This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa
File:                     3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa (raw, json)
Hash identifier:          X8Bj3TsI6pUtBjB7rE8RUmkWX816+LVy7eirTGsbKHY=
Subject key identifier:   08:57:2E:FF:ED:87:C4:3B:29:00:69:4A:82:48:AA:A2:18:38:C0:9B
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       58CFDCB223590285E07B8299993AE0B7608920BC
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa
Signing time:             Tue 06 Jan 2026 19:33:53 +0000
ROA not before:           Tue 06 Jan 2026 19:28:53 +0000
ROA not after:            Tue 05 Jan 2027 19:33:53 +0000
asID:                     272913
IP address blocks:        200.85.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cf:dc:b2:23:59:02:85:e0:7b:82:99:99:3a:e0:b7:60:89:20:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Jan  6 19:28:53 2026 GMT
            Not After : Jan  5 19:33:53 2027 GMT
        Subject: CN=08572EFFED87C43B2900694A8248AAA21838C09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:1b:e7:96:c7:fe:8f:b1:f1:7f:2c:a2:aa:
                    85:da:8e:7c:a9:c3:73:b6:a2:d6:bf:a1:99:a9:24:
                    59:cc:7c:9c:19:34:59:75:4a:7c:7f:73:e3:80:d7:
                    e1:2d:d2:9a:b3:18:c4:5e:b2:3e:09:57:92:81:4f:
                    4d:7f:18:e9:ac:9f:ba:a3:9e:6d:00:98:57:dd:5e:
                    20:06:b0:ba:0a:fb:de:20:bf:c4:cb:56:27:58:53:
                    70:4e:f7:7b:f2:8a:69:f1:0c:47:30:03:9b:9c:4b:
                    0b:23:e9:f6:a9:1c:1f:c3:4c:fb:b6:1c:a3:3a:a3:
                    3b:5f:33:9b:02:2c:5c:7c:c7:ee:f3:7b:79:13:1c:
                    bf:4d:f3:cb:e9:4b:8e:c0:81:3d:07:2d:37:c4:ac:
                    db:46:e4:f4:8f:1f:44:5d:1c:52:92:e4:a0:b9:92:
                    e0:49:d5:9c:ca:32:8f:c8:ef:08:3f:d3:1e:d3:8f:
                    92:83:14:73:84:c9:ba:8b:48:2b:45:f4:ad:ff:54:
                    ff:8b:08:65:3b:6c:26:77:68:6f:3d:dc:ed:ab:7c:
                    7a:24:1a:bd:c1:af:9b:7a:98:0e:12:87:9b:7b:9b:
                    3e:ad:38:45:36:4c:18:d0:72:01:f9:b1:31:28:1f:
                    f2:f2:bb:27:8c:f3:10:63:8c:40:80:d4:06:98:b3:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:2E:FF:ED:87:C4:3B:29:00:69:4A:82:48:AA:A2:18:38:C0:9B
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133352e302f32342d3234203d3e20323732393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:31:48:0b:f3:c9:eb:67:cd:e3:8f:43:f5:ba:e1:13:19:dc:
         e0:77:3f:26:3b:b4:ab:ba:27:23:00:f4:99:83:f3:d5:74:a5:
         d5:f1:9e:54:b6:3d:81:ed:22:bc:25:72:41:2f:c1:d0:ef:d9:
         b1:dc:59:97:cc:51:e5:87:92:57:93:27:5d:03:e6:4c:11:9f:
         9c:f0:ff:27:aa:44:27:0c:37:2c:83:f7:de:4b:c6:7b:31:70:
         83:2a:7d:a2:94:1a:e9:1e:a9:2e:2a:ac:60:ea:2e:43:78:a6:
         ec:4f:11:d9:c3:9e:8f:c3:cd:11:52:89:fe:78:d4:16:88:b0:
         0a:69:38:c1:34:95:07:cb:71:dc:9f:fd:ea:ae:43:40:a0:c4:
         4d:36:93:56:52:bd:b2:16:2b:cc:8e:98:4f:c2:a6:d4:e4:35:
         58:58:27:7d:f9:3a:e8:5e:49:cf:55:f3:29:9a:ef:88:35:94:
         17:1e:bd:c8:65:40:3d:9a:9d:a0:0b:9a:cb:3f:5d:92:9c:bf:
         fa:54:a6:ba:68:5a:c7:84:c1:94:c5:22:05:66:45:25:87:2c:
         e6:d5:a1:c0:36:01:ef:0a:c5:13:a8:2a:54:a9:d1:e4:5c:53:
         3c:7e:9c:3d:43:1f:90:f4:ba:b1:81:cc:ca:41:db:7a:ff:d1:
         9d:eb:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:49 2026 by rpki-client