This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa
File:                     3230302e32332e3136382e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          W+zIKIqaunEQfSKZECjreK/3nVXnoUCL4AiP1DSGz08=
Subject key identifier:   53:D5:4A:76:50:05:98:F2:D4:B2:8E:9D:4B:30:A7:15:89:58:EB:C7
Certificate issuer:       /CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Certificate serial:       0CFEDA1A0FABF29AD1C27895DD7F9C833BF1C3FA
Authority key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:07:33 +0000
ROA not before:           Tue 06 Jan 2026 19:02:33 +0000
ROA not after:            Tue 05 Jan 2027 19:07:33 +0000
asID:                     32098
IP address blocks:        200.23.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:da:1a:0f:ab:f2:9a:d1:c2:78:95:dd:7f:9c:83:3b:f1:c3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9CE332EEAB17EF6270B269990D948099DD5049
        Validity
            Not Before: Jan  6 19:02:33 2026 GMT
            Not After : Jan  5 19:07:33 2027 GMT
        Subject: CN=53D54A76500598F2D4B28E9D4B30A7158958EBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:ee:f0:99:61:d7:91:9e:b7:0b:c2:4e:37:
                    e0:4e:b2:f0:43:cb:49:ab:4e:95:77:fb:9c:47:39:
                    f4:cf:e3:3b:25:2a:37:3e:fe:a8:4e:10:62:10:94:
                    c1:a6:00:8c:34:eb:73:df:06:43:03:b2:91:c4:36:
                    74:35:9a:ab:e2:da:65:f2:57:10:b1:e1:7a:30:07:
                    fe:b2:ce:b2:56:89:d3:d9:d9:c2:4e:6f:da:93:e4:
                    68:c1:a2:52:10:39:06:ab:8e:b5:20:bd:3b:81:dd:
                    62:0e:f2:f4:2b:b7:85:2c:5c:27:8f:b7:94:ea:7e:
                    70:66:0b:b1:22:de:ed:13:1c:64:9f:cf:f3:9b:11:
                    75:b8:43:48:6d:c1:3a:2a:f4:20:af:5c:5d:05:f6:
                    08:36:e7:47:58:4b:8a:65:08:d6:4d:9f:ad:2f:d5:
                    81:01:ef:fa:4a:33:b6:de:7f:47:05:43:16:3b:5e:
                    30:75:d1:6a:27:85:81:2e:16:88:6c:2d:66:02:70:
                    38:92:67:af:49:1a:72:02:26:9b:e2:b8:b5:38:ed:
                    d0:07:dd:cd:d1:2d:e1:8a:a5:8e:97:d5:e3:b6:25:
                    7b:d2:0f:78:b3:6f:e2:4e:ce:f1:6b:a2:77:71:c0:
                    65:e3:40:22:a9:78:6e:af:3b:13:6e:b1:f1:5c:fb:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:4A:76:50:05:98:F2:D4:B2:8E:9D:4B:30:A7:15:89:58:EB:C7
            X509v3 Authority Key Identifier:
                keyid:DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:f8:b8:d5:f4:de:06:e7:49:7c:0f:1a:2c:65:0b:66:25:
         2c:77:13:ea:14:00:d0:3a:9c:e1:6c:23:3b:f2:c7:97:b6:be:
         20:02:44:86:a2:3d:ef:1d:a2:e2:dd:33:bc:2d:c3:e8:38:09:
