This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
File:                     3230302e38352e3232372e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          4CmNZOLGmTezKgB5b433k1RQgB+QMCD6OdH/pA3uUAQ=
Subject key identifier:   68:73:B1:C6:1F:97:1E:07:EF:76:F5:EC:47:51:AB:87:9D:89:0E:DC
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       7E0EA1333154A588A4B959CB588FCCBAA9E0488C
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 06 Jan 2026 18:58:44 +0000
ROA not before:           Tue 06 Jan 2026 18:53:44 +0000
ROA not after:            Tue 05 Jan 2027 18:58:44 +0000
asID:                     12684
IP address blocks:        200.85.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0e:a1:33:31:54:a5:88:a4:b9:59:cb:58:8f:cc:ba:a9:e0:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Jan  6 18:53:44 2026 GMT
            Not After : Jan  5 18:58:44 2027 GMT
        Subject: CN=6873B1C61F971E07EF76F5EC4751AB879D890EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:e5:10:a5:02:12:32:78:82:e0:ea:84:f7:
                    f3:dd:1f:ad:a4:5c:b5:52:12:82:dc:37:e5:a9:1d:
                    c1:4e:36:5c:bf:99:33:7a:fe:8f:87:92:c0:45:66:
                    9f:3f:01:ee:f7:a6:e7:5d:d0:70:80:5a:2c:17:ed:
                    eb:6a:e6:06:b2:ca:51:6a:93:9b:7a:a5:00:af:c4:
                    21:c6:b0:53:b1:ff:a2:43:e3:20:c7:dc:1c:b8:96:
                    8f:fc:bd:b6:ea:f4:fd:12:c3:90:35:d7:94:3c:97:
                    85:72:99:d3:2c:e6:85:3c:f4:7a:21:c9:09:0e:71:
                    a5:3e:76:4d:ad:f7:6e:5e:6a:b4:b6:d7:8e:f9:f4:
                    a4:6a:98:e5:c6:af:45:52:b7:19:d8:df:02:54:d4:
                    d8:f9:35:b4:04:ac:41:7c:70:67:aa:ca:3b:45:f6:
                    b0:8f:cb:ff:f9:8b:e8:cd:d4:1d:de:57:d9:db:ab:
                    cf:01:a8:3c:d2:7d:49:4d:f0:85:15:37:93:52:18:
                    63:3b:07:f2:35:1b:e7:bb:b3:f1:64:c2:c7:b1:89:
                    69:30:72:27:40:8d:a2:c4:69:99:bf:7d:e5:2f:64:
                    4c:79:a6:63:cf:b3:bb:b9:90:cb:1e:6d:c0:92:5f:
                    1c:de:4b:cb:48:63:dd:f1:eb:23:65:43:60:8f:1e:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:73:B1:C6:1F:97:1E:07:EF:76:F5:EC:47:51:AB:87:9D:89:0E:DC
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3230302e38352e3232372e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:fd:f4:10:5c:21:65:cc:fa:5e:2a:b3:d0:cf:fe:eb:12:
         0d:5c:af:dc:20:7b:f1:d4:4a:79:df:aa:4d:29:cc:82:94:26:
         ae:7c:e4:c4:f9:0e:11:3b:a4:ba:f7:49:93:69:30:28:a1:2c:
         d8:17:29:c1:2f:23:f3:93:60:93:8b:ee:22:05:37:47:dc:1b:
         bd:e2:6f:de:e9:79:47:4b:66:1f:3e:b8:ec:0e:3a:2c:af:af:
         a5:c2:10:5a:9b:6a:e5:22:24:73:29:fe:22:f3:22:1c:de:a2:
         16:0e:ec:ed:d6:bc:74:23:56:bc:b3:d6:e7:06:bb:16:0e:f5:
         7c:ba:c8:42:96:6f:7f:86:84:15:4b:ac:19:d4:ea:af:16:8a:
         63:c8:4d:9b:b4:7b:e7:b8:1b:a1:a8:29:de:22:22:00:f9:89:
         70:82:62:8c:a8:0b:9f:1c:23:c0:3b:a9:28:35:5f:b5:da:ca:
         8e:7b:07:99:ef:6b:6e:0c:6c:65:5b:1c:4e:d9:eb:13:b6:40:
         fe:3f:e3:f1:2a:32:21:0a:39:5b:ca:0f:f6:2d:14:49:7c:e9:
         d9:b0:90:6b:f0:76:7b:b6:2b:b7:3c:c3:b1:3d:3b:40:e5:ef:
         27:4a:a9:8d:e7:f5:1b:9e:19:ad:af:a8:9b:2a:4a:f3:51:84:
         d1:80:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:00 2026 by rpki-client