This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
File:                     3230302e31342e38312e302f32342d3234203d3e20323730303133.roa (raw, json)
Hash identifier:          WFuZFzGKzf5D7HU1hgJgCNJdUgSwp5iogTbi/3KKUm4=
Subject key identifier:   B8:FA:3A:89:79:45:F9:45:5C:E9:1B:D3:19:7B:FE:62:90:1F:7C:DD
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       33A4A4338717742EF5686DA1833642F400FEE2EA
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
Signing time:             Tue 06 Jan 2026 19:37:27 +0000
ROA not before:           Tue 06 Jan 2026 19:32:27 +0000
ROA not after:            Tue 05 Jan 2027 19:37:27 +0000
asID:                     270013
IP address blocks:        200.14.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:a4:33:87:17:74:2e:f5:68:6d:a1:83:36:42:f4:00:fe:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Jan  6 19:32:27 2026 GMT
            Not After : Jan  5 19:37:27 2027 GMT
        Subject: CN=B8FA3A897945F9455CE91BD3197BFE62901F7CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:61:e5:f9:d2:bd:8f:52:aa:d3:a3:52:c1:
                    9f:c3:51:88:c6:ec:c7:89:42:70:0d:99:bc:6c:9e:
                    09:d1:e9:c0:22:79:2c:1d:33:a8:ce:4a:ec:45:2a:
                    46:2e:69:67:f0:fc:56:f3:a6:ec:6d:79:63:8a:39:
                    e8:50:d1:80:49:67:37:56:c9:b1:91:63:5c:a7:c5:
                    93:05:5f:6b:25:ec:58:3a:69:6a:44:9e:e1:29:fe:
                    cb:5b:60:56:10:71:79:6e:5e:64:a7:8b:7e:19:57:
                    29:29:15:4c:cd:c2:d5:7c:d2:be:79:58:86:31:78:
                    9e:75:01:7f:de:ea:a1:b7:79:9d:30:65:e1:c0:48:
                    50:df:b6:1b:cc:b6:cf:f1:d7:27:1e:f7:4d:74:b3:
                    41:42:79:85:44:02:35:5b:92:55:43:6b:e9:40:aa:
                    84:b4:4e:2c:c9:a0:c0:47:da:9a:56:de:8e:e3:e5:
                    1c:0b:e9:90:b4:d9:70:bd:0b:56:4f:c9:0d:19:2c:
                    c0:55:5d:f4:39:6e:3d:a7:c8:52:ec:52:11:1d:51:
                    da:e6:b4:37:89:8d:48:a8:e5:cb:6f:44:57:88:01:
                    d1:76:0b:8e:6b:95:37:c3:b4:01:21:7e:8b:27:5b:
                    bf:b1:52:02:c6:14:19:9a:02:67:ba:0e:cc:5b:10:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:3A:89:79:45:F9:45:5C:E9:1B:D3:19:7B:FE:62:90:1F:7C:DD
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:56:b6:e6:44:20:af:0d:c4:a4:e1:13:71:86:c6:49:a6:0c:
         51:ec:56:52:91:dd:20:76:29:44:4b:d0:3c:35:15:61:52:77:
         39:cd:76:84:6d:5d:5d:ef:6a:45:d7:ff:9e:f7:4f:b2:4f:d1:
         67:a9:bb:f6:e9:60:50:1c:04:b8:61:44:86:9f:13:35:a7:85:
         9f:52:8b:97:2b:02:13:fb:42:8b:89:b3:e0:03:d4:b7:15:42:
         1c:25:36:4b:69:22:19:9f:c6:94:12:fe:10:67:03:8f:b2:58:
         2b:a8:4e:00:ba:bb:3a:be:9f:42:04:b0:ef:aa:82:8e:e7:68:
         ef:04:4c:a7:0e:bb:fa:f7:ce:bb:cc:3b:95:44:00:69:36:64:
         8a:b8:8b:27:1c:d4:79:13:bc:d4:78:bd:67:1c:10:6a:bf:0c:
         86:f5:d0:b4:0e:1f:11:fe:f5:62:00:ab:a9:cd:15:98:9f:7d:
         98:52:f8:e6:6d:de:fc:5e:e0:c7:33:bc:cd:3f:a4:31:0e:5d:
         e6:26:e5:19:62:a9:db:d7:37:aa:12:4a:89:ac:8b:23:a5:8a:
         0b:f3:49:4f:ba:0c:d9:a6:25:40:5d:3f:a3:d9:be:c6:eb:7f:
         87:cd:4b:38:97:54:f6:a4:99:f6:71:d8:09:89:50:52:4e:a4:
         a3:34:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:51:04 2026 by rpki-client