This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa
File:                     3230302e302e36372e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier:          DYlDM40hu8agrF/fOHtuFWQQIg7U3PTxjnoWSgKITWc=
Subject key identifier:   6D:18:20:D2:8D:F9:C5:75:C8:D3:58:A1:AB:A1:D2:9D:FC:45:A4:80
Certificate issuer:       /CN=222B248A366BA61349BB5B105D7973A9661BE6AA
Certificate serial:       6FC7EE56850425AFC5F048D4B6FFC1E00694DC36
Authority key identifier: 22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 19:03:19 +0000
ROA not before:           Tue 06 Jan 2026 18:58:19 +0000
ROA not after:            Tue 05 Jan 2027 19:03:19 +0000
asID:                     19582
IP address blocks:        200.0.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 11:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c7:ee:56:85:04:25:af:c5:f0:48:d4:b6:ff:c1:e0:06:94:dc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222B248A366BA61349BB5B105D7973A9661BE6AA
        Validity
            Not Before: Jan  6 18:58:19 2026 GMT
            Not After : Jan  5 19:03:19 2027 GMT
        Subject: CN=6D1820D28DF9C575C8D358A1ABA1D29DFC45A480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:66:13:34:d4:bf:a6:bf:b6:d5:ab:ac:50:
                    d4:aa:f3:89:2f:29:84:7e:b1:de:50:b1:0a:e2:7f:
                    15:a1:9b:df:cd:ac:6e:1a:e8:37:b0:1f:e0:83:e5:
                    f7:81:0b:88:58:b0:06:48:8f:dc:8a:29:ea:c8:9e:
                    c4:8e:b7:00:02:43:c3:70:af:02:fc:a2:d5:ca:52:
                    79:a3:7f:72:7b:ce:2c:6d:8b:0c:11:8c:41:bd:8e:
                    6b:a4:5e:a1:dd:26:52:96:1c:01:74:6f:b5:62:09:
                    90:07:be:a6:08:33:13:e5:20:ee:03:97:17:dc:37:
                    5a:7b:05:6d:f1:39:12:d8:02:06:ee:58:ab:de:b3:
                    fd:52:98:50:ee:46:3a:a0:63:45:bb:26:c3:a2:67:
                    a9:08:8c:22:68:8c:64:80:88:8e:87:96:3d:ee:64:
                    81:dc:ff:ca:b7:0a:94:92:49:ba:4a:ed:77:bd:22:
                    7c:ff:e8:44:0f:b1:c0:ac:4c:38:3a:09:3d:a4:72:
                    40:45:6e:1f:06:a3:c1:11:8a:88:a4:f6:13:0b:c0:
                    b2:34:3d:2b:e3:cb:6b:76:5f:2e:50:bc:1d:1b:01:
                    5c:df:6d:cb:82:65:de:2f:90:09:9a:a1:a7:32:96:
                    08:8d:91:f5:eb:1f:ee:72:a8:33:39:0d:ab:a3:86:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:20:D2:8D:F9:C5:75:C8:D3:58:A1:AB:A1:D2:9D:FC:45:A4:80
            X509v3 Authority Key Identifier:
                keyid:22:2B:24:8A:36:6B:A6:13:49:BB:5B:10:5D:79:73:A9:66:1B:E6:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/222B248A366BA61349BB5B105D7973A9661BE6AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B248A366BA61349BB5B105D7973A9661BE6AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DE75ACB741E00E0B17FEDC72B2C183A5264AD746053F20041B3B94461E9BBB2/0/3230302e302e36372e302f32342d3234203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:82:cc:a3:c6:59:93:c4:67:82:82:a8:49:ad:64:fb:1b:
         fe:a7:85:39:7b:ac:b9:e9:92:40:6c:d7:da:38:e3:39:18:ff:
         74:a1:98:ec:c2:e0:9b:d8:d4:a8:7c:1e:3e:26:2d:92:95:c7:
         f4:c5:44:93:e2:00:a1:8b:5b:2f:10:c4:20:b0:56:28:c6:f7:
         c1:7d:21:ea:86:ed:43:2f:a1:e3:93:70:ca:ad:5b:da:00:4b:
         8a:77:a6:1e:a3:60:71:ae:8c:cf:37:61:d5:87:de:06:9e:61:
         2a:03:89:75:bf:d3:c3:9c:7b:8c:36:05:33:24:71:75:41:6f:
         53:c5:76:ab:1a:fc:d1:be:2c:45:dd:6c:5f:ad:7d:a1:70:f7:
         9d:c7:9a:87:56:70:9c:c7:ef:ad:19:fe:4a:57:82:cc:92:de:
         e6:23:3d:3b:cc:a7:29:ec:8f:d6:2f:e7:d7:f5:ef:e2:0e:3f:
         f7:33:bb:b5:c7:d5:98:77:a1:0d:fd:21:cf:dd:52:c3:23:68:
         a1:e8:24:9d:39:cb:93:ce:a3:47:4b:60:98:b2:cc:3f:c5:c5:
         28:16:30:e4:03:77:7e:07:d7:eb:08:bd:f8:fa:3d:18:a3:95:
         fc:32:c4:37:66:5d:23:1c:13:ff:7e:e0:1d:cd:bb:31:9a:11:
         f1:88:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:36:54 2026 by rpki-client