This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
File:                     3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa (raw, json)
Hash identifier:          /paVtCJZYjVGSpTZNWAEdzvOlceXcX7CMx7lRTNpkTY=
Subject key identifier:   B8:0F:02:F9:FD:95:B5:4B:8D:E3:1D:EF:AF:4F:80:5A:60:30:96:28
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       7423D93B7D69057D6823A2E3CA5A874C5EC90638
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa
Signing time:             Tue 06 Jan 2026 20:57:59 +0000
ROA not before:           Tue 06 Jan 2026 20:52:59 +0000
ROA not after:            Tue 05 Jan 2027 20:57:59 +0000
asID:                     22724
IP address blocks:        200.105.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:23:d9:3b:7d:69:05:7d:68:23:a2:e3:ca:5a:87:4c:5e:c9:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Jan  6 20:52:59 2026 GMT
            Not After : Jan  5 20:57:59 2027 GMT
        Subject: CN=B80F02F9FD95B54B8DE31DEFAF4F805A60309628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:b7:92:a1:1d:e2:d0:90:4b:7c:0d:a3:7c:
                    ee:60:86:fd:dc:3d:80:e3:ff:bb:bd:15:c4:c9:f4:
                    89:70:15:4b:15:98:57:ad:50:de:39:8d:24:ff:12:
                    70:be:54:04:eb:f4:0b:ae:f2:75:78:6b:fa:b1:9f:
                    76:b7:51:66:29:14:8b:e7:e7:04:2b:e7:b0:74:18:
                    de:68:9f:d3:7d:81:9f:20:7c:33:30:36:3a:dc:22:
                    db:ac:7a:6e:e4:7a:98:cf:aa:11:dc:0f:64:ac:60:
                    73:5d:27:e1:69:95:e2:f6:81:04:6f:36:f1:8e:f3:
                    5a:16:eb:77:6b:2e:51:9b:a5:f5:61:50:2d:ba:ca:
                    0f:3d:55:0c:1d:6b:65:e2:67:b0:16:61:6f:ad:1d:
                    d8:ee:a5:5a:e3:2f:f7:6f:07:f4:89:7a:81:e5:47:
                    90:08:6a:61:5d:74:7d:49:d2:c2:a0:ce:37:c9:20:
                    ea:f7:19:17:74:4b:95:4d:08:29:fd:3b:57:11:e6:
                    15:7d:8f:08:46:41:9a:76:24:21:1c:05:51:20:74:
                    76:11:6e:f7:7a:0b:bd:00:ce:3f:b5:07:ea:41:5a:
                    1d:e0:f8:c3:3c:81:16:e6:31:58:00:47:ca:8b:0d:
                    79:14:0e:a5:1e:3f:28:44:da:c1:2c:9a:b9:e1:94:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:02:F9:FD:95:B5:4B:8D:E3:1D:EF:AF:4F:80:5A:60:30:96:28
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3230302e3130352e3234302e302f32302d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:18:04:fd:ba:f0:3e:d0:e6:85:d4:dc:03:c6:5f:26:cc:
         13:5b:13:46:0e:c4:8a:b2:11:9f:0c:c2:4d:51:ce:92:75:1d:
         a8:98:9b:60:a6:d7:5d:50:b4:20:d0:67:aa:0c:b1:17:5b:6b:
         87:4a:eb:24:d1:fd:aa:6b:de:f1:20:1f:ff:40:c5:c1:55:77:
         fb:50:be:4e:44:e7:ce:5f:47:5c:ad:35:9e:e4:90:bc:76:0b:
         b4:ac:af:c8:6e:c1:ee:ce:11:8a:49:f1:ed:89:f1:2f:49:0b:
         bb:f1:be:58:d2:fe:bb:08:ee:c2:73:30:73:ca:44:bc:83:9d:
         ec:b0:f0:a9:62:95:a3:7b:23:28:d2:62:df:10:c6:6a:b4:90:
         4f:f0:ff:18:81:fe:b5:e6:9f:bf:50:cf:3d:65:e1:65:ec:af:
         c1:53:7b:a7:ab:31:54:44:ed:12:dc:dc:bf:f7:27:52:de:ca:
         38:7e:61:3c:9b:9c:62:1b:9e:9c:b3:53:53:1e:5c:2e:ac:eb:
         7f:ad:16:c3:2a:56:3e:75:ff:b7:27:d4:88:f2:e4:37:97:47:
         16:51:0b:0e:ae:1f:f6:0e:4f:5c:ce:47:33:73:5c:00:0a:f9:
         a8:18:fc:43:f0:e4:24:01:ba:d2:f6:27:53:f8:f1:d5:b7:11:
         a3:09:05:99
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdCPZO31pBX1oI6LjylqHTF7JBjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNjAxMDYyMDUyNTlaFw0yNzAxMDUyMDU3NTlaMDMxMTAvBgNV
BAMTKEI4MEYwMkY5RkQ5NUI1NEI4REUzMURFRkFGNEY4MDVBNjAzMDk2MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqreSoR3i0JBLfA2jfO5ghv3c
PYDj/7u9FcTJ9IlwFUsVmFetUN45jST/EnC+VATr9Auu8nV4a/qxn3a3UWYpFIvn
5wQr57B0GN5on9N9gZ8gfDMwNjrcItusem7kepjPqhHcD2SsYHNdJ+FpleL2gQRv
NvGO81oW63drLlGbpfVhUC26yg89VQwda2XiZ7AWYW+tHdjupVrjL/dvB/SJeoHl
R5AIamFddH1J0sKgzjfJIOr3GRd0S5VNCCn9O1cR5hV9jwhGQZp2JCEcBVEgdHYR
bvd6C70Azj+1B+pBWh3g+MM8gRbmMVgAR8qLDXkUDqUePyhE2sEsmrnhlODhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuA8C+f2VtUuN4x3vr0+AWmAwligwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMyMzAzMDJlMzEzMDM1MmUzMjM0MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMyMzczMjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyGnw
MA0GCSqGSIb3DQEBCwUAA4IBAQCq+BgE/brwPtDmhdTcA8ZfJswTWxNGDsSKshGf
DMJNUc6SdR2omJtgptddULQg0GeqDLEXW2uHSusk0f2qa97xIB//QMXBVXf7UL5O
ROfOX0dcrTWe5JC8dgu0rK/IbsHuzhGKSfHtifEvSQu78b5Y0v67CO7CczBzykS8
g53ssPCpYpWjeyMo0mLfEMZqtJBP8P8Ygf615p+/UM89ZeFl7K/BU3unqzFURO0S
3Ny/9ydS3so4fmE8m5xiG56cs1NTHlwurOt/rRbDKlY+df+3J9SI8uQ3l0cWUQsO
rh/2Dk9czkczc1wACvmoGPxD8OQkAbrS9idT+PHVtxGjCQWZ
-----END CERTIFICATE-----
Generated at Mon Jan 12 07:16:01 2026 by rpki-client