This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          zNt2jg6ZUi+AXlb2T5v8p/6GjgD/Ifg+0NJzVjeEqC8=
Subject key identifier:   C1:AD:12:07:60:CD:18:24:C8:6D:92:81:84:10:B8:3E:D0:64:B6:25
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       3E113B3DFDE994AE169D80D0306A2B5EEF011B8B
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 06 Jan 2026 19:33:50 +0000
ROA not before:           Tue 06 Jan 2026 19:28:50 +0000
ROA not after:            Tue 05 Jan 2027 19:33:50 +0000
asID:                     271906
IP address blocks:        200.85.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:3b:3d:fd:e9:94:ae:16:9d:80:d0:30:6a:2b:5e:ef:01:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Jan  6 19:28:50 2026 GMT
            Not After : Jan  5 19:33:50 2027 GMT
        Subject: CN=C1AD120760CD1824C86D92818410B83ED064B625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:83:5c:1a:fd:66:bb:95:73:cd:da:19:14:
                    98:03:9b:58:a5:2e:29:4e:78:2d:d4:83:15:3c:22:
                    b2:25:d3:16:5c:12:69:70:e0:0e:2d:8f:da:c2:b8:
                    21:28:d7:cd:a7:54:dc:36:be:f8:83:75:72:2b:84:
                    d4:d3:ea:50:37:da:ba:09:3d:dc:ba:87:66:31:d6:
                    00:eb:de:55:ae:8e:85:d4:52:b2:c9:88:c7:e9:65:
                    01:5e:9c:c1:59:6c:c5:0a:75:72:02:43:ba:fe:ff:
                    96:05:a7:39:77:b8:d9:97:20:b6:a2:55:86:42:0e:
                    51:90:8f:21:78:f5:24:21:e5:82:e4:0e:56:b9:d2:
                    29:07:08:48:f7:26:42:16:49:e6:2b:e0:09:58:9c:
                    bd:6f:80:9e:e2:e1:6d:61:82:80:d5:a4:e7:08:d9:
                    4f:df:37:55:ff:de:ec:de:63:d1:9a:91:e4:43:54:
                    f0:aa:fe:5c:88:f7:eb:0a:c0:57:a8:b4:f0:7d:09:
                    4f:fa:7e:1b:1d:17:cd:3e:ca:8b:e3:bd:8e:47:91:
                    5f:0e:7f:69:74:76:a7:4f:26:ac:da:d7:d0:6e:24:
                    f0:97:cf:cb:30:25:b5:aa:03:25:8e:ec:ea:85:d3:
                    20:0e:31:a9:1b:da:db:ee:17:fa:f7:ab:a3:3d:8a:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AD:12:07:60:CD:18:24:C8:6D:92:81:84:10:B8:3E:D0:64:B6:25
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133302e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:d3:22:0a:54:cb:ea:9e:12:17:57:6f:1f:64:de:c3:86:
         e3:fa:44:bc:fd:11:b3:42:a0:29:5d:01:1f:45:89:1e:35:91:
         95:93:f7:77:c2:70:ef:f2:ba:9a:9c:00:f2:d5:8a:ab:6f:48:
         13:5c:11:6e:9c:26:fa:2f:2d:2d:14:9a:c1:38:6f:e3:25:69:
         e2:95:e5:bf:35:7e:32:57:bb:a8:1a:e2:02:a8:fa:87:1d:1b:
         d0:6c:13:4d:ff:6e:6d:92:eb:ee:31:74:aa:b1:e0:39:e6:c6:
         5c:8d:b0:3e:89:57:3d:4e:29:0b:44:1f:55:a5:b8:70:31:c0:
         7f:10:bf:0a:16:f9:29:1e:29:8f:d8:4d:b2:4e:ba:28:2d:1d:
         7f:03:a9:61:77:87:28:81:2c:73:f2:c7:d0:ae:45:0e:cf:a0:
         b4:b7:03:20:e7:8f:77:f4:56:aa:9f:76:5d:73:a8:96:c1:10:
         b1:56:c1:13:f3:a6:f8:86:d3:3d:46:e1:4d:d9:0c:c3:0a:a3:
         08:1f:ef:85:f3:67:7c:fb:08:b9:57:63:64:26:fa:45:5d:f4:
         06:60:bb:21:ff:7a:4a:51:9e:37:bc:84:b6:96:26:c3:c9:6e:
         55:f6:64:02:c9:11:02:ba:5b:ef:a4:f5:0f:e3:0a:18:44:d6:
         5f:c1:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:53 2026 by rpki-client