This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233372e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          HTagG1CcWkfjPtu1fmyOzBR/CwFeoOn98wzvPz+QKvA=
Subject key identifier:   AD:5B:5E:28:05:1E:03:06:21:4C:81:18:48:41:50:C6:FE:7C:9B:1C
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       0F711E8F53A2C57965BE4749F03783BF924E8160
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 06 Jan 2026 19:01:49 +0000
ROA not before:           Tue 06 Jan 2026 18:56:49 +0000
ROA not after:            Tue 05 Jan 2027 19:01:49 +0000
asID:                     27727
IP address blocks:        200.61.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 23:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:71:1e:8f:53:a2:c5:79:65:be:47:49:f0:37:83:bf:92:4e:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Jan  6 18:56:49 2026 GMT
            Not After : Jan  5 19:01:49 2027 GMT
        Subject: CN=AD5B5E28051E0306214C8118484150C6FE7C9B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:8f:ff:7e:a1:f8:da:5a:3d:d1:69:9e:5e:
                    9e:90:b0:e9:be:be:fe:f5:97:b3:6c:d2:cd:98:92:
                    90:d8:83:1e:7d:b7:c1:04:2d:d6:c5:0e:2d:55:30:
                    98:38:95:f7:65:10:6c:5d:b1:49:b6:71:0b:5c:94:
                    b3:1e:a3:d0:a2:0e:84:13:70:84:4e:73:62:db:03:
                    9f:3a:58:f9:d6:f0:a2:8b:c0:d1:2e:f0:34:f4:f2:
                    2a:66:db:45:8c:72:55:59:ec:bf:e7:04:09:56:09:
                    c1:d9:51:ad:2f:a3:6c:d6:3c:20:69:e4:a3:54:01:
                    fb:61:0f:72:d0:7f:68:6a:5a:66:e8:a1:c7:1d:1f:
                    3b:8e:77:5a:67:d6:ef:54:09:94:f9:5a:d9:6e:ad:
                    8c:ab:88:e8:d4:1d:58:39:11:13:30:f1:0c:4e:31:
                    e6:d7:1e:69:e4:3a:b6:56:45:81:87:b3:bb:eb:60:
                    f1:c8:dc:fd:2f:3e:36:b3:23:b4:22:c5:ae:81:01:
                    e4:14:fc:46:da:53:58:c9:bb:a5:e8:c4:91:29:f6:
                    97:e6:18:be:a4:d8:b5:a8:cb:e2:1c:f8:9e:22:ba:
                    c7:be:c5:07:e9:ae:6e:ee:09:3b:d2:4d:96:46:0d:
                    1f:a2:94:e6:9b:53:57:f2:c1:7c:82:b9:70:13:47:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:5E:28:05:1E:03:06:21:4C:81:18:48:41:50:C6:FE:7C:9B:1C
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233372e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:66:ea:0a:6d:69:30:e5:af:c2:29:3f:05:94:ed:00:f3:6d:
         ca:a9:43:56:96:e3:57:90:1a:84:a4:a6:fc:52:1e:7c:57:9b:
         86:21:04:01:79:c7:7b:e0:11:01:d2:8e:f5:53:88:44:f2:50:
         2b:4f:c2:79:37:fc:25:c9:9c:93:b2:8e:05:ea:db:4f:27:97:
         1d:fc:3b:d0:4f:ce:62:e6:74:40:84:da:97:df:40:a0:5d:2a:
         4f:fc:c1:91:a3:bf:c4:bb:b3:6e:45:c3:bd:d7:78:17:22:93:
         49:3f:4f:3d:52:ac:58:57:98:61:74:9e:69:32:e1:2b:63:10:
         3b:78:8b:48:c2:ba:92:0b:56:08:09:5d:03:81:5f:1c:d0:96:
         73:2a:8a:51:64:da:93:1a:52:97:7f:b2:53:67:be:33:8f:62:
         61:59:09:fe:94:95:1e:e9:27:1a:aa:b2:62:c1:14:1e:71:88:
         2b:c9:96:3b:81:f5:0a:03:53:5b:5e:7a:b1:91:f3:5e:14:31:
         b5:b8:ac:c8:99:31:7b:e2:c9:b6:83:44:74:62:89:eb:a9:14:
         69:cd:a3:b4:ed:d7:8c:15:40:ed:68:54:56:b9:86:ed:af:d4:
         3c:99:b7:80:f4:b1:82:c7:e2:40:a2:25:37:f5:fb:f5:08:aa:
         9f:7d:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 02:50:14 2026 by rpki-client