This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa
File:                     3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa (raw, json)
Hash identifier:          Lsk22BxE4N7JIQFhbIM1PNlrIZldy3TMBp/Lj0gLSC0=
Subject key identifier:   7C:0E:13:1F:74:F6:4F:6F:09:D2:15:40:32:D6:E3:27:55:C1:24:61
Certificate issuer:       /CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
Certificate serial:       5A6DB784746B71CDCAC8B40DCCD4983B9AD8074F
Authority key identifier: 21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa
Signing time:             Tue 06 Jan 2026 19:37:10 +0000
ROA not before:           Tue 06 Jan 2026 19:32:10 +0000
ROA not after:            Tue 05 Jan 2027 19:37:10 +0000
asID:                     271868
IP address blocks:        200.215.228.0/22 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6d:b7:84:74:6b:71:cd:ca:c8:b4:0d:cc:d4:98:3b:9a:d8:07:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B
        Validity
            Not Before: Jan  6 19:32:10 2026 GMT
            Not After : Jan  5 19:37:10 2027 GMT
        Subject: CN=7C0E131F74F64F6F09D2154032D6E32755C12461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:8d:75:ee:04:5e:b1:8f:ea:28:42:86:a3:
                    5d:ca:95:6c:09:6a:a0:2f:b0:44:cb:9f:da:76:04:
                    84:e1:f1:f9:34:8b:17:c8:1e:eb:89:77:58:db:4c:
                    c2:fe:67:83:e6:5d:bb:37:46:76:1b:7f:d6:57:1a:
                    4e:d5:d4:c8:c2:03:a0:fa:d7:a5:11:f9:49:05:9c:
                    e2:d3:a7:e8:4c:c3:d8:6a:29:8b:0f:ea:9f:57:6c:
                    ca:21:2a:8a:81:20:66:05:4f:01:fa:fb:51:1a:8a:
                    25:0d:70:13:c9:15:c4:79:00:16:23:0a:74:a2:6b:
                    7d:43:86:b6:ef:d6:b0:28:6d:8c:98:39:4f:6b:cb:
                    f0:a3:d7:cb:e6:06:fb:88:96:9e:cd:13:47:c5:92:
                    52:f2:b5:68:1a:65:38:38:48:40:be:c2:a9:03:c4:
                    25:4b:2f:4c:fb:0b:75:7c:bc:a2:71:98:4c:99:fd:
                    2a:04:1e:da:74:c2:a9:0f:0e:09:b0:2e:78:80:4b:
                    b4:09:54:24:97:77:66:ff:89:59:02:e1:f1:77:bb:
                    c2:48:94:09:2e:2c:c7:cb:28:55:2d:55:4d:74:92:
                    56:f5:48:ec:ac:ad:40:0b:41:6b:78:9d:b6:32:6a:
                    a7:5d:44:90:ae:da:e7:9d:65:8d:d3:24:83:5c:66:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:13:1F:74:F6:4F:6F:09:D2:15:40:32:D6:E3:27:55:C1:24:61
            X509v3 Authority Key Identifier:
                keyid:21:06:B4:3C:1B:8B:D4:5B:DE:F6:E3:DB:81:01:E6:DE:7E:03:E7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2106B43C1B8BD45BDEF6E3DB8101E6DE7E03E78B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/243BBF4FB997A7F3A11C17ABA766684C941F1E0890672475DCAE1B7244BCF2D4/0/3230302e3231352e3232382e302f32322d3330203d3e20323731383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:a8:e7:13:2d:4a:69:48:82:13:9b:c7:b9:a8:51:43:c5:
         c0:5c:da:54:c3:0c:19:bb:75:cc:59:ef:10:80:f6:a8:6e:ff:
         1a:7e:a8:44:0d:ae:18:bb:7b:ea:cb:29:27:6b:7a:5d:37:43:
         95:6e:d1:50:36:6f:a9:ad:43:a1:85:bc:e1:00:bd:83:c1:5d:
         ab:ec:a2:e7:fc:42:5d:dd:b8:86:80:bd:9c:2f:6d:c9:47:73:
         58:79:55:c0:87:53:14:f5:9f:f9:9d:df:f3:e2:2f:bf:3c:cc:
         4c:45:52:2b:d9:1c:92:24:e4:fc:4c:e3:7d:48:20:aa:c2:50:
         ce:1b:c4:7b:ed:d2:1f:3d:6f:a5:a1:6d:34:0c:4f:93:af:ad:
         cd:c1:5b:6d:7b:5f:5a:39:5d:fd:7f:f2:57:e6:16:fc:5f:62:
         67:61:fc:3a:22:f4:22:77:b3:bf:58:ee:5c:06:7d:7f:ba:b6:
         60:4e:9c:d4:8d:2a:27:38:99:a3:04:da:08:10:0d:76:9c:19:
         fb:99:17:0c:34:ad:0f:d4:84:ea:d2:62:2c:78:1a:6d:d9:ec:
         25:50:0b:55:ec:e5:96:98:76:56:48:a6:3c:b3:48:4b:e0:4c:
         55:f8:cb:fb:b2:cf:70:8d:33:dd:97:d3:23:97:6b:97:58:36:
         0a:19:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:57:51 2026 by rpki-client