This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e3130342e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          kheQTwDhKHy6aKV7uEBjAl2Djzi/dPliCUW0yCF15C4=
Subject key identifier:   6D:58:ED:6A:0E:50:F0:8C:38:E1:3E:97:B5:62:B7:1A:EA:55:A4:DB
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       6BBB01C67A40AD72A43843E58FF900F2E402641B
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:12 +0000
ROA not before:           Tue 06 Jan 2026 19:10:12 +0000
ROA not after:            Tue 05 Jan 2027 19:15:12 +0000
asID:                     22047
IP address blocks:        200.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bb:01:c6:7a:40:ad:72:a4:38:43:e5:8f:f9:00:f2:e4:02:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:12 2026 GMT
            Not After : Jan  5 19:15:12 2027 GMT
        Subject: CN=6D58ED6A0E50F08C38E13E97B562B71AEA55A4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:2c:8b:06:ea:00:49:0d:37:70:6d:fa:bb:
                    20:37:60:c9:9a:bd:a9:ff:7c:f0:5f:fd:50:d5:05:
                    0a:b0:54:5e:b9:56:d9:26:d4:c8:95:7f:a7:79:15:
                    78:13:2b:83:72:22:5b:bd:f1:bf:fa:fd:02:fa:de:
                    c4:6a:cd:23:59:38:fd:88:ba:0a:73:f1:f9:77:82:
                    ee:55:30:00:10:79:e0:5e:ab:a7:67:1b:d6:51:1e:
                    59:d3:95:02:f6:f2:ec:73:0b:85:6b:b9:47:15:34:
                    db:bd:d7:92:d5:d8:4b:4b:9c:2f:b3:a9:1b:00:bd:
                    8f:5b:f2:5a:11:62:77:ad:33:cc:3d:d8:3c:0a:f2:
                    b0:66:c3:b1:09:1c:8b:79:2e:20:1f:ad:33:d1:18:
                    75:af:d6:9b:20:15:85:48:cc:cf:2f:bb:eb:8a:78:
                    80:80:e6:59:8a:5c:9c:81:10:0f:91:d0:cd:10:2a:
                    77:3d:0c:55:b0:84:33:a3:18:63:68:58:57:3d:8c:
                    dc:48:d9:c3:ac:bd:6a:2a:a3:47:38:67:46:8c:1f:
                    25:6c:f7:60:6d:23:96:72:21:ca:d6:f2:7c:87:9e:
                    b3:13:58:60:e3:cc:02:9a:cd:0c:45:44:e1:ce:26:
                    f5:e2:f5:cc:52:84:f2:ff:b8:85:b4:72:0b:72:6f:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:58:ED:6A:0E:50:F0:8C:38:E1:3E:97:B5:62:B7:1A:EA:55:A4:DB
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3130342e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:33:0f:b2:ef:bf:92:30:38:35:8a:68:7b:0d:a6:58:30:
         79:07:49:12:f0:2c:15:7e:f8:10:36:d5:13:5a:5f:19:c4:99:
         11:e7:5c:9d:5d:b3:26:d3:42:39:1f:4f:aa:eb:35:80:4a:48:
         e6:ab:66:b5:44:e1:eb:83:35:01:ed:bf:ff:92:c4:6b:38:31:
         a2:d4:8a:bd:a9:8e:e5:db:8b:ff:c1:01:c6:13:f9:4d:d6:9f:
         39:e3:1f:15:bd:ed:4d:13:8f:da:47:26:84:70:c1:f9:8d:3b:
         76:02:86:5e:77:3a:d2:c1:23:37:e3:c7:52:bb:a8:2e:65:3b:
         5a:0a:d1:f1:99:14:c0:e2:af:cf:3e:c9:01:24:46:a9:af:ab:
         a2:a5:e9:1d:db:95:7b:7d:dc:df:b4:f8:c6:29:a3:ac:3e:94:
         3b:6c:d0:b4:7f:39:31:78:1c:43:c8:c6:a5:1f:84:03:c5:06:
         40:09:3d:20:35:46:28:9e:cc:93:2c:fd:be:ec:de:1e:55:8a:
         97:82:d7:13:1d:18:c1:30:02:b3:65:53:96:62:9d:93:26:fe:
         97:49:4e:1b:a9:fe:10:24:ff:b7:7c:94:d8:5a:0d:a5:59:46:
         8e:36:19:d3:0a:27:7f:95:95:da:11:4a:f6:2a:50:0c:f5:65:
         94:6b:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:33 2026 by rpki-client