         f4:f1:8e:64:76:f6:35:50:c4:95:bd:42:87:35:fe:a5:cd:db:
         70:9e:c6:02:33:d4:ee:cc:fd:d4:e2:ed:6e:c5:46:9e:ba:27:
         0a:6b:63:18:65:a7:3b:7b:77:34:7a:61:1f:6b:e2:28:32:9f:
         9a:ce:1f:4c:d8:c6:20:2f:c1:bd:27:d6:71:af:48:9d:2f:a9:
         96:55:2e:82:54:1b:0f:fd:97:05:d0:38:a8:48:15:c8:6e:0a:
         c2:92:39:d9:ee:c3:5a:a3:1b:c7:f0:0d:63:e1:d9:ee:8c:41:
         2f:2e:ea:ca:1c:95:be:a6:e8:4b:5b:6e:71:94:e1:07:74:4c:
         58:39:98:96:f1:f9:7f:ab:d8:cd:a4:83:55:82:57:d5:cc:71:
         25:20:9d:eb:d1:30:4d:65:6f:8d:4a:e0:1b:54:3c:88:4a:f6:
         9a:8b:f1:88:14:58:a7:81:ba:95:81:a5:cb:8c:b7:7b:be:86:
         1a:21:3a:34:ab:4a:ab:8c:9b:a9:8a:7d:d0:10:8a:ff:f1:fc:
         18:72:f7:f8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDP7aGg+r8prRwniV3X+cgzvxw/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE5Q0UzMzJFRUFCMTdFRjYyNzBCMjY5OTkwRDk0ODA5
OURENTA0OTAeFw0yNjAxMDYxOTAyMzNaFw0yNzAxMDUxOTA3MzNaMDMxMTAvBgNV
BAMTKDUzRDU0QTc2NTAwNTk4RjJENEIyOEU5RDRCMzBBNzE1ODk1OEVCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuH+7wmWHXkZ63C8JON+BOsvBD
y0mrTpV3+5xHOfTP4zslKjc+/qhOEGIQlMGmAIw063PfBkMDspHENnQ1mqvi2mXy
VxCx4XowB/6yzrJWidPZ2cJOb9qT5GjBolIQOQarjrUgvTuB3WIO8vQrt4UsXCeP
t5TqfnBmC7Ei3u0THGSfz/ObEXW4Q0htwToq9CCvXF0F9gg250dYS4plCNZNn60v
1YEB7/pKM7bef0cFQxY7XjB10WonhYEuFohsLWYCcDiSZ69JGnICJpviuLU47dAH
3c3RLeGKpY6X1eO2JXvSD3izb+JOzvFrondxwGXjQCKpeG6vOxNusfFc+9E1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU9VKdlAFmPLUso6dSzCnFYlY68cwHwYDVR0j
BBgwFoAU2pzjMu6rF+9icLJpmQ2UgJndUEkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTk5RDNBNjg4NDJGOTlGQkI1OTdGMzhCMkMzRUJGQUVF
ODA0RDYxRDYwMDg2M0NFNjc5N0YyNTM0ODRDNDVCLzAvREE5Q0UzMzJFRUFCMTdF
RjYyNzBCMjY5OTkwRDk0ODA5OURENTA0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTlDRTMzMkVFQUIxN0VGNjI3
MEIyNjk5OTBEOTQ4MDk5REQ1MDQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk5OUQzQTY4ODQyRjk5RkJCNTk3RjM4QjJDM0VCRkFFRTgwNEQ2MUQ2
MDA4NjNDRTY3OTdGMjUzNDg0QzQ1Qi8wLzMyMzAzMDJlMzIzMzJlMzEzNjM4MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzMjMwMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgXqDAN
BgkqhkiG9w0BAQsFAAOCAQEAG4b4uNX03gbnSXwPGixlC2YlLHcT6hQA0Dqc4Wwj
O/LHl7a+IAJEhqI97x2i4t0zvC3D6DgJ9PGOZHb2NVDElb1ChzX+pc3bcJ7GAjPU
7sz91OLtbsVGnronCmtjGGWnO3t3NHphH2viKDKfms4fTNjGIC/BvSfWca9InS+p
llUuglQbD/2XBdA4qEgVyG4KwpI52e7DWqMbx/ANY+HZ7oxBLy7qyhyVvqboS1tu
cZThB3RMWDmYlvH5f6vYzaSDVYJX1cxxJSCd69EwTWVvjUrgG1Q8iEr2movxiBRY
p4G6lYGly4y3e76GGiE6NKtKq4ybqYp90BCK//H8GHL3+A==
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:58 2026 by rpki-client