This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231392e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231392e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          SBP3IOgYBPVvKvvL4V5XdIMln5gjuhkzpviXkCtikic=
Subject key identifier:   36:EF:0D:89:C1:FD:A0:74:04:16:FF:72:D4:1B:74:12:0F:B8:AB:7C
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       48479A18AB067D6076D97DF5FA50D8281B00CA98
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231392e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:33 +0000
ROA not before:           Tue 06 Jan 2026 19:39:33 +0000
ROA not after:            Tue 05 Jan 2027 19:44:33 +0000
asID:                     20015
IP address blocks:        200.71.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:9a:18:ab:06:7d:60:76:d9:7d:f5:fa:50:d8:28:1b:00:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:33 2026 GMT
            Not After : Jan  5 19:44:33 2027 GMT
        Subject: CN=36EF0D89C1FDA0740416FF72D41B74120FB8AB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:19:41:90:f7:c7:d2:14:5a:9c:d4:ed:c5:
                    0e:c0:29:7b:b0:60:7f:a5:73:65:35:9c:57:58:8b:
                    d4:47:54:72:70:8c:d3:80:b7:2d:9a:1f:57:a2:f3:
                    d5:19:b3:53:8f:3a:3f:6a:ae:a2:24:aa:2a:dc:5e:
                    f9:5c:b9:9e:93:69:31:d4:25:a2:f4:90:97:54:8a:
                    01:0e:b8:36:63:26:ef:fd:5c:ec:6c:71:5e:03:2d:
                    bd:07:93:03:b7:01:18:7a:4b:5c:70:e7:1a:2f:3a:
                    bd:45:3e:8d:c0:5d:c6:63:b3:74:15:cb:c6:84:ca:
                    8a:d5:e1:74:69:8d:34:71:9a:0d:77:f2:15:42:a9:
                    8e:7e:d2:f3:b9:90:0b:64:17:dd:9b:18:d1:d4:de:
                    a0:27:d4:0a:89:2d:e5:0c:40:e3:a3:3b:c9:a6:ad:
                    a1:31:05:c0:ed:a5:83:eb:d2:b8:cf:50:e7:4b:38:
                    3f:cc:4a:dc:b5:d3:aa:5d:3f:a1:10:06:67:5e:f7:
                    32:f2:f2:58:5b:1a:cc:29:a3:ba:03:fe:ee:e5:2d:
                    d2:2d:dc:35:20:0e:94:b9:72:30:48:cd:15:75:fc:
                    7e:39:e9:6e:2f:88:b9:bb:04:1c:57:91:aa:c5:2a:
                    24:a5:fb:f9:22:f1:d4:ec:e4:0c:1c:f2:7d:d6:0e:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:0D:89:C1:FD:A0:74:04:16:FF:72:D4:1B:74:12:0F:B8:AB:7C
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231392e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:65:8f:e9:07:d8:90:dd:e4:07:c6:2d:0b:c5:3d:44:aa:3f:
         9f:88:9c:f4:7f:b8:5c:bf:de:81:da:17:f9:ba:2d:7c:da:59:
         07:0b:57:4b:54:0b:cc:3d:67:79:fa:9c:0d:c9:e3:e2:8c:6f:
         0c:2c:e8:78:1f:7c:58:a2:45:22:82:b1:f9:a0:6d:a4:c4:a0:
         18:57:de:0b:66:98:c3:36:1e:73:a4:1f:b1:cb:74:01:85:76:
         21:8e:5f:0a:3b:09:d8:d4:98:45:f1:6f:67:cc:84:73:f3:fd:
         4d:83:f8:b7:81:cd:c5:57:4e:78:55:de:69:5e:eb:89:d2:73:
         a7:27:bc:84:32:46:55:94:3f:1f:bf:cf:ab:8a:f3:e3:45:85:
         e9:e0:57:c6:ed:b7:1d:25:f5:d4:ca:2f:c5:90:bb:32:d5:b5:
         ef:07:1b:26:a9:53:f0:94:bb:e0:a6:cf:7a:30:2c:cf:01:d2:
         c0:45:9a:8a:c2:84:c3:63:85:37:a9:e9:0b:02:bb:b6:1a:19:
         a0:9e:1a:d3:5d:bb:6c:f6:c4:6f:5f:e9:a3:fc:fd:3e:01:e9:
         3e:bd:71:9c:97:50:81:e1:37:c7:14:c8:8a:7f:5b:dd:1e:ee:
         dc:ec:01:50:b5:09:f3:97:7e:d7:21:f0:00:2e:be:a6:80:86:
         1f:86:91:0c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSEeaGKsGfWB22X31+lDYKBsAypgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MzNaFw0yNzAxMDUxOTQ0MzNaMDMxMTAvBgNV
BAMTKDM2RUYwRDg5QzFGREEwNzQwNDE2RkY3MkQ0MUI3NDEyMEZCOEFCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbshlBkPfH0hRanNTtxQ7AKXuw
YH+lc2U1nFdYi9RHVHJwjNOAty2aH1ei89UZs1OPOj9qrqIkqircXvlcuZ6TaTHU
JaL0kJdUigEOuDZjJu/9XOxscV4DLb0HkwO3ARh6S1xw5xovOr1FPo3AXcZjs3QV
y8aEyorV4XRpjTRxmg138hVCqY5+0vO5kAtkF92bGNHU3qAn1AqJLeUMQOOjO8mm
raExBcDtpYPr0rjPUOdLOD/MSty106pdP6EQBmde9zLy8lhbGswpo7oD/u7lLdIt
3DUgDpS5cjBIzRV1/H456W4viLm7BBxXkarFKiSl+/ki8dTs5Awc8n3WDrP3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNu8NicH9oHQEFv9y1Bt0Eg+4q3wwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH2zAN
BgkqhkiG9w0BAQsFAAOCAQEAZ2WP6QfYkN3kB8YtC8U9RKo/n4ic9H+4XL/egdoX
+botfNpZBwtXS1QLzD1nefqcDcnj4oxvDCzoeB98WKJFIoKx+aBtpMSgGFfeC2aY
wzYec6Qfsct0AYV2IY5fCjsJ2NSYRfFvZ8yEc/P9TYP4t4HNxVdOeFXeaV7ridJz
pye8hDJGVZQ/H7/Pq4rz40WF6eBXxu23HSX11MovxZC7MtW17wcbJqlT8JS74KbP
ejAszwHSwEWaisKEw2OFN6npCwK7thoZoJ4a0127bPbEb1/po/z9PgHpPr1xnJdQ
geE3xxTIin9b3R7u3OwBULUJ85d+1yHwAC6+poCGH4aRDA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:45:39 2026 by rpki-client