This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa
File:                     3230302e32332e3134372e302f32342d3234203d3e2036353033.roa (raw, json)
Hash identifier:          CuoUGUo75MIym31aO4qkIoXn22k1/F6RmoPaRggenJw=
Subject key identifier:   01:B0:2F:4D:40:C6:13:69:19:44:9E:53:98:44:18:28:DB:5F:C3:A7
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       6EFDC8E12E7C003F6B62FDB3623C237B51BCF6F9
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:14:56 +0000
ROA not before:           Tue 06 Jan 2026 19:09:56 +0000
ROA not after:            Tue 05 Jan 2027 19:14:56 +0000
asID:                     6503
IP address blocks:        200.23.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fd:c8:e1:2e:7c:00:3f:6b:62:fd:b3:62:3c:23:7b:51:bc:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:56 2026 GMT
            Not After : Jan  5 19:14:56 2027 GMT
        Subject: CN=01B02F4D40C6136919449E5398441828DB5FC3A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:45:7a:b9:4b:e9:bf:a8:23:ca:9a:c2:2e:
                    c5:94:fd:cf:23:85:8a:33:80:15:d1:6f:5c:36:dc:
                    8c:15:03:e3:b7:87:c9:3c:66:32:d4:af:52:22:09:
                    02:3f:e1:54:c9:bb:71:0f:ce:b0:52:4c:95:d4:70:
                    22:9d:7e:47:32:2f:b7:a4:42:07:e2:5f:c9:09:d8:
                    2c:65:70:ce:76:e7:54:6b:c0:d2:cf:08:5b:57:61:
                    dd:33:af:d4:6b:3b:bb:33:d4:5d:32:64:6b:f5:f8:
                    8d:08:94:71:a2:24:57:6a:e5:12:44:de:c4:8e:c1:
                    f7:c2:92:6c:2f:b7:89:02:e3:fb:9d:c3:6f:ca:6a:
                    9f:ff:24:48:08:71:6d:d7:e7:27:3d:41:3e:72:e6:
                    87:01:31:a6:bd:1f:e0:06:81:7c:ee:57:e6:cd:3b:
                    d9:7a:91:dd:d7:79:11:d2:c0:c7:96:66:2d:61:20:
                    05:01:1c:02:1b:29:91:2c:4b:cd:dc:5c:22:cc:7e:
                    a1:7f:e9:f2:1e:0f:8e:cf:34:77:2e:9e:50:fc:ed:
                    88:e6:60:ea:a7:83:bc:8d:f0:e6:37:b8:14:80:a4:
                    9a:32:e9:73:f9:8c:66:5a:b6:fb:22:39:9d:ed:5d:
                    8d:c6:76:00:89:86:d9:18:fe:5e:a4:d7:02:36:53:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:2F:4D:40:C6:13:69:19:44:9E:53:98:44:18:28:DB:5F:C3:A7
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e3134372e302f32342d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:0e:7a:7b:04:f2:04:15:b8:0b:fe:7f:32:6d:d0:90:fd:
         66:02:e5:88:c6:c1:28:d1:9b:42:cf:e9:fa:de:6c:f3:5a:0c:
         d5:a8:f0:f8:e1:2f:90:4a:9e:7f:b2:48:2e:28:ca:24:26:04:
         f9:4d:a0:37:90:ce:e5:ad:7a:9b:96:22:91:ea:32:c8:e6:4a:
         fc:e0:5b:5f:97:df:8e:44:e1:53:70:c0:88:e7:17:5f:60:95:
         29:3f:50:d7:1d:90:79:d7:dd:6f:39:3c:24:4a:5a:a5:aa:91:
         52:c4:69:9c:30:9b:bb:b3:98:70:2b:96:05:18:c4:c5:e4:a2:
         32:11:7e:79:86:37:9f:65:b1:9f:fd:8b:74:37:f6:d5:ac:4e:
         2b:f5:aa:17:93:a9:eb:fe:1a:94:e1:c1:88:05:a1:e7:54:28:
         05:62:97:b9:11:e2:1c:e5:bf:2f:50:a2:80:d7:6b:e8:62:58:
         a4:79:62:c1:02:42:87:f4:ed:42:c8:9f:bb:d0:ba:93:51:22:
         8a:e8:e5:4a:69:7a:77:50:e2:b0:33:73:33:40:22:3c:86:60:
         a0:9f:3a:0a:06:c3:95:25:92:b1:94:2d:f5:6b:45:19:f7:63:
         6e:b2:9d:69:d6:fc:f7:34:f2:18:e8:6f:4b:e3:03:81:97:26:
         7f:52:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:58:40 2026 by rpki-client