This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136322e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          5Te+GE0pEHXwRkZSjJyEwtCIshHcPJfIbMSdXRKlsjg=
Subject key identifier:   71:70:BD:61:46:74:B1:2D:C3:3E:E0:C5:39:47:53:20:9F:F1:E8:28
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       46BAC3466F5BBA8F93434498FA075E2C63ABBF07
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:49 +0000
ROA not before:           Tue 06 Jan 2026 20:45:49 +0000
ROA not after:            Tue 05 Jan 2027 20:50:49 +0000
asID:                     22541
IP address blocks:        200.75.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 23:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:c3:46:6f:5b:ba:8f:93:43:44:98:fa:07:5e:2c:63:ab:bf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:49 2026 GMT
            Not After : Jan  5 20:50:49 2027 GMT
        Subject: CN=7170BD614674B12DC33EE0C5394753209FF1E828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:4c:ef:0b:8a:5e:0d:e5:2b:d0:b8:54:b2:
                    4b:6b:04:c8:b7:8a:53:7a:a0:cf:7e:74:e9:a6:b4:
                    77:fe:19:aa:b4:58:c2:55:ed:d4:15:9d:91:b1:9a:
                    92:94:8a:95:5c:e3:cb:6b:da:5e:91:26:43:10:e8:
                    5c:ca:a3:9e:3d:0a:21:ba:13:29:82:d7:bb:15:40:
                    95:cf:a6:a8:dd:04:68:72:0a:9e:57:f8:58:0a:56:
                    f8:c9:7f:17:a6:ae:3d:c8:7f:ad:3f:fc:09:10:fb:
                    13:b8:9b:e2:60:3f:47:50:64:f3:7f:c6:7b:d7:79:
                    65:ab:dc:de:50:8d:0b:ae:1c:2d:36:34:6e:24:c9:
                    0a:ff:b4:ce:b4:a4:8e:3d:c1:95:f9:7e:b7:01:28:
                    9c:1b:62:fb:ca:f4:7d:c9:fe:91:dd:df:21:d4:a4:
                    a1:98:dd:c8:be:e1:9a:ad:f0:e4:de:7a:0d:31:86:
                    e9:72:08:a2:d9:86:e9:72:8f:9b:d5:14:0c:96:73:
                    c2:82:d7:66:7b:d7:f5:47:35:37:bc:e8:11:aa:06:
                    ba:14:11:12:ab:34:5d:80:00:1d:04:e0:b9:a6:25:
                    e7:26:2e:89:da:6c:2d:71:c0:51:31:fc:ae:37:f7:
                    98:87:55:f7:dc:1b:2b:ad:62:79:e0:0f:c8:d4:96:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:BD:61:46:74:B1:2D:C3:3E:E0:C5:39:47:53:20:9F:F1:E8:28
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136322e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:07:34:66:e6:6b:bf:f0:e7:39:4c:cf:42:de:1f:6e:12:
         4a:88:ce:d9:ae:d9:e2:e0:a2:a8:8e:ba:2b:e5:7c:2b:15:04:
         75:b1:88:7d:9c:d1:97:cb:83:69:3b:ee:30:4d:24:ef:75:4c:
         7a:e8:c5:94:9e:57:da:72:b0:bb:16:7e:7b:df:18:e6:c1:7f:
         45:12:84:09:af:32:3e:4a:5d:a9:f6:99:f8:9a:e3:8c:83:32:
         cc:90:9d:b5:19:89:50:d0:77:ac:d8:6f:b2:2e:fc:ac:56:64:
         e6:ca:20:79:8d:dc:fa:40:57:59:33:28:ee:2e:fc:0b:1c:55:
         3f:78:4b:84:82:dd:43:19:5c:71:13:18:8e:f6:24:73:0e:a8:
         93:36:b9:83:45:9a:e9:b1:92:ef:61:86:ec:f2:b2:0b:6c:b5:
         72:1f:7f:76:37:ed:cb:20:0f:ff:3f:a0:e5:aa:26:0e:c5:7a:
         2b:e6:6e:8a:97:04:21:21:af:96:e2:55:7f:0c:3d:99:da:27:
         76:01:50:e8:5c:48:ab:03:42:7d:a2:2b:bc:4d:28:87:5a:1c:
         fd:0d:5c:e2:99:a5:69:b9:86:5e:3b:0f:b9:25:11:a4:4c:fb:
         86:48:2b:fe:d1:a3:60:01:01:6d:c9:fc:22:bc:64:49:28:9f:
         82:fc:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:41:31 2026 by rpki-client