This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136392e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          pv7K2dldURuMXI30M2b+5bnVV2uXUvwnnfgKamFWUuw=
Subject key identifier:   5B:DB:58:9A:56:A4:5E:11:4F:8E:90:86:D1:A7:03:21:15:B8:25:E2
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       05B7F0A52A743A371B71150F0C3F8EEB3060C80E
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:46 +0000
ROA not before:           Tue 06 Jan 2026 20:45:46 +0000
ROA not after:            Tue 05 Jan 2027 20:50:46 +0000
asID:                     22541
IP address blocks:        200.75.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b7:f0:a5:2a:74:3a:37:1b:71:15:0f:0c:3f:8e:eb:30:60:c8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:46 2026 GMT
            Not After : Jan  5 20:50:46 2027 GMT
        Subject: CN=5BDB589A56A45E114F8E9086D1A7032115B825E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:6f:5e:9c:48:fe:2a:9f:8f:a3:e1:af:0c:
                    77:2f:68:1f:96:68:66:9a:c0:01:66:0a:8c:79:f0:
                    cc:fe:b7:8b:4e:ba:de:92:9f:d3:f0:7b:e6:8f:f0:
                    1e:dc:10:40:24:62:2c:78:92:77:8d:3d:a6:ac:75:
                    1c:92:23:a0:a3:22:08:de:5d:0a:41:84:01:ea:78:
                    b0:f6:aa:e1:0a:bd:0f:5f:91:e0:1e:20:dc:0d:08:
                    51:3e:ed:9f:eb:11:0b:c2:6e:cf:96:54:17:d0:d0:
                    84:d3:ad:ee:ad:f7:73:61:06:6e:c7:b7:b2:01:e8:
                    38:5b:2d:78:d9:74:bc:60:9c:e5:44:a9:98:1a:a5:
                    b1:30:cc:af:94:9c:41:ee:ca:08:c4:ec:de:af:1b:
                    b7:87:7e:66:e3:ee:38:38:81:65:e1:08:ce:bd:2f:
                    45:8e:5e:59:74:d5:cf:7c:02:3e:e9:c8:18:b4:39:
                    ad:7a:bc:bc:9b:bf:77:c5:d0:a3:47:8b:a1:bd:66:
                    2c:c4:8f:87:70:8b:d4:2e:98:b3:3e:d6:4d:a7:dd:
                    fc:ae:d6:1c:67:fa:ba:ad:18:0d:9b:04:83:7d:fb:
                    2a:57:81:dc:58:a0:bb:33:d9:eb:94:8c:3d:f8:d4:
                    51:a2:a8:2d:e9:07:19:1e:47:50:b6:db:0a:a0:34:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:58:9A:56:A4:5E:11:4F:8E:90:86:D1:A7:03:21:15:B8:25:E2
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136392e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:87:a7:ae:cf:12:41:6a:08:f9:47:86:cc:e0:71:de:1a:
         bd:40:30:48:16:2b:8c:42:9e:10:96:17:86:05:51:0b:6a:a8:
         83:59:cb:44:99:25:2e:20:e8:ee:18:c6:46:7e:24:b8:9b:38:
         f1:80:5b:00:95:c3:f1:84:36:2d:84:0d:e1:31:e0:dd:4a:61:
         40:17:d1:62:11:dd:43:27:55:0c:f8:32:bf:07:ed:94:6a:6e:
         ce:73:f9:e7:e2:70:b9:b7:38:d5:4e:5a:cd:c1:60:c2:63:13:
         2f:77:c0:51:9b:f0:54:ed:51:3e:6d:29:6b:e3:81:ab:3a:6a:
         62:d9:35:96:58:e5:e2:30:49:23:70:67:a7:f3:76:3b:68:b5:
         b0:10:28:18:ba:f4:b7:01:fc:80:d7:d7:ac:f5:5a:b8:64:76:
         8e:b1:e0:dd:76:57:cc:c3:cd:57:ab:dc:0a:56:9d:92:d7:90:
         65:48:d9:00:10:11:2a:95:9e:4b:7d:be:7b:27:b2:1c:6e:25:
         a2:23:22:49:d1:89:d3:73:f8:f3:00:cb:f9:31:cf:c6:b8:a9:
         d0:2c:0e:07:ba:33:1a:96:6f:a5:9a:44:32:ed:84:80:dc:e7:
         02:95:a9:80:25:33:5e:f5:55:e1:01:f3:75:75:89:37:5f:c6:
         96:68:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:22:13 2026 by rpki-client