This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          v43JOyHxXZa/Pk39ICejDLHPaumwfBbJC/450v9DV4s=
Subject key identifier:   53:0A:F9:96:EC:B4:BF:FF:9C:6C:0F:34:63:4B:C1:FA:EB:30:93:2E
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       40FAD252A5482853E573064AFCFE00520F17ED9D
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 06 Jan 2026 19:33:51 +0000
ROA not before:           Tue 06 Jan 2026 19:28:51 +0000
ROA not after:            Tue 05 Jan 2027 19:33:51 +0000
asID:                     271906
IP address blocks:        200.85.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:d2:52:a5:48:28:53:e5:73:06:4a:fc:fe:00:52:0f:17:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Jan  6 19:28:51 2026 GMT
            Not After : Jan  5 19:33:51 2027 GMT
        Subject: CN=530AF996ECB4BFFF9C6C0F34634BC1FAEB30932E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:c9:12:a7:61:b2:64:e7:57:6b:8e:22:85:
                    30:79:19:a6:4e:34:69:48:e1:a5:56:2f:e0:02:4c:
                    40:62:9f:5b:87:40:ad:a9:88:21:bc:1c:60:c0:8f:
                    bd:0c:5c:8e:ce:52:bf:85:9e:83:45:a9:42:ac:8c:
                    e0:ae:6c:c9:4b:fe:c2:33:0c:8d:fb:dc:56:12:76:
                    a0:22:f3:d8:03:cd:7e:d9:24:92:53:ae:2d:59:b9:
                    23:44:d5:36:9b:5b:58:e8:98:eb:f2:ec:9d:a0:07:
                    aa:c2:1d:b5:c6:7e:62:d2:96:04:bb:ff:db:27:01:
                    54:f3:e6:b8:ab:e6:ce:e9:a3:e6