This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
File:                     3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa (raw, json)
Hash identifier:          TKArQVNv+kkECVCxqqqU/rc8WRWr9PFZfkvCwA9T1WY=
Subject key identifier:   45:A1:2E:49:F9:C0:F2:1E:5E:31:E1:54:A6:88:6D:97:BC:05:BC:A0
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       4A124B586FCE140A8778840D784E7B1F305C3D10
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa
Signing time:             Tue 06 Jan 2026 19:16:26 +0000
ROA not before:           Tue 06 Jan 2026 19:11:26 +0000
ROA not after:            Tue 05 Jan 2027 19:16:26 +0000
asID:                     28058
IP address blocks:        200.105.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:12:4b:58:6f:ce:14:0a:87:78:84:0d:78:4e:7b:1f:30:5c:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Jan  6 19:11:26 2026 GMT
            Not After : Jan  5 19:16:26 2027 GMT
        Subject: CN=45A12E49F9C0F21E5E31E154A6886D97BC05BCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:7c:60:97:0c:ff:cc:f5:d8:4c:53:8e:0c:
                    59:8b:77:93:86:8d:bf:f3:2e:7e:17:8f:7b:48:b5:
                    b0:75:43:5d:38:dd:5b:26:a4:a6:50:60:13:72:0d:
                    c5:d7:f2:57:9b:97:ff:da:ec:72:0e:8b:f7:11:ac:
                    0d:5b:39:06:be:8d:16:4f:9e:27:0e:8b:33:7e:35:
                    4f:46:f6:35:d8:6c:97:63:b8:5f:1c:ad:ee:3b:15:
                    4b:a2:9b:2a:7e:41:f7:d3:72:1c:7f:c0:b6:3c:7f:
                    ee:e0:ed:77:db:e6:d9:8c:31:05:0e:6a:0b:a6:c4:
                    52:fe:2a:5c:40:4c:ae:15:84:ae:93:61:8d:3f:4f:
                    53:4c:7f:44:e5:63:dc:e7:e7:e6:7e:e6:0d:0b:b4:
                    7f:5e:5b:b5:ba:5c:49:ae:ed:9d:62:9e:ff:e1:0c:
                    2c:ef:b2:21:77:de:57:68:f6:02:b7:22:b4:95:cf:
                    c4:ba:4f:f1:e1:87:dd:e5:88:95:6c:2e:1b:9f:8c:
                    5f:b2:61:21:eb:8a:70:7b:d1:5d:93:a4:54:4d:dd:
                    87:f2:09:ec:12:dd:64:63:7b:0a:e8:95:31:ae:06:
                    7c:9c:da:58:94:7b:cb:51:7d:29:c9:e1:79:48:22:
                    78:83:6c:e4:23:04:d0:ec:18:56:db:bb:8d:4f:b0:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:2E:49:F9:C0:F2:1E:5E:31:E1:54:A6:88:6D:97:BC:05:BC:A0
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3230302e3130352e3131322e302f32312d3234203d3e203238303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.105.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:96:f5:5f:25:9f:b3:2c:6f:70:7a:50:fa:6e:29:aa:df:
         98:23:a6:e6:1a:02:d6:18:da:fc:08:a2:83:0a:16:ba:00:3f:
         45:78:b6:d6:96:f4:89:53:26:34:b2:a1:27:d7:d4:9b:d0:65:
         b1:6e:ed:55:18:cb:ed:60:62:17:61:64:8a:1b:e5:8d:79:8e:
         21:bc:d9:cb:f3:48:c8:11:8d:14:1c:07:dd:55:1b:f5:db:db:
         a2:f1:dc:d4:fc:1f:96:cb:1a:ca:0c:12:5d:83:46:ce:e4:b9:
         11:6b:4d:f1:83:42:d5:fe:bc:a8:d7:53:c8:5c:39:a2:b9:7a:
         20:2f:1d:d1:05:68:57:43:0f:70:5e:a1:df:57:a3:bb:97:d8:
         8b:66:73:a0:e6:4f:f9:f1:42:25:70:5c:64:f9:6b:84:f2:3d:
         c6:c3:75:af:e8:9c:ed:6f:27:39:07:32:76:5d:f1:9e:47:e8:
         a8:02:bb:9e:66:c3:d9:0e:1a:cd:5d:5c:78:40:2b:2b:cc:d9:
         aa:be:af:71:e8:7a:d8:50:35:01:92:3c:7d:1f:e4:48:b5:f9:
         86:bc:56:0b:d3:be:4b:cc:e9:14:23:1b:86:f6:cb:d2:b9:7b:
         9a:e0:5f:02:41:1e:b8:c9:0d:06:36:25:9d:f8:03:39:bb:dc:
         cb:12:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:54 2026 by rpki-client