This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa
File:                     3230302e3131392e302e302f31372d3234203d3e203139343239.roa (raw, json)
Hash identifier:          L3b6qGpR3BvFwy842JvAJ2E2rJzqu9wbg9QCrlseLI4=
Subject key identifier:   C6:86:81:ED:31:DC:E8:5D:7D:8F:D7:35:CE:1B:E8:5E:25:BE:C5:21
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       3AA361EA8EC32178F3C9C37F0D6905A49E10EA13
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:14:02 +0000
ROA not before:           Tue 06 Jan 2026 19:09:02 +0000
ROA not after:            Tue 05 Jan 2027 19:14:02 +0000
asID:                     19429
IP address blocks:        200.119.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:61:ea:8e:c3:21:78:f3:c9:c3:7f:0d:69:05:a4:9e:10:ea:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Jan  6 19:09:02 2026 GMT
            Not After : Jan  5 19:14:02 2027 GMT
        Subject: CN=C68681ED31DCE85D7D8FD735CE1BE85E25BEC521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:40:81:64:2c:ac:28:80:df:12:c7:4d:fb:
                    2f:32:27:ec:d6:47:8b:ab:86:37:01:1a:bb:a4:54:
                    c5:0b:59:41:d2:97:2e:f6:f5:d2:93:0d:16:b4:68:
                    aa:f4:ba:af:9c:f9:65:8b:52:e4:cd:46:d4:05:ca:
                    94:ed:3d:7c:3d:25:f2:cc:bc:e5:0c:2d:43:03:93:
                    e8:86:58:3d:c9:53:f9:15:dc:31:2a:b1:5f:f8:d1:
                    b5:9d:9a:47:42:83:56:bc:db:ab:90:96:cb:39:93:
                    09:a2:52:ec:c5:a4:22:f8:ec:48:14:8d:f3:c3:cc:
                    a9:15:5f:e2:80:04:aa:89:99:a5:be:7c:f1:0f:57:
                    75:32:8c:76:c8:5b:c2:14:46:4b:98:5a:b5:c1:cb:
                    4b:a6:2d:a6:84:3b:d1:be:56:36:67:07:15:4d:66:
                    46:23:ec:c5:61:f6:ed:aa:2b:7b:6a:5b:1f:d0:90:
                    8e:a6:7a:fb:b9:1b:99:43:54:f5:58:2a:db:69:c5:
                    f5:2d:be:68:41:bc:b5:13:df:5b:a1:34:2a:a5:ce:
                    08:56:e1:74:2a:b8:4b:3f:6a:ac:04:79:c7:26:fb:
                    ad:1d:f3:8d:90:42:e8:b2:dc:ee:d5:74:63:1d:2a:
                    3e:84:93:4b:36:7c:f5:df:df:a8:78:bb:ad:11:d0:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:81:ED:31:DC:E8:5D:7D:8F:D7:35:CE:1B:E8:5E:25:BE:C5:21
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e3131392e302e302f31372d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:f8:59:ef:2a:cb:e2:b8:84:6e:7f:c6:d3:34:21:2d:2e:
         31:e2:0e:0e:ab:32:1b:eb:cf:fe:a2:8f:99:1d:b9:bf:4c:dc:
         4b:7a:0b:70:5f:d7:ec:2b:64:29:b1:f0:4a:4d:f2:99:4d:04:
         09:fc:d7:9e:ec:3b:b8:38:8c:d5:e2:8a:6a:8a:6d:94:ef:3b:
         63:1c:84:7b:e7:df:bd:b8:f4:38:8c:d1:23:dc:0a:46:16:bb:
         ee:9d:76:10:30:90:ab:89:f1:92:b0:a8:e0:54:fa:d4:97:e6:
         e8:db:ba:5b:49:01:47:2b:ce:29:13:ef:71:36:97:bc:56:e6:
         11:c9:02:b2:47:23:c2:4b:4d:1d:6e:72:74:15:b4:8c:7f:23:
         ab:c2:10:c6:80:83:6e:04:83:62:7b:f2:c8:97:c8:81:9f:81:
         a3:ea:80:50:b1:56:37:85:51:97:d2:ab:69:59:93:b4:4a:38:
         6d:37:32:0a:79:d3:84:15:d2:32:55:aa:16:76:03:0f:96:ec:
         85:17:90:b3:c7:a6:93:25:d2:0c:d7:75:87:00:12:44:7f:6b:
         5b:c5:31:77:08:b7:0c:b9:7b:f6:67:2b:ab:4b:6c:e6:dd:04:
         69:3e:9d:3b:82:0f:f3:74:48:66:53:24:b1:19:dd:49:1c:33:
         0c:bb:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:03:56 2026 by rpki-client