This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          f/ESPPjQRiPhGM9+kAxsU5juHvuwliAT6IhdUN8igC4=
Subject key identifier:   53:20:35:8C:F3:55:91:05:E5:F8:AC:37:FD:E9:3B:C2:91:D3:CC:9A
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       04D89324757921FAD4A41F1A2F8F39143477F20C
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:34 +0000
ROA not before:           Tue 06 Jan 2026 19:39:34 +0000
ROA not after:            Tue 05 Jan 2027 19:44:34 +0000
asID:                     20015
IP address blocks:        200.71.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d8:93:24:75:79:21:fa:d4:a4:1f:1a:2f:8f:39:14:34:77:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:34 2026 GMT
            Not After : Jan  5 19:44:34 2027 GMT
        Subject: CN=5320358CF3559105E5F8AC37FDE93BC291D3CC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5d:8c:80:40:a8:42:b8:d0:e9:45:a5:24:49:
                    39:1c:c4:0a:06:9e:10:94:bc:e2:4a:b2:ff:7f:ea:
                    5f:a4:1c:54:88:74:2d:0f:bb:e7:e9:71:1d:dc:27:
                    72:e3:9e:e5:b8:89:6e:16:a7:c1:5d:99:b8:fa:04:
                    f0:60:7d:e6:33:15:e2:dc:75:d1:04:58:25:f8:90:
                    18:88:2a:97:a1:b7:80:af:5a:f7:cd:49:9f:83:1b:
                    22:73:d1:8d:7e:f8:c4:59:f6:26:a8:51:98:8b:f3:
                    fc:68:c7:cc:b8:61:14:ed:e3:13:b4:c4:20:e3:49:
                    46:ca:f9:93:ae:01:19:9b:a9:0e:d1:18:d2:25:1a:
                    be:05:c9:c4:2e:3d:ca:3f:e7:29:10:2a:91:23:db:
                    9a:2a:ef:1c:1d:ce:16:54:a6:04:8a:2c:e1:bc:2a:
                    3f:1d:a6:01:55:a2:7d:9b:eb:d0:87:28:21:7f:c6:
                    52:d9:27:ff:e7:a2:71:8b:f5:03:30:1a:df:8d:51:
                    3e:62:b9:3d:83:6d:a2:35:69:7d:ce:bc:53:07:41:
                    2e:51:b8:8f:14:a2:71:dc:7d:72:3c:84:ed:b1:3b:
                    2b:b7:04:41:d6:ae:23:c4:5a:44:c5:a5:92:23:a0:
                    96:10:8f:c8:7d:eb:b2:df:1e:18:48:2b:60:14:89:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:35:8C:F3:55:91:05:E5:F8:AC:37:FD:E9:3B:C2:91:D3:CC:9A
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:91:e5:42:b4:2c:9d:4e:8f:b6:fb:38:d8:e3:2c:07:b5:a4:
         32:df:5d:eb:16:49:82:c4:3d:f1:31:75:67:bf:5e:7e:ac:ee:
         67:13:19:54:37:a0:bb:c2:b7:99:9e:a5:e7:85:67:f4:c7:2e:
         a0:8c:d5:63:2f:8b:b8:cc:e0:7b:23:ab:42:12:f2:c8:64:0e:
         34:c1:0e:1e:67:f4:91:d8:7f:4a:99:20:42:89:2c:2b:b7:e4:
         bd:86:d0:e6:24:ab:a6:43:fc:64:06:81:a3:52:1f:bc:4b:58:
         90:45:2f:41:ce:8e:55:16:7f:01:ef:93:be:94:d4:2d:c2:ae:
         f2:88:44:a0:4c:45:f6:2e:5f:8c:98:30:96:16:43:b6:4d:cc:
         ec:2b:e8:6b:81:00:8d:ab:33:8b:75:b8:b8:df:fc:79:3c:8a:
         ff:e8:f7:2f:d9:a2:3c:dd:7e:4d:6a:3c:01:4e:bf:42:98:49:
         32:55:5d:bf:c3:fb:ea:13:8e:39:bb:40:4d:a8:f3:d5:96:b6:
         bd:56:cd:d6:8d:d9:83:d2:d1:0f:21:ef:0f:c8:0e:bf:5f:1f:
         90:0b:0e:45:c6:27:20:80:6b:65:ce:db:e6:bd:14:17:51:f0:
         e5:ae:10:d3:2d:bb:5b:35:d1:57:b5:82:47:47:63:a7:94:74:
         20:22:87:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBNiTJHV5IfrUpB8aL485FDR38gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MzRaFw0yNzAxMDUxOTQ0MzRaMDMxMTAvBgNV
BAMTKDUzMjAzNThDRjM1NTkxMDVFNUY4QUMzN0ZERTkzQkMyOTFEM0NDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyXYyAQKhCuNDpRaUkSTkcxAoG
nhCUvOJKsv9/6l+kHFSIdC0Pu+fpcR3cJ3LjnuW4iW4Wp8Fdmbj6BPBgfeYzFeLc
ddEEWCX4kBiIKpeht4CvWvfNSZ+DGyJz0Y1++MRZ9iaoUZiL8/xox8y4YRTt4xO0
xCDjSUbK+ZOuARmbqQ7RGNIlGr4FycQuPco/5ykQKpEj25oq7xwdzhZUpgSKLOG8
Kj8dpgFVon2b69CHKCF/xlLZJ//nonGL9QMwGt+NUT5iuT2DbaI1aX3OvFMHQS5R
uI8UonHcfXI8hO2xOyu3BEHWriPEWkTFpZIjoJYQj8h967LfHhhIK2AUiUaTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUUyA1jPNVkQXl+Kw3/ek7wpHTzJowHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhHzDAN
BgkqhkiG9w0BAQsFAAOCAQEAgZHlQrQsnU6Ptvs42OMsB7WkMt9d6xZJgsQ98TF1
Z79efqzuZxMZVDegu8K3mZ6l54Vn9McuoIzVYy+LuMzgeyOrQhLyyGQONMEOHmf0
kdh/SpkgQoksK7fkvYbQ5iSrpkP8ZAaBo1IfvEtYkEUvQc6OVRZ/Ae+TvpTULcKu
8ohEoExF9i5fjJgwlhZDtk3M7Cvoa4EAjaszi3W4uN/8eTyK/+j3L9miPN1+TWo8
AU6/QphJMlVdv8P76hOOObtATajz1Za2vVbN1o3Zg9LRDyHvD8gOv18fkAsORcYn
IIBrZc7b5r0UF1Hw5a4Q0y27WzXRV7WCR0djp5R0ICKHag==
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:02 2026 by rpki-client