This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          eiBNYVNJl7yXYRNB+aDuDGmF0UsN++ukF7FPKRqA8hI=
Subject key identifier:   B6:A1:B3:91:28:EB:F9:5C:13:B4:71:2F:52:5A:DA:58:BD:BD:37:E2
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       58C1C3EF8D027F90EA4524A776DCBC08330F2875
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:31 +0000
ROA not before:           Tue 06 Jan 2026 19:39:31 +0000
ROA not after:            Tue 05 Jan 2027 19:44:31 +0000
asID:                     20015
IP address blocks:        200.71.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:c3:ef:8d:02:7f:90:ea:45:24:a7:76:dc:bc:08:33:0f:28:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:31 2026 GMT
            Not After : Jan  5 19:44:31 2027 GMT
        Subject: CN=B6A1B39128EBF95C13B4712F525ADA58BDBD37E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:1a:52:ce:66:8b:94:89:2b:dd:38:87:f6:
                    f4:61:b9:83:b6:a9:a6:2d:4d:76:ef:17:4b:7f:32:
                    db:17:ab:59:08:d0:cc:ee:14:d7:cd:76:1a:6a:a8:
                    9d:92:9c:d4:a9:ef:15:be:7f:2f:b6:73:45:c3:69:
                    d2:e8:e8:75:43:e4:cd:c2:96:82:19:74:11:7c:66:
                    4b:ce:4e:57:4f:7a:94:e2:95:f7:6c:51:6a:72:3f:
                    d6:8d:5a:e8:a4:dd:88:8f:f4:c9:fe:0a:0c:e9:b0:
                    70:10:a0:d6:46:c3:5a:bb:d8:65:1c:88:10:19:33:
                    cb:0d:0b:fb:49:54:a7:18:59:9c:3c:ee:f2:30:bc:
                    da:38:28:62:82:f4:a6:13:e7:30:f7:c0:29:83:f8:
                    a6:24:36:3c:02:8f:90:50:57:27:e3:97:63:dd:c9:
                    86:b7:b8:cc:cb:52:f3:21:9b:2f:15:c1:94:39:ac:
                    3f:fa:59:85:d0:5c:b8:39:05:1c:35:d8:60:5f:46:
                    eb:f8:91:a0:d1:29:ac:81:38:86:e5:f8:93:6c:b8:
                    51:3a:ea:69:71:b7:7a:72:54:0e:35:91:de:e2:54:
                    77:6d:9c:7d:d7:c5:62:0d:0d:b4:22:de:50:4a:d5:
                    68:ab:24:f7:f4:c6:0d:a6:8a:25:e1:75:a1:63:dd:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A1:B3:91:28:EB:F9:5C:13:B4:71:2F:52:5A:DA:58:BD:BD:37:E2
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:2a:c2:ea:aa:92:52:d8:85:fe:63:c3:74:36:cb:85:72:
         5f:32:f2:79:62:54:f3:8e:c8:85:2c:b9:db:0e:50:7a:19:de:
         88:6d:6e:99:0f:6c:86:7a:8f:70:c9:f4:b5:f4:05:70:19:e1:
         61:9e:3e:c7:ac:a3:2e:67:5b:4b:e0:d7:6f:83:7b:50:9e:84:
         65:9d:67:49:a0:ea:d6:3a:b9:1b:f9:f9:73:a4:f8:d1:45:8a:
         5d:41:c6:b7:76:cb:59:31:be:d2:6e:fe:15:29:e3:36:64:bc:
         d7:36:37:1b:5f:ec:24:f6:cf:42:c5:11:e6:db:42:c9:c5:04:
         c9:f4:4d:ff:2d:fd:88:33:45:28:f6:8f:7f:83:74:13:74:7f:
         df:87:4d:d5:5a:6e:ed:3b:9c:33:88:43:2d:99:c0:ae:b5:ce:
         8e:b6:94:3f:f0:d1:b0:5a:c5:06:11:97:ff:d6:1d:24:f6:5a:
         bd:0f:a1:d5:1c:a1:0d:4e:ee:89:58:1a:fb:a9:bc:e1:db:0d:
         d9:01:c2:25:bb:8c:47:69:49:3c:39:7f:9d:5f:f3:91:17:99:
         d6:c7:12:99:8e:0d:8d:05:6a:ed:4b:ad:1c:ee:48:76:20:bb:
         4b:71:3b:22:2a:69:04:e4:66:53:87:7a:dc:2a:4e:d1:bc:36:
         7d:5e:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:01:10 2026 by rpki-client