This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136312e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          MSQEQmIXlmaSLmamFbZrwAXJJfiRrWpB+V3mKqzg4Ts=
Subject key identifier:   8B:4F:95:1D:8E:71:7B:8C:F4:0B:A5:D7:80:5F:CE:6A:38:ED:47:27
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       3CA9C2A86939FFA55A31BDDDE21EF9084614F3F2
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:51 +0000
ROA not before:           Tue 06 Jan 2026 20:45:51 +0000
ROA not after:            Tue 05 Jan 2027 20:50:51 +0000
asID:                     22541
IP address blocks:        200.75.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:c2:a8:69:39:ff:a5:5a:31:bd:dd:e2:1e:f9:08:46:14:f3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:51 2026 GMT
            Not After : Jan  5 20:50:51 2027 GMT
        Subject: CN=8B4F951D8E717B8CF40BA5D7805FCE6A38ED4727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:c6:ce:6c:66:42:15:ce:5c:d8:f4:0c:be:
                    f9:9a:6b:03:de:ff:34:79:12:7f:83:a7:34:37:0a:
                    fd:f5:55:7c:08:4a:02:ba:8f:16:f7:74:b8:e5:c6:
                    6f:5f:62:23:83:37:81:27:80:55:12:b5:4f:ed:8c:
                    47:13:3e:c6:1a:8e:65:50:e0:46:9d:67:0a:da:47:
                    07:9a:a3:f2:5f:c6:f3:e3:f3:2a:ca:1d:62:2e:b3:
                    44:b8:ad:d2:bb:24:e8:8b:2d:cc:80:13:be:c7:be:
                    c3:ea:7b:23:d7:cf:10:2c:83:ac:b8:37:02:88:6b:
                    ba:cb:8b:e5:37:a7:36:53:df:b2:5c:b2:a6:9f:7b:
                    cc:f4:83:b4:92:e0:46:07:16:23:72:14:0f:b5:25:
                    61:05:e6:99:45:8b:07:dd:d5:18:ff:08:5f:c4:9f:
                    08:44:d8:a9:7f:c6:0d:e2:34:ac:0b:a4:9e:66:96:
                    00:98:a7:14:49:de:ee:55:3b:2c:cf:d3:17:9f:6b:
                    55:e5:03:53:cf:14:1e:e4:70:ba:1b:9c:e3:d2:db:
                    3f:6e:2c:b6:52:5c:63:90:95:2a:0e:d3:c7:8b:63:
                    11:de:c5:01:41:63:91:61:c1:c8:57:22:e4:d1:33:
                    30:a4:54:e0:ff:d0:75:fc:0a:aa:80:0b:fa:41:e9:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4F:95:1D:8E:71:7B:8C:F4:0B:A5:D7:80:5F:CE:6A:38:ED:47:27
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136312e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:c8:51:21:b1:8c:eb:8d:9c:43:17:cd:df:41:fe:b6:b7:
         a1:af:2c:10:d5:f6:9e:11:db:dd:23:88:f1:2c:9a:eb:42:8b:
         48:01:da:47:5d:27:fb:6d:bc:ae:70:42:67:cc:41:52:58:f0:
         bc:2b:d6:f1:99:ad:b8:0f:f3:24:57:ff:a2:8f:0f:51:97:9f:
         28:ea:1a:b6:50:3d:7b:b7:70:35:8b:6a:39:01:da:67:5a:eb:
         1c:9c:19:5f:e2:d1:5a:25:1e:9c:4e:13:56:6c:10:95:cd:dd:
         17:76:38:dc:fa:2e:76:ae:4e:91:44:63:9b:ff:eb:a5:ef:8d:
         3d:40:8f:49:11:95:43:05:0f:4c:38:04:ff:ad:04:e5:db:b6:
         9f:30:c8:52:f5:26:34:2e:13:16:f6:a8:01:5f:13:be:c0:ad:
         fb:7e:a3:1e:26:6c:de:3c:b0:41:74:0d:40:3c:3b:6a:67:19:
         f8:10:c7:ed:8f:40:49:5e:6e:05:04:51:76:b0:9f:17:b3:fb:
         b6:67:91:48:84:65:0b:ed:20:0e:c3:15:90:a3:ac:ea:32:5e:
         6c:48:c3:99:18:fa:bf:e7:9e:ea:8b:01:18:55:b7:86:66:68:
         50:7a:b8:b2:b6:8d:38:39:24:1a:25:a6:e6:bb:7e:8b:07:ec:
         12:5f:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:39:21 2026 by rpki-client