This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3230302e36312e3234302e302f32312d3234203d3e203132313530.roa
File:                     3230302e36312e3234302e302f32312d3234203d3e203132313530.roa (raw, json)
Hash identifier:          xpQyeJi8P95kkicNdHWTRRcAnUJAW3u6mhmy+wLVxWI=
Subject key identifier:   72:2C:95:D5:0F:91:16:76:B0:E7:3D:78:D8:44:F3:3F:0A:8D:91:6D
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       5E1AD62D5820E4A18D1DBCC1F28AA1A4FF8D38E0
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3230302e36312e3234302e302f32312d3234203d3e203132313530.roa
Signing time:             Tue 06 Jan 2026 18:59:18 +0000
ROA not before:           Tue 06 Jan 2026 18:54:18 +0000
ROA not after:            Tue 05 Jan 2027 18:59:18 +0000
asID:                     12150
IP address blocks:        200.61.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1a:d6:2d:58:20:e4:a1:8d:1d:bc:c1:f2:8a:a1:a4:ff:8d:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Jan  6 18:54:18 2026 GMT
            Not After : Jan  5 18:59:18 2027 GMT
        Subject: CN=722C95D50F911676B0E73D78D844F33F0A8D916D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:5e:15:c2:e2:c3:82:03:4e:ce:40:68:f1:
                    5a:c9:2f:0b:66:b0:70:e4:3f:80:d5:08:97:13:cc:
                    94:c8:65:dd:de:50:8c:63:32:5d:99:87:a1:6c:a0:
                    8d:14:07:84:49:57:c4:30:22:64:6f:06:ad:80:e6:
                    64:35:f3:9d:43:a1:d3:ac:64:c7:13:a2:d3:95:fa:
                    f2:06:62:7d:23:73:dd:96:7e:e9:6d:9c:18:70:2f:
                    ec:b2:9c:7c:5c:41:73:80:32:d2:21:56:ee:ef:b7:
                    13:7d:a5:51:60:a9:2e:86:f8:84:59:e3:6d:72:a3:
                    6e:13:7b:9e:74:58:c5:bd:31:42:74:37:02:30:09:
                    82:ce:ab:f5:88:2f:7a:27:25:c2:1a:fa:24:68:bb:
                    93:b8:59:cd:0d:be:b6:1e:70:60:45:f0:38:fa:13:
                    99:46:01:2e:a4:53:ff:13:2b:fc:a3:25:80:00:db:
                    fd:a1:33:88:84:ce:de:54:10:ce:d7:74:a3:4c:26:
                    38:e2:8c:ca:00:28:bc:bb:01:34:fd:c0:41:b6:98:
                    26:1e:05:25:b1:e9:00:cd:ae:e4:11:b1:f0:34:3b:
                    31:83:47:95:7c:68:19:2a:56:4c:41:2d:47:31:7d:
                    0b:2b:26:31:9f:01:5a:ee:52:ca:96:0e:8e:14:1b:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:95:D5:0F:91:16:76:B0:E7:3D:78:D8:44:F3:3F:0A:8D:91:6D
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3230302e36312e3234302e302f32312d3234203d3e203132313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:55:29:0d:57:da:d1:50:c3:dd:d8:82:cf:e8:08:9e:ce:
         b1:f7:94:48:98:69:f6:55:24:84:79:29:02:60:23:cf:5c:8e:
         76:92:8a:71:f3:87:e3:b6:b7:ff:7c:d9:8c:74:4f:af:ed:af:
         b2:cc:04:d3:36:7e:3d:c3:ca:6f:72:81:5a:e7:fd:63:1b:4a:
         ef:11:4f:2e:d7:87:dd:a3:86:43:d0:73:57:78:03:70:f0:68:
         96:6a:f4:b7:06:ae:2c:7a:a4:13:35:c9:2b:44:50:23:ea:0a:
         71:be:1e:43:e7:bd:9c:e2:97:16:48:60:d6:d9:13:b7:f5:4f:
         9c:f0:b3:aa:83:b8:c8:42:d1:6c:ab:7e:8b:22:64:bd:95:74:
         c1:82:f1:60:3d:23:92:cc:d1:19:ae:75:d4:5b:33:f4:c2:b3:
         c5:20:1c:72:03:d9:33:eb:59:ec:e1:44:1c:96:0b:b7:a8:e8:
         4c:b8:82:f9:b6:0b:c3:05:71:ed:77:22:04:98:5d:92:ab:a5:
         57:cc:b3:29:dc:db:c7:c5:f6:82:09:fc:4f:a4:c6:be:a5:ca:
         4f:a7:d9:f3:ad:dd:1f:88:ed:10:b5:28:3f:b5:51:0e:55:6d:
         1e:a8:43:a6:58:d6:6e:73:53:38:8c:d4:6e:40:f2:e5:4a:a1:
         bb:a5:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:55 2026 by rpki-client