This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa
File:                     3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa (raw, json)
Hash identifier:          Izzc4f8YkuXODI2DstidKmuoUL6o3Zb5+o7YF+7lLNs=
Subject key identifier:   B3:5C:16:08:20:CE:DE:9C:BC:7E:47:B4:DB:FE:91:B6:D8:DB:9B:C7
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       71B6E446716F9EBBA406FF6FC265AEEFD3E00C5B
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa
Signing time:             Tue 06 Jan 2026 20:50:28 +0000
ROA not before:           Tue 06 Jan 2026 20:45:28 +0000
ROA not after:            Tue 05 Jan 2027 20:50:28 +0000
asID:                     28075
IP address blocks:        143.202.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:e4:46:71:6f:9e:bb:a4:06:ff:6f:c2:65:ae:ef:d3:e0:0c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Jan  6 20:45:28 2026 GMT
            Not After : Jan  5 20:50:28 2027 GMT
        Subject: CN=B35C160820CEDE9CBC7E47B4DBFE91B6D8DB9BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:78:6f:22:da:02:d4:6b:ac:68:75:77:90:
                    b2:84:da:84:ec:ed:eb:7d:91:c7:d6:8e:6e:86:f1:
                    e5:1a:e4:68:74:11:c9:ea:95:17:62:98:15:84:b8:
                    34:17:d3:f6:27:cb:87:3d:4c:5b:06:7d:81:a5:a9:
                    2b:9b:d7:22:91:1f:e1:70:27:0d:ca:86:63:49:db:
                    f4:f1:f7:c6:ae:01:11:81:0d:e9:fb:84:09:43:19:
                    b3:4b:7a:a5:50:b9:b4:42:82:c8:ab:0e:d0:ee:30:
                    e8:62:2f:0e:a5:5c:4b:a9:9f:4f:de:31:9c:c5:ec:
                    a5:42:e5:b8:76:93:6d:90:69:30:db:f3:2a:ab:8f:
                    a8:76:30:b3:aa:96:f2:03:6a:50:b9:2b:46:56:e5:
                    40:b9:3f:46:a6:cf:e7:fc:61:a7:0c:84:11:92:4d:
                    32:08:bb:ce:77:3b:a8:fc:18:f7:8e:4b:33:30:0a:
                    31:71:04:c0:11:ab:22:f5:69:be:b3:1c:23:0c:52:
                    6a:4d:83:e1:17:1e:2b:b2:b2:f6:0a:98:e3:7f:b1:
                    5e:d0:70:f2:b7:7c:63:3d:0b:6b:b0:82:c6:7e:1d:
                    b1:09:ae:96:92:37:cc:52:68:30:aa:a5:d1:49:84:
                    2c:69:b4:b6:54:de:9f:51:2b:40:52:10:4c:35:4a:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:16:08:20:CE:DE:9C:BC:7E:47:B4:DB:FE:91:B6:D8:DB:9B:C7
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3134332e3230322e3139322e302f32322d3232203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:55:0c:57:9e:98:21:20:5c:c2:bd:90:69:d2:5c:c2:55:
         e4:07:f3:16:7c:a5:91:b8:2f:bc:2d:18:84:a1:f1:80:09:c3:
         fd:fe:0f:c4:40:62:f3:cd:ff:eb:aa:9e:65:44:2e:6c:4e:44:
         1c:95:91:1f:9f:83:63:eb:7d:2c:f2:0f:47:f1:a6:a1:ba:b0:
         3c:61:24:83:e0:35:98:20:83:aa:d2:12:7b:b8:4f:d7:bb:b7:
         d8:70:96:39:53:5a:4b:4d:f1:7a:e8:72:77:fe:bc:13:1e:e9:
         87:cb:7e:22:c4:d6:ed:da:ee:28:6a:1d:1d:63:f7:09:32:a0:
         79:27:69:74:a8:cd:ef:78:c0:d1:49:de:ed:d5:0c:56:58:f4:
         5a:e8:0d:9f:ce:a0:3f:86:81:6c:c0:47:08:42:ca:4a:68:73:
         6e:0d:72:7e:55:3b:bb:be:02:85:93:61:d1:55:7a:15:ec:eb:
         f2:fa:50:b2:dd:01:1d:01:a3:2d:38:30:e9:a8:dc:d5:b0:0a:
         90:5f:13:62:6f:3d:18:ea:73:7f:c8:3b:9e:72:bf:f7:ae:5d:
         bb:e9:9a:07:e9:30:5f:96:1e:fb:8f:b9:7d:b3:8a:41:e0:63:
         95:99:9b:26:ac:de:76:2c:95:15:a8:ae:1a:87:62:0f:76:46:
         b0:ef:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:55:32 2026 by rpki-client