This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3230302e38352e3136302e302f32302d3234203d3e203235363037.roa
File:                     3230302e38352e3136302e302f32302d3234203d3e203235363037.roa (raw, json)
Hash identifier:          2zEwUqJRVI4n/Y1lH7JzRXa62e7GL/OXn5HJt0VplmU=
Subject key identifier:   CF:1D:24:76:14:48:7B:AF:D8:6B:38:54:E3:34:AB:C4:13:78:91:78
Certificate issuer:       /CN=EC5A33961AFB7D9D76A054078210FE8E741BDEA9
Certificate serial:       74C431A5F6175C9FB6B9424FC6335D370588E698
Authority key identifier: EC:5A:33:96:1A:FB:7D:9D:76:A0:54:07:82:10:FE:8E:74:1B:DE:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3230302e38352e3136302e302f32302d3234203d3e203235363037.roa
Signing time:             Tue 06 Jan 2026 19:36:52 +0000
ROA not before:           Tue 06 Jan 2026 19:31:52 +0000
ROA not after:            Tue 05 Jan 2027 19:36:52 +0000
asID:                     25607
IP address blocks:        200.85.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:31:a5:f6:17:5c:9f:b6:b9:42:4f:c6:33:5d:37:05:88:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5A33961AFB7D9D76A054078210FE8E741BDEA9
        Validity
            Not Before: Jan  6 19:31:52 2026 GMT
            Not After : Jan  5 19:36:52 2027 GMT
        Subject: CN=CF1D247614487BAFD86B3854E334ABC413789178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:07:ba:fe:8e:81:ec:ed:9f:8f:27:87:f0:
                    21:48:ed:d6:c4:e2:26:e1:cd:4e:35:55:1e:aa:e0:
                    60:f7:c8:54:5a:2c:ea:d5:a5:d0:4d:9f:0a:3b:07:
                    e9:a8:9d:bd:eb:a2:e9:76:c2:ef:78:bd:5d:41:5d:
                    0a:b2:a1:09:22:e7:3f:4f:8e:9b:a8:23:95:3e:c2:
                    d6:77:e1:86:97:86:a8:3e:0d:17:6a:7a:9a:93:c7:
                    dc:b2:bd:71:f0:b6:79:b3:4f:3a:c5:fa:f7:c3:13:
                    bc:5e:80:8f:8c:d2:88:1d:ea:14:08:c5:b9:0c:15:
                    6a:4b:74:8a:64:e8:92:51:93:78:06:25:e2:49:c4:
                    5a:be:05:a3:a7:5f:ef:ee:d7:3c:72:e3:96:82:69:
                    6f:40:b0:e1:4f:3a:86:59:51:a5:ba:8e:18:05:bc:
                    6e:66:e4:e4:d4:71:82:ae:12:ea:0a:d6:28:56:82:
                    c3:0b:4a:5a:92:b8:6d:e1:4b:92:e2:19:1f:5e:8d:
                    9e:bd:8e:50:79:59:ef:9b:30:2f:b6:4d:a7:38:10:
                    fa:d9:cb:38:88:ba:70:56:e1:fa:6b:7b:9a:e9:36:
                    44:fa:63:8b:fe:53:d4:3c:3c:5e:b8:47:c8:39:28:
                    2b:5e:ba:fa:dc:5a:95:21:fc:80:4d:5b:7d:f9:11:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1D:24:76:14:48:7B:AF:D8:6B:38:54:E3:34:AB:C4:13:78:91:78
            X509v3 Authority Key Identifier:
                keyid:EC:5A:33:96:1A:FB:7D:9D:76:A0:54:07:82:10:FE:8E:74:1B:DE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC5A33961AFB7D9D76A054078210FE8E741BDEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/404C6F00A2C6FCDBEF222273F1490E29E035A8BD1F49714394EFA282D0C290EA/0/3230302e38352e3136302e302f32302d3234203d3e203235363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:b1:df:0b:df:9c:85:1b:a4:3b:b7:e4:3f:25:60:1b:1a:
         63:6f:e0:6f:d5:77:93:e7:41:6c:c0:e0:41:de:64:a9:94:b3:
         1b:55:b8:75:b1:6f:6e:4e:c8:cc:7d:9a:4d:b9:95:d4:47:ff:
         b2:57:10:cd:c7:a9:75:9a:24:60:97:47:3e:b9:84:f8:5c:1c:
         8b:ec:68:d6:6b:52:50:74:50:24:ca:c7:be:c5:2f:0a:c3:10:
         2e:79:b3:a7:40:a0:cd:bb:72:a9:71:b4:a3:1e:db:e7:01:e5:
         14:25:33:6a:84:e4:0a:a8:f5:31:32:0d:03:2a:86:24:c1:20:
         e8:8e:f4:15:d7:85:6d:50:0d:c8:79:04:29:c1:3a:a5:30:63:
         e5:49:9e:58:c7:e4:89:54:a9:e5:e5:98:88:b4:05:3d:6d:7a:
         2d:93:aa:7d:26:5b:b6:38:ea:f6:ad:3a:0e:9f:78:18:90:c6:
         c6:eb:55:85:5b:23:08:65:b9:8d:6a:a7:68:10:cf:e6:99:ea:
         d5:2d:d2:71:67:84:8b:d1:37:1f:a7:f4:f5:31:57:4d:e2:6a:
         46:df:fb:45:ce:be:64:e2:f8:54:55:1c:a5:1f:85:bb:f8:09:
         44:2f:ca:c3:2e:79:6b:27:a3:be:93:ed:55:e1:f3:38:1a:af:
         dc:76:d9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:25 2026 by rpki-client