This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3232342e302f32302d3234203d3e203232373234.roa
File:                     3230302e3130352e3232342e302f32302d3234203d3e203232373234.roa (raw, json)
Hash identifier:          N+9K++tnF7+F+a+u6bLlFf1dhVdGsJHI+WjD6Dia2i8=
Subject key identifier:   A9:02:ED:DB:1E:92:D9:B0:3F:C8:7B:E9:8C:9E:31:A2:3B:A5:05:26
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       51D10426973947A95AABA097957D646B0ABCFE5A
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3232342e302f32302d3234203d3e203232373234.roa
Signing time:             Tue 06 Jan 2026 20:58:01 +0000
ROA not before:           Tue 06 Jan 2026 20:53:01 +0000
ROA not after:            Tue 05 Jan 2027 20:58:01 +0000
asID:                     22724
IP address blocks:        200.105.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d1:04:26:97:39:47:a9:5a:ab:a0:97:95:7d:64:6b:0a:bc:fe:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Jan  6 20:53:01 2026 GMT
            Not After : Jan  5 20:58:01 2027 GMT
        Subject: CN=A902EDDB1E92D9B03FC87BE98C9E31A23BA50526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:e1:7d:a5:f8:2d:6e:2a:59:f6:2b:5c:6c:
                    23:73:f1:5b:b2:0b:e2:10:ed:ab:07:fc:5e:15:4b:
                    fc:56:83:3f:f8:80:90:1f:c5:4d:00:7d:5b:49:0b:
                    ad:34:96:5a:81:ac:d1:eb:28:25:ec:19:ee:db:cf:
                    91:8d:bd:37:b2:07:f6:0d:30:7b:32:ce:d8:9c:a0:
                    bf:5e:f1:99:f1:fb:90:77:6c:27:0f:18:24:57:ba:
                    90:64:1c:9b:13:df:93:99:a3:c5:37:7e:d1:2b:e0:
                    44:c5:17:1b:d1:c2:37:2c:2c:ce:b9:3a:03:94:49:
                    b7:ff:f5:fa:2f:71:a4:b8:c8:e3:f0:4e:86:38:a6:
                    24:6e:d2:d9:3c:b1:f3:fe:3d:24:4a:a5:61:29:aa:
                    59:93:3c:24:4a:c1:4e:40:a0:14:d6:2b:85:50:0c:
                    7d:46:a6:3a:ab:f2:0d:1a:75:f1:ea:ec:f1:af:63:
                    67:3e:2b:92:5e:44:3b:11:b0:ec:57:80:e5:6a:d1:
                    50:a5:b0:64:88:9d:c8:ce:34:20:c9:12:ac:6a:6c:
                    18:4e:89:0b:16:86:a5:da:12:37:bb:25:8e:8f:80:
                    89:e9:bc:92:32:5c:9c:61:d8:f1:b9:13:f4:9e:9e:
                    56:aa:5a:59:4f:b6:19:68:fc:e1:b7:e5:66:54:14:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:02:ED:DB:1E:92:D9:B0:3F:C8:7B:E9:8C:9E:31:A2:3B:A5:05:26
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3232342e302f32302d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:a5:f4:66:c1:19:4b:4b:a7:64:4f:7a:a7:b6:fb:d3:43:c1:
         ef:01:14:fe:b9:32:ab:80:ab:c8:60:83:20:56:ce:7c:6e:4c:
         fd:f1:48:a2:10:92:ee:3a:79:e5:62:22:42:c6:fe:54:32:7a:
         7c:e7:9d:f3:29:bb:7f:89:78:9c:d4:71:17:20:ef:91:02:10:
         7a:30:f3:98:ec:36:55:34:f1:53:7a:f8:54:8d:be:39:9b:f0:
         08:34:d1:60:c9:f8:ce:80:2c:76:36:c2:c3:33:44:41:e5:2e:
         cc:74:2b:a3:8d:0e:b5:e5:bf:f6:f7:12:d4:b6:35:ad:98:a2:
         2c:0c:07:cd:6b:b4:4f:52:bc:6b:97:eb:b6:d9:bd:96:b5:16:
         47:bd:41:5f:55:ac:3a:8e:f9:c9:2f:b8:8a:00:93:14:7c:78:
         1d:7e:c1:86:ca:bd:a9:fc:91:eb:28:6f:e9:c8:16:85:41:72:
         3c:62:09:62:ec:b6:3c:37:0b:0d:70:e1:b0:46:6c:1a:34:ea:
         3c:5b:3f:0e:dd:d3:9b:0f:bb:e9:63:9e:2a:f2:e4:7a:f3:77:
         8c:65:13:a7:01:36:3a:3b:7d:aa:0c:1d:01:e8:2b:c5:b2:b5:
         fe:26:c0:e3:b0:7b:2c:ee:24:85:fb:07:91:e5:62:3e:f6:b6:
         f8:3c:cf:43
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUdEEJpc5R6laq6CXlX1kawq8/lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNjAxMDYyMDUzMDFaFw0yNzAxMDUyMDU4MDFaMDMxMTAvBgNV
BAMTKEE5MDJFRERCMUU5MkQ5QjAzRkM4N0JFOThDOUUzMUEyM0JBNTA1MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxuF9pfgtbipZ9itcbCNz8Vuy
C+IQ7asH/F4VS/xWgz/4gJAfxU0AfVtJC600llqBrNHrKCXsGe7bz5GNvTeyB/YN
MHsyzticoL9e8Znx+5B3bCcPGCRXupBkHJsT35OZo8U3ftEr4ETFFxvRwjcsLM65
OgOUSbf/9fovcaS4yOPwToY4piRu0tk8sfP+PSRKpWEpqlmTPCRKwU5AoBTWK4VQ
DH1Gpjqr8g0adfHq7PGvY2c+K5JeRDsRsOxXgOVq0VClsGSIncjONCDJEqxqbBhO
iQsWhqXaEje7JY6PgInpvJIyXJxh2PG5E/SenlaqWllPthlo/OG35WZUFKYBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqQLt2x6S2bA/yHvpjJ4xojulBSYwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMyMzAzMDJlMzEzMDM1MmUzMjMyMzQy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMyMzczMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyGng
MA0GCSqGSIb3DQEBCwUAA4IBAQDHpfRmwRlLS6dkT3qntvvTQ8HvART+uTKrgKvI
YIMgVs58bkz98UiiEJLuOnnlYiJCxv5UMnp8553zKbt/iXic1HEXIO+RAhB6MPOY
7DZVNPFTevhUjb45m/AINNFgyfjOgCx2NsLDM0RB5S7MdCujjQ615b/29xLUtjWt
mKIsDAfNa7RPUrxrl+u22b2WtRZHvUFfVaw6jvnJL7iKAJMUfHgdfsGGyr2p/JHr
KG/pyBaFQXI8Ygli7LY8NwsNcOGwRmwaNOo8Wz8O3dObD7vpY54q8uR683eMZROn
ATY6O32qDB0B6CvFsrX+JsDjsHss7iSF+weR5WI+9rb4PM9D
-----END CERTIFICATE-----
Generated at Tue Jan 13 01:38:32 2026 by rpki-client