This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa
File:                     3230302e372e362e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier:          soPbDR59sfV+Zo35sXGPumZP0qCC3mwjxvZK649uVh0=
Subject key identifier:   60:76:6E:5E:5A:8D:4C:C0:56:E1:CC:B5:76:F3:4E:1A:23:F2:1C:2D
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       66E83FA807265E07191FC8440729E1BA16BF192A
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa
Signing time:             Tue 06 Jan 2026 20:56:30 +0000
ROA not before:           Tue 06 Jan 2026 20:51:30 +0000
ROA not after:            Tue 05 Jan 2027 20:56:30 +0000
asID:                     27678
IP address blocks:        200.7.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e8:3f:a8:07:26:5e:07:19:1f:c8:44:07:29:e1:ba:16:bf:19:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Jan  6 20:51:30 2026 GMT
            Not After : Jan  5 20:56:30 2027 GMT
        Subject: CN=60766E5E5A8D4CC056E1CCB576F34E1A23F21C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:3d:fe:34:73:9f:89:9e:82:f3:d8:a5:01:
                    bf:63:a9:da:ff:d1:aa:f6:d2:2a:6b:9b:14:8a:b4:
                    38:fc:c5:15:06:3e:61:0b:79:fc:97:f4:fb:82:9b:
                    e4:51:a2:5b:4a:a0:92:42:14:49:82:b4:45:82:bb:
                    79:96:24:e5:c3:11:88:30:b6:a8:20:33:b9:46:b7:
                    35:fa:b1:a2:85:14:91:db:3e:f5:39:59:12:84:e4:
                    9a:2b:06:9d:b9:fb:65:70:c4:1d:65:32:cd:92:00:
                    84:52:f7:17:4e:d0:a7:83:0a:e6:82:59:a4:13:a8:
                    29:0d:73:e6:b9:58:b6:08:ed:a6:83:b2:b4:ee:d5:
                    a4:ca:24:0b:b2:48:9f:23:5f:92:15:46:2c:c1:16:
                    fc:96:64:78:fb:8a:eb:07:df:35:5f:e7:78:b3:de:
                    ec:41:97:e5:d3:5a:76:c7:2c:d5:38:2d:46:8f:33:
                    99:1d:db:2b:1e:81:e9:06:02:9b:9b:00:5f:69:ca:
                    9b:9f:79:f5:df:b9:a7:18:cd:0a:05:36:8f:7e:9c:
                    83:53:63:38:f2:2d:bc:6a:81:31:26:b6:1f:64:dd:
                    68:d1:24:e7:4c:31:d5:7e:45:b4:77:d7:96:26:8f:
                    16:d7:ae:4e:f8:b1:bc:78:cb:30:5f:ff:54:ab:9d:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:76:6E:5E:5A:8D:4C:C0:56:E1:CC:B5:76:F3:4E:1A:23:F2:1C:2D
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3230302e372e362e302f32332d3234203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:35:d1:26:1e:d1:3e:aa:b0:86:5c:69:f5:85:63:be:8d:
         ce:ee:2e:d5:27:59:b8:ae:d1:1f:b6:6f:64:08:90:72:81:68:
         24:71:6e:05:87:5d:64:c7:47:49:23:94:9f:82:df:37:a0:96:
