This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          1blEr6NBQG+hGGRT4gRODrSrtqW+LwutW8uf7hA+Ue0=
Subject key identifier:   7E:40:51:04:D0:70:B4:C0:20:07:72:D6:E0:35:8D:90:38:8D:F5:1D
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       621453499DC02485CC9407A09C57B0A9DE1844E4
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:29 +0000
ROA not before:           Tue 06 Jan 2026 19:39:29 +0000
ROA not after:            Tue 05 Jan 2027 19:44:29 +0000
asID:                     20015
IP address blocks:        200.71.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:53:49:9d:c0:24:85:cc:94:07:a0:9c:57:b0:a9:de:18:44:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:29 2026 GMT
            Not After : Jan  5 19:44:29 2027 GMT
        Subject: CN=7E405104D070B4C0200772D6E0358D90388DF51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2c:de:12:22:7c:46:97:2b:c9:59:73:ea:5f:
                    3e:6a:f0:a0:f7:14:58:06:49:b2:20:6f:75:9a:4d:
                    18:e8:78:db:77:77:a1:99:f9:80:44:e1:3d:83:df:
                    a1:f5:bc:b3:a2:62:7e:e1:86:bf:11:ea:b7:45:a1:
                    de:7c:7d:60:bc:d5:f0:fb:b7:64:26:58:b2:d5:08:
                    36:ab:6b:47:65:c9:0f:4b:b9:3f:e7:26:50:3a:bc:
                    c5:37:65:fe:8b:ee:e5:02:e8:c5:39:d6:7a:22:ec:
                    db:96:04:7c:1f:12:53:da:0a:ea:a2:8c:0b:5b:07:
                    3e:da:0b:f0:ef:26:22:8b:22:69:e5:0f:c4:8c:80:
                    08:2a:ee:66:68:f6:db:51:bc:48:03:30:21:35:d3:
                    52:a7:ae:d3:c4:33:94:b2:5c:ab:ee:fc:a4:ad:e8:
                    3d:72:1e:23:6e:c6:30:17:ce:2e:52:67:c9:4e:22:
                    6c:12:8b:1b:19:b1:94:8c:2f:34:81:50:7c:3f:b4:
                    d3:96:f7:5e:df:e8:fb:6d:7e:d6:c4:aa:f5:06:b3:
                    81:41:b2:cb:37:dd:fc:b9:ca:2e:07:3d:d1:68:45:
                    8d:3a:9b:d9:20:d9:94:a2:45:7c:96:a5:6d:45:43:
                    df:12:3e:ad:f2:5d:66:23:e0:f4:f4:44:c1:8e:ea:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:51:04:D0:70:B4:C0:20:07:72:D6:E0:35:8D:90:38:8D:F5:1D
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:23:a1:33:c5:e4:b9:07:3d:4e:fd:e5:ca:dc:ef:c0:4e:
         51:ff:c7:13:22:e3:e8:83:9e:bc:0b:8c:3e:60:f0:30:31:48:
         be:8b:45:ed:c2:a2:f0:e5:f5:28:59:6e:a5:b2:6b:dc:25:38:
         a2:03:3e:93:f5:b6:62:47:49:f7:17:b2:ca:e8:d1:33:25:66:
         9e:53:55:af:d9:44:7c:c2:99:53:33:10:0a:15:41:bf:70:4d:
         1c:90:7f:f5:81:ed:c3:3f:aa:cd:89:93:b8:b9:5e:81:b9:15:
         38:01:87:96:37:de:f2:7e:6c:fc:e1:83:79:fd:e9:ab:4e:17:
         8c:9f:28:73:fc:77:a6:c9:42:44:63:a6:24:e8:a7:75:80:1b:
         a3:1a:0b:7f:b7:88:c0:d1:6e:85:e0:c7:6b:ef:7b:b5:3f:1d:
         9b:70:62:a6:ce:ff:cd:92:8e:37:36:01:1c:26:33:6c:26:fd:
         4c:d8:84:82:88:2d:09:2c:f0:7a:d1:e5:55:d8:a6:9c:d9:28:
         8e:22:a2:b7:d5:d9:0a:f9:74:83:54:72:90:48:ac:ec:f4:52:
         a5:42:81:5a:7c:27:c1:a8:b2:f1:5b:b2:4b:01:9e:d5:55:3f:
         30:b0:cf:f2:5f:5e:d0:64:a6:c8:91:9b:a6:f9:c5:f8:bd:4a:
         5a:1c:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:14:10 2026 by rpki-client