This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230302e35382e36342e302f31392d3234203d3e203237383339.roa
File:                     3230302e35382e36342e302f31392d3234203d3e203237383339.roa (raw, json)
Hash identifier:          iASgGH5I7RBOkD5OS2GIZAJ4q96L1Rzvz3IFqWuD9sI=
Subject key identifier:   14:92:BA:0E:26:99:9B:AD:80:36:71:82:AD:A0:9F:84:CF:0A:A9:E0
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       1A5FE69EBEE01B40C385ACFACD7266E7DD0420C9
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230302e35382e36342e302f31392d3234203d3e203237383339.roa
Signing time:             Tue 06 Jan 2026 19:13:06 +0000
ROA not before:           Tue 06 Jan 2026 19:08:06 +0000
ROA not after:            Tue 05 Jan 2027 19:13:06 +0000
asID:                     27839
IP address blocks:        200.58.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:e6:9e:be:e0:1b:40:c3:85:ac:fa:cd:72:66:e7:dd:04:20:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Jan  6 19:08:06 2026 GMT
            Not After : Jan  5 19:13:06 2027 GMT
        Subject: CN=1492BA0E26999BAD80367182ADA09F84CF0AA9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:55:2e:bc:7a:5a:f0:d0:0e:6d:bb:26:73:
                    c6:0e:62:9e:71:99:73:62:c5:10:9e:b9:7d:cf:b2:
                    13:52:56:91:46:39:72:a3:6e:63:b7:56:83:f2:04:
                    b7:71:3d:ba:a7:2d:58:8c:1c:59:87:c8:6d:e3:66:
                    cf:ad:4d:26:9a:b0:79:09:5d:71:85:54:49:e0:55:
                    7c:01:93:a8:31:f2:c0:59:a8:d2:a1:4d:7d:eb:45:
                    6d:c2:4e:91:8c:4f:eb:36:67:d8:99:3d:33:a9:34:
                    9f:67:5c:b9:dd:31:e5:f1:df:2d:88:6c:96:b9:d9:
                    3f:05:a5:aa:92:a4:f4:cd:d8:c4:18:04:87:46:02:
                    7c:a2:79:4e:02:55:37:a4:86:e8:f1:d3:a0:df:12:
                    83:5d:93:fb:7b:98:8a:3b:31:51:ea:67:3b:e3:6e:
                    f7:ef:60:71:65:2a:22:b7:e5:c8:b1:7e:c0:48:4b:
                    50:18:3b:f9:b0:25:fd:f9:14:e2:38:c7:48:6a:13:
                    80:89:50:53:60:af:e0:f6:c5:7c:b8:e2:e6:e2:c7:
                    ff:2a:99:99:3f:70:ce:7d:41:b9:5f:f2:44:40:df:
                    07:ed:68:6e:8a:72:9b:b1:87:00:b1:05:b0:23:dc:
                    e6:f7:fa:af:d3:cb:d9:f7:2e:46:24:32:e2:c9:cd:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:92:BA:0E:26:99:9B:AD:80:36:71:82:AD:A0:9F:84:CF:0A:A9:E0
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3230302e35382e36342e302f31392d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:15:87:63:26:55:57:6c:27:62:cc:53:e4:20:dd:3c:ff:
         c7:bd:a2:1a:e6:9e:95:b7:13:b4:60:46:bc:92:26:cf:e8:15:
         4c:de:e6:a8:23:0d:b9:f8:79:3f:6e:94:7d:65:e9:f4:02:72:
         f1:00:51:ff:e7:03:3f:62:27:dd:07:20:ba:02:26:01:c3:e1:
         b5:87:06:b4:b4:ea:16:64:36:62:01:d0:54:6c:73:56:11:e7:
         d2:9a:d1:81:ee:b4:f1:f7:09:32:fe:02:18:c4:29:c4:4f:23:
         7a:02:29:14:53:9a:e1:a8:a1:a2:a5:6e:01:a1:7e:54:30:c0:
         9d:28:38:ec:25:a0:bb:10:a1:a5:5b:53:ae:b9:80:1a:c6:8e:
         4a:f1:7e:b6:ca:29:0e:93:3a:6b:88:a1:bb:61:9a:af:58:ae:
         9d:c7:03:1a:04:20:17:28:a1:6e:f3:8d:50:48:b3:1c:c6:35:
         11:19:a0:8f:79:76:d7:9b:65:1f:26:69:ac:98:f8:52:be:6a:
         e3:26:b8:40:ce:03:27:53:f5:ee:c3:77:00:49:7a:b5:8a:08:
         1e:ef:c8:34:a9:51:70:e9:93:69:32:cf:94:94:37:3c:db:47:
         21:ae:cd:16:ca:f7:e3:5d:7f:21:91:78:cc:53:cc:be:04:92:
         d2:d7:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:20:15 2026 by rpki-client