This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231312e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          Iwd1GiOe7yqtxgPbxFwnzXpiVhFU5IAW4RPzYlf/C/0=
Subject key identifier:   C5:81:1A:29:24:EB:8E:3A:FB:1E:90:8C:C9:52:C1:A1:23:D2:5E:0C
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       65DFD8F3B1EEC054F6AA1438F4ABF924C99AC5D6
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:31 +0000
ROA not before:           Tue 06 Jan 2026 19:39:31 +0000
ROA not after:            Tue 05 Jan 2027 19:44:31 +0000
asID:                     20015
IP address blocks:        200.71.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:df:d8:f3:b1:ee:c0:54:f6:aa:14:38:f4:ab:f9:24:c9:9a:c5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:31 2026 GMT
            Not After : Jan  5 19:44:31 2027 GMT
        Subject: CN=C5811A2924EB8E3AFB1E908CC952C1A123D25E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:3e:d3:68:57:25:d0:dd:b0:f0:fd:03:49:
                    3a:47:34:7e:f3:c8:61:17:07:88:40:a4:75:63:ab:
                    5a:4a:13:e8:0d:34:85:89:37:f6:40:03:ca:df:a6:
                    61:01:9a:8d:44:34:f5:bb:a3:0e:a3:e4:f9:c9:f1:
                    db:b6:7d:d5:45:69:9e:9d:c6:e2:cc:26:1f:77:3e:
                    c5:16:f3:65:de:d3:3e:a4:65:a3:be:04:fe:35:7b:
                    fb:9d:67:f4:eb:ff:dd:e3:bf:c9:bb:98:33:c7:d2:
                    3d:9b:3f:ef:ea:9d:4c:24:01:74:04:a4:12:53:54:
                    4e:b1:be:3c:40:12:b0:83:31:2d:65:44:2a:47:9a:
                    75:a1:0a:e5:d2:a4:31:71:1b:63:fc:7b:80:20:8b:
                    fc:d6:c5:a4:02:12:c3:e2:0c:d7:41:6f:0a:f4:a9:
                    41:11:a1:21:a5:52:a7:d9:1b:4c:f4:54:b5:fb:77:
                    ea:be:38:e6:d1:c0:82:81:f8:9a:05:e1:d0:0c:56:
                    2c:a1:47:5f:51:8e:b6:a9:f3:ef:79:cd:52:84:df:
                    bc:c8:8b:c8:04:f9:76:22:51:c6:20:ad:2a:e7:a5:
                    f6:a3:5f:e1:f7:7b:7f:a3:c7:ce:57:7f:7b:98:f7:
                    80:b6:8d:50:40:b3:4e:3c:56:d3:c6:94:49:79:82:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:1A:29:24:EB:8E:3A:FB:1E:90:8C:C9:52:C1:A1:23:D2:5E:0C
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231312e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8b:af:1f:d8:76:51:59:2c:ef:3d:57:ef:2b:cb:9b:10:dd:
         51:d9:04:0f:65:c7:a9:ea:26:a7:e0:44:40:24:bc:c9:17:8d:
         41:91:3d:b1:f1:b9:24:3b:37:fc:1c:48:b3:1d:ce:00:59:dd:
         b0:0b:aa:6d:92:7d:3d:5a:63:08:50:26:13:bc:75:ec:00:0a:
         69:d6:9b:19:d8:46:76:6d:14:93:ff:5a:19:de:f7:62:a9:3b:
         d9:1b:fe:6a:04:2b:27:2c:5f:27:7b:83:46:25:ac:b4:42:60:
         2c:15:10:cb:25:7c:38:67:03:ab:3a:6b:86:7a:1e:30:d1:c5:
         0f:15:e4:e7:38:77:44:e8:9a:67:d4:46:a1:06:28:75:3d:18:
         a1:02:bf:8c:1f:f2:90:e3:c3:1a:4e:e3:11:be:a6:ab:7d:d5:
         cb:ef:e7:50:8c:f6:9e:da:3a:01:95:24:69:fb:57:d4:6a:4c:
         93:52:b9:a5:53:d5:fa:75:aa:cb:20:e6:de:00:24:f1:24:98:
         16:a6:b5:a4:c3:8b:c1:3b:f2:22:94:61:d2:d3:6b:0f:4f:33:
         b5:49:24:af:36:ac:50:e4:64:90:97:17:c7:6b:1b:39:d0:62:
         a5:89:74:8a:80:2e:3c:53:a7:65:6d:23:b4:32:4d:85:66:60:
         65:2e:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:00:19 2026 by rpki-client