This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34302e302f32332d3233203d3e203232383630.roa
File:                     3230302e39312e34302e302f32332d3233203d3e203232383630.roa (raw, json)
Hash identifier:          z2pBaav/AGESc0u/UNbLB9+YPkFst0KUMFHE5mNPovg=
Subject key identifier:   64:86:CF:D7:C2:7E:62:DE:83:B7:8E:5F:AB:08:73:16:C6:28:8F:3B
Certificate issuer:       /CN=4B09F2EDBF012C04EB09D93C9EFA891B3221846D
Certificate serial:       01251BC032509304741CDED236E95106FFEFFB80
Authority key identifier: 4B:09:F2:ED:BF:01:2C:04:EB:09:D9:3C:9E:FA:89:1B:32:21:84:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34302e302f32332d3233203d3e203232383630.roa
Signing time:             Mon 05 Jan 2026 16:57:14 +0000
ROA not before:           Mon 05 Jan 2026 16:52:14 +0000
ROA not after:            Mon 04 Jan 2027 16:57:14 +0000
asID:                     22860
IP address blocks:        200.91.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:1b:c0:32:50:93:04:74:1c:de:d2:36:e9:51:06:ff:ef:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B09F2EDBF012C04EB09D93C9EFA891B3221846D
        Validity
            Not Before: Jan  5 16:52:14 2026 GMT
            Not After : Jan  4 16:57:14 2027 GMT
        Subject: CN=6486CFD7C27E62DE83B78E5FAB087316C6288F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:ac:61:29:b6:be:d0:9f:9d:1f:e7:75:15:
                    28:6e:a4:43:73:01:51:50:37:44:48:e0:3c:d1:79:
                    71:e9:ff:ac:06:bb:ce:8a:91:d4:3e:35:a4:88:7e:
                    07:c9:96:eb:2e:0d:44:3f:7d:5c:d0:70:84:fc:70:
                    b9:f1:da:a5:44:b6:06:66:50:3e:8e:11:e0:2a:90:
                    7d:79:0f:d2:0d:ea:6e:a2:ad:9a:16:55:1e:0c:93:
                    90:e9:f2:6e:ff:a7:c8:a6:01:e0:18:2a:5a:e7:45:
                    b7:5e:f8:20:70:c8:af:28:05:6e:5a:4a:02:80:ed:
                    03:30:f8:82:0b:02:65:da:a9:ba:df:8b:75:74:92:
                    4b:b3:93:be:88:26:55:18:5d:9b:f9:6c:61:09:c5:
                    fd:90:28:96:76:a9:7c:fe:9b:ed:20:92:62:b4:02:
                    da:0f:08:6c:ec:74:ea:99:70:2a:84:a9:2c:7d:da:
                    06:ec:ba:e6:67:62:d6:88:c6:66:2a:97:35:c5:2f:
                    2e:62:7e:da:bb:44:2e:d0:ff:a2:dc:89:8f:f4:d4:
                    bb:76:b3:d9:63:75:60:16:a2:bb:7d:ff:ec:b6:4b:
                    e0:88:d1:7c:0b:fa:eb:5b:4c:54:80:65:e3:92:4f:
                    13:7d:ad:d0:d8:5d:76:4f:63:d8:45:ad:39:ad:84:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:CF:D7:C2:7E:62:DE:83:B7:8E:5F:AB:08:73:16:C6:28:8F:3B
            X509v3 Authority Key Identifier:
                keyid:4B:09:F2:ED:BF:01:2C:04:EB:09:D9:3C:9E:FA:89:1B:32:21:84:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B09F2EDBF012C04EB09D93C9EFA891B3221846D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD20253C833EE655339F18C2BC3CF9C8C00E01AB6C4E97432FBB1EC6CE672F1C/0/3230302e39312e34302e302f32332d3233203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:69:2d:b2:fa:ca:ef:95:b3:ca:b0:f5:38:18:af:9a:e2:
         7c:1e:4c:90:5b:71:48:8c:2c:e6:41:d6:99:63:52:e6:0e:e5:
         28:1b:76:84:2a:b7:83:ad:8b:7e:52:be:8a:a1:22:94:51:60:
         5f:59:b5:21:cb:85:96:1a:c3:a6:fa:4f:2c:99:e5:36:98:d6:
         1f:38:6b:5a:64:af:df:7d:80:5a:5a:07:8d:71:3f:15:21:98:
         7b:4f:3e:9a:ba:e9:1e:2c:42:ad:fe:42:30:21:23:26:29:fb:
         af:83:b1:7d:12:65:05:9b:00:4a:f7:9d:b9:46:f4:90:cb:98:
         ab:a7:ac:aa:c4:fe:98:8a:ff:4b:07:0c:c8:d9:10:6d:16:94:
         82:15:f1:92:11:df:b2:e8:c7:9f:c2:53:1c:8f:4b:11:07:86:
         48:36:83:36:36:fe:89:35:f0:5b:5b:d5:46:7c:cc:da:8a:a9:
         ef:31:6b:01:0b:17:63:97:f3:e0:05:12:35:16:60:ca:1c:4e:
         ea:58:a9:01:64:27:05:a5:2c:37:a8:59:57:71:4d:f4:e4:bf:
         37:fe:18:97:e4:7a:50:df:99:d8:97:05:77:0f:64:fe:3f:3e:
         5a:24:1d:59:c7:08:fa:f1:29:f4:d2:20:f9:c5:0b:24:64:1e:
         78:61:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:02:52 2026 by rpki-client