This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
File:                     3230302e36382e3139322e302f31392d3234203d3e203131333135.roa (raw, json)
Hash identifier:          qx0uwRKWx5sdiW71COZvB1kXLp+NplsNretrugi09WM=
Subject key identifier:   A1:B6:A1:59:8B:E0:6E:D2:67:E3:48:2B:F8:FA:56:1B:00:11:00:7C
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4C98D207F81D530DF73EEAADCB30CE7C2359AFF5
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa
Signing time:             Tue 06 Jan 2026 20:54:43 +0000
ROA not before:           Tue 06 Jan 2026 20:49:43 +0000
ROA not after:            Tue 05 Jan 2027 20:54:43 +0000
asID:                     11315
IP address blocks:        200.68.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:98:d2:07:f8:1d:53:0d:f7:3e:ea:ad:cb:30:ce:7c:23:59:af:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  6 20:49:43 2026 GMT
            Not After : Jan  5 20:54:43 2027 GMT
        Subject: CN=A1B6A1598BE06ED267E3482BF8FA561B0011007C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:08:1f:f8:74:67:36:34:45:57:98:83:f0:
                    89:10:45:88:ab:16:00:66:f4:56:9e:4e:1f:bd:bd:
                    03:74:11:01:47:14:92:d4:6c:44:af:9c:a5:3b:f5:
                    59:3f:a3:5f:49:0b:54:53:d2:82:79:98:f0:91:92:
                    37:20:8b:32:8b:db:f3:16:bb:61:b3:ac:13:e1:82:
                    15:5d:5b:d3:5c:83:d1:0b:7d:13:ce:bb:d6:75:e0:
                    07:42:55:4f:69:98:2a:3e:52:c1:36:5f:bb:c4:3c:
                    d2:08:56:1f:aa:ec:cc:05:b2:1e:40:5e:23:ff:8b:
                    1c:0f:dc:d9:e9:c1:02:85:56:39:5e:74:f5:35:7a:
                    ce:13:7d:3b:42:d9:62:bc:b8:78:ed:17:df:4d:78:
                    d7:05:3b:d1:9b:de:b3:85:e1:a5:ad:dd:d5:c7:40:
                    90:25:bd:7d:5a:0e:50:a5:6b:d7:76:63:89:1b:0d:
                    08:29:af:d6:f0:42:0a:af:13:ea:bd:39:e6:c2:2b:
                    72:d9:7a:c2:cd:22:97:31:23:04:5b:88:a8:a4:1c:
                    ca:1b:f5:79:f8:bb:bc:ab:2b:73:d4:0b:8d:4b:5e:
                    59:e8:d0:d1:97:ba:32:9f:29:d9:34:81:58:96:c4:
                    63:95:97:3b:63:fc:05:36:a2:69:dd:74:eb:9a:74:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:A1:59:8B:E0:6E:D2:67:E3:48:2B:F8:FA:56:1B:00:11:00:7C
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e36382e3139322e302f31392d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:b4:d3:ff:e5:a1:45:0f:ff:b5:49:a1:37:76:03:a2:99:
         dc:4a:cc:65:8b:2e:c4:6d:f7:f3:74:3d:71:74:94:4f:b7:58:
         47:cb:2f:c3:68:ef:1d:b2:7f:21:ec:e4:40:72:0d:f7:6f:64:
         ba:25:a2:48:0c:5b:1f:72:94:de:36:67:00:d8:c2:6c:fa:3b:
         10:57:27:96:97:a4:dc:62:10:b9:5e:26:a8:c3:4d:24:20:ed:
         7d:30:12:90:56:7d:54:b0:20:6c:75:be:02:18:a1:cc:5f:2b:
         16:4c:9f:77:d3:01:1b:91:8f:9c:44:f5:b1:6d:47:a8:20:ee:
         dc:db:1e:45:74:31:2b:b7:94:1e:7b:fa:6d:7e:72:16:ce:ed:
         d4:a2:4e:2b:23:27:8d:40:7a:7f:da:14:c5:01:99:0a:5d:b1:
         17:ae:06:c4:d6:92:ac:bf:5d:53:d8:21:8f:94:b8:ea:c4:41:
         5a:33:1a:6e:11:7d:71:ae:c4:0e:71:a6:11:65:19:90:2b:12:
         31:61:11:03:b8:a1:ce:6b:09:93:2f:aa:05:2e:ac:f1:3b:54:
         25:0e:73:8a:3e:4c:00:e3:53:99:31:f0:83:4e:42:7a:9a:3b:
         f8:95:06:60:42:f9:ee:bb:4f:44:47:5e:6b:4f:e3:54:10:b3:
         f3:c9:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:19 2026 by rpki-client