This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa
File:                     3230302e302e3138352e302f32342d3234203d3e2037333430.roa (raw, json)
Hash identifier:          aDJO30uqJcua1e+IbvR49NwEMp4o/Flt5GYLfjS9HKE=
Subject key identifier:   C2:0E:EA:48:F1:65:6F:43:B6:72:69:9D:C7:86:C4:F4:65:6B:51:2E
Certificate issuer:       /CN=89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC
Certificate serial:       73246AA5A20E2B442B64EF66899CA1A2DBC18C4B
Authority key identifier: 89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa
Signing time:             Tue 06 Jan 2026 19:15:23 +0000
ROA not before:           Tue 06 Jan 2026 19:10:23 +0000
ROA not after:            Tue 05 Jan 2027 19:15:23 +0000
asID:                     7340
IP address blocks:        200.0.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:6a:a5:a2:0e:2b:44:2b:64:ef:66:89:9c:a1:a2:db:c1:8c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC
        Validity
            Not Before: Jan  6 19:10:23 2026 GMT
            Not After : Jan  5 19:15:23 2027 GMT
        Subject: CN=C20EEA48F1656F43B672699DC786C4F4656B512E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:92:8b:6b:c9:cf:da:c5:f4:1a:76:8b:79:
                    7c:d3:65:47:95:99:33:ec:df:d8:6e:1b:71:f5:bb:
                    30:47:5d:94:58:7d:35:7e:98:61:78:1a:ed:1e:5c:
                    9f:e6:6d:64:3a:44:12:d7:59:2d:11:82:de:00:b9:
                    86:e0:56:78:7c:c0:69:33:9c:8f:cf:7e:29:2f:ee:
                    81:9b:ba:56:1d:dd:50:47:18:3b:6f:05:1d:23:da:
                    8e:63:df:d8:08:09:a6:ca:78:1e:a9:d8:1f:34:62:
                    a0:20:e8:4c:f9:d8:fb:54:a4:72:f5:b8:fa:cf:04:
                    43:f1:de:f7:97:9a:61:b0:b8:53:e1:d2:40:31:15:
                    35:58:d8:55:63:bb:7c:80:33:1d:0e:e0:c3:16:f2:
                    24:9e:7e:b0:83:91:74:d1:9c:2f:4f:cf:39:c7:f9:
                    be:f8:b0:cf:98:1e:d2:7a:cc:83:ed:55:2d:1d:40:
                    7a:26:6a:ce:aa:69:ad:e6:c5:7b:75:c0:11:13:97:
                    7e:94:d5:a2:0f:f4:95:3f:fd:ea:5d:17:ab:3c:33:
                    06:c5:1c:fb:2d:f1:e9:cd:9c:e9:5d:24:9a:cb:ea:
                    7b:6e:2c:51:39:f5:a2:d4:c5:f0:85:3d:db:a8:8a:
                    f7:ab:37:f8:f0:a4:82:e0:b5:17:ba:2e:f5:92:8d:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0E:EA:48:F1:65:6F:43:B6:72:69:9D:C7:86:C4:F4:65:6B:51:2E
            X509v3 Authority Key Identifier:
                keyid:89:75:4D:0A:1B:67:95:6C:5F:EB:D6:A8:2B:8D:E5:8D:93:D6:D4:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89754D0A1B67956C5FEBD6A82B8DE58D93D6D4AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4FE01BAAC11C306272CACF1CDD4C63B203C64D948D0EBC1E185DBBAA78BE134/0/3230302e302e3138352e302f32342d3234203d3e2037333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:50:d2:e9:53:3f:12:7e:9a:51:88:89:75:f0:af:c1:cc:06:
         fa:17:5d:ff:53:0a:60:0a:80:e2:92:ce:96:9e:37:80:ed:08:
         80:82:84:fa:35:0c:38:c4:86:6f:cc:69:85:42:c5:14:4f:08:
         16:b4:e0:da:99:00:c4:18:33:f4:9f:6b:df:c2:c7:d1:4e:8a:
         8c:75:c1:85:84:0a:31:e0:87:6e:8e:7a:74:a4:10:e0:f8:83:
         fc:c0:16:36:82:e8:cd:a4:8b:bb:b8:cf:1c:e6:f1:24:1b:fe:
         cb:58:30:89:89:7e:ca:77:43:54:36:51:55:44:54:54:93:c7:
         6a:31:89:4c:3b:fc:e3:bb:dd:7e:7b:df:7e:cc:13:6c:a2:1e:
         e8:5b:cf:52:a9:35:6e:eb:cb:ec:8d:10:d3:cf:96:00:fa:bf:
         ce:07:5b:57:e5:7c:f8:15:12:0c:cc:49:cd:4b:5b:98:6c:07:
         9e:52:48:be:96:fb:af:9d:ec:cd:04:e2:08:98:0a:ba:54:27:
         10:81:82:93:0d:47:be:dc:33:45:e0:a1:8b:ca:29:70:80:5d:
         ca:b3:0a:82:16:a3:c4:d7:2d:cb:18:fa:79:ca:d9:01:99:a3:
         8c:37:5f:a6:ff:cb:1f:e9:66:01:ad:94:e1:d3:b7:12:2f:9c:
         02:9a:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:08:46 2026 by rpki-client