         96:5e:d0:2e:9f:ca:11:13:83:96:23:7a:fc:e6:14:54:f4:b0:
         66:cb:d0:2b:be:59:37:c6:b1:12:a2:26:70:45:52:54:33:a4:
         f6:00:55:db:2b:33:6d:75:05:b8:68:9f:89:0f:c9:9a:df:ea:
         ce:9d:ed:db:1d:74:ff:68:68:98:c6:62:02:d8:82:c9:e3:cc:
         ca:67:a4:c4:c3:db:e2:67:73:c9:12:ce:e6:f8:92:50:ab:c0:
         97:54:6a:92:de:3a:46:09:85:4f:9a:a5:6b:a5:c5:36:f4:c6:
         c1:cf:d4:66:80:b6:f6:67:47:7f:35:d0:d3:44:35:05:70:4f:
         88:52:8e:6d:7d:fa:9d:a6:ef:df:22:14:63:cd:c9:05:52:af:
         90:03:6a:0f:d8:74:40:64:9f:b6:10:c6:23:88:59:58:4d:dc:
         5e:85:08:72:96:1e:c4:c7:95:28:b6:fc:00:f1:c5:dc:b0:50:
         a7:11:e9:30:64:85:f4:e2:20:59:1e:87:54:26:2f:63:7d:27:
         18:74:17:e3
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUZug/qAcmXgcZH8hEBynhuha/GSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RkMyNjQ2QTlGQzg5MjlCNjk0QUFBRTA0RDUyMDIz
QUE0NjgwQzAeFw0yNjAxMDYyMDUxMzBaFw0yNzAxMDUyMDU2MzBaMDMxMTAvBgNV
BAMTKDYwNzY2RTVFNUE4RDRDQzA1NkUxQ0NCNTc2RjM0RTFBMjNGMjFDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06j3+NHOfiZ6C89ilAb9jqdr/
0ar20iprmxSKtDj8xRUGPmELefyX9PuCm+RRoltKoJJCFEmCtEWCu3mWJOXDEYgw
tqggM7lGtzX6saKFFJHbPvU5WRKE5JorBp25+2VwxB1lMs2SAIRS9xdO0KeDCuaC
WaQTqCkNc+a5WLYI7aaDsrTu1aTKJAuySJ8jX5IVRizBFvyWZHj7iusH3zVf53iz
3uxBl+XTWnbHLNU4LUaPM5kd2ysegekGApubAF9pypufefXfuacYzQoFNo9+nINT
YzjyLbxqgTEmth9k3WjRJOdMMdV+RbR315YmjxbXrk74sbx4yzBf/1SrnZGvAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUYHZuXlqNTMBW4cy1dvNOGiPyHC0wHwYDVR0j
BBgwFoAU41/CZGqfyJKbaUqq4E1SAjqkaAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDBFMDU0NjIzQUM5MDQzQzBFMjk5QzJDOTBCMTQzODAz
QkQ4OTEyNUIwRTg2Mzg1NUM0OUMzQjczRjdCQUExLzAvRTM1RkMyNjQ2QTlGQzg5
MjlCNjk0QUFBRTA0RDUyMDIzQUE0NjgwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVGQzI2NDZBOUZDODkyOUI2
OTRBQUFFMDRENTIwMjNBQTQ2ODBDLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QwRTA1NDYyM0FDOTA0M0MwRTI5OUMyQzkwQjE0MzgwM0JEODkxMjVC
MEU4NjM4NTVDNDlDM0I3M0Y3QkFBMS8wLzMyMzAzMDJlMzcyZTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzIzNzM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgHBjANBgkqhkiG
9w0BAQsFAAOCAQEAMdQ10SYe0T6qsIZcafWFY76Nzu4u1SdZuK7RH7ZvZAiQcoFo
JHFuBYddZMdHSSOUn4LfN6CWll7QLp/KERODliN6/OYUVPSwZsvQK75ZN8axEqIm
cEVSVDOk9gBV2yszbXUFuGifiQ/Jmt/qzp3t2x10/2homMZiAtiCyePMymekxMPb
4mdzyRLO5viSUKvAl1Rqkt46RgmFT5qla6XFNvTGwc/UZoC29mdHfzXQ00Q1BXBP
iFKObX36nabv3yIUY83JBVKvkANqD9h0QGSfthDGI4hZWE3cXoUIcpYexMeVKLb8
APHF3LBQpxHpMGSF9OIgWR6HVCYvY30nGHQX4w==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:28 2026 by rpki-client