df:fc:b5:a8:30:7e:16:75:
         19:60:ec:dc:b6:49:a9:19:33:76:67:63:31:19:3c:72:b0:44:
         e0:67:0b:3f:6d:6d:04:2f:59:61:27:ae:30:55:59:b1:96:bf:
         36:c1:49:ba:2c:6d:03:8d:c8:ae:83:b0:eb:3e:9b:bb:d2:04:
         e5:fb:d4:49:11:f1:86:f0:89:54:bf:6a:b1:1e:08:98:45:11:
         31:b5:24:87:5d:13:e4:20:99:5f:68:9c:27:d7:8b:7c:b3:9a:
         12:f0:14:15:93:71:83:7f:8d:fa:da:26:80:f5:59:27:c0:fc:
         57:6f:9e:b2:d1:7e:b8:6b:82:d0:46:93:09:f6:a3:52:27:6b:
         00:22:b9:ad:0a:b5:d3:be:87:7e:df:ea:07:ef:f8:3d:be:74:
         43:76:4e:f0:62:fb:c7:71:92:56:74:98:52:dd:b5:d2:73:b1:
         31:44:4b:c5:95:66:86:13:f7:cd:e9:e3:84:6c:55:88:b9:34:
         f7:47:ff:9b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHzQ5LpEOsW3KfDDgbzaUIqGsouowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg0QzY0NzY1OTM0Q0M5QTJDRTk3QTExNTBFMDU4NDg5
RjE5RDUzNTAeFw0yNjAxMDYxOTE1NDRaFw0yNzAxMDUxOTIwNDRaMDMxMTAvBgNV
BAMTKEYxQkVGNTU0RjE1M0ZDMjZFOURDOTVGNTgxNjVDNkY4OTZFMzdDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBaNoQIHtyfqEeXKk5faisqI8
4LZyzgpi/Hv60gLPpav2U19bmPMCTzzuz2NSsVdoc52YQpYcZUkObTRS8pPQqoJ+
EgCMqFEYM41VTWAIRARkh/PYoBoyOYuuPMp94/oG54kii+vsez+6G8NRBJUUnQwf
WdVy6TMDS4FtBaAs3hNwWIVcTdzrhmoMJ9kiZcA7BwPw0S/cO3wSyuKowzyqMnHp
0+L1drrs+igYp/8abBK/ba7dVht3nRczwI7aeRyXaxfLWlDQDO11pBA6LPzbeJgq
OJaaGYIUdzgqFBVLd2W9aAhI/AQ96ICnAhPRYni8JksbSWw5YvN7AGkP5iEDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8b71VPFT/Cbp3JX1gWXG+JbjfCYwHwYDVR0j
BBgwFoAU+Exkdlk0zJos6XoRUOBYSJ8Z1TUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjMzQjgwNzcxMDc1OEI1OTJERTE1M0E5OENDM0IzQ0Uw
MzFCRTI4NzVDOTk2Q0Q4RjdFNDZFMzUyNkFBRjIwLzAvRjg0QzY0NzY1OTM0Q0M5
QTJDRTk3QTExNTBFMDU4NDg5RjE5RDUzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODRDNjQ3NjU5MzRDQzlBMkNF
OTdBMTE1MEUwNTg0ODlGMTlENTM1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDIzM0I4MDc3MTA3NThCNTkyREUxNTNBOThDQzNCM0NFMDMxQkUyODc1
Qzk5NkNEOEY3RTQ2RTM1MjZBQUYyMC8wLzMyMzAzMDJlMzEzMjJlMzIzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzNDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAz6
MA0GCSqGSIb3DQEBCwUAA4IBAQCFW6Oo19bo6U5sCFgk/+A9I3XSONLI/EgcGM3I
ABvBRMEpUFpNq4UXtTxZaMPv4g+r5kvlNbWfH3KT5gYVgObs3/y1qDB+FnUZYOzc
tkmpGTN2Z2MxGTxysETgZws/bW0EL1lhJ64wVVmxlr82wUm6LG0Djciug7DrPpu7
0gTl+9RJEfGG8IlUv2qxHgiYRRExtSSHXRPkIJlfaJwn14t8s5oS8BQVk3GDf436
2iaA9VknwPxXb56y0X64a4LQRpMJ9qNSJ2sAIrmtCrXTvod+3+oH7/g9vnRDdk7w
YvvHcZJWdJhS3bXSc7ExREvFlWaGE/fN6eOEbFWIuTT3R/+b
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:13:26 2026 by rpki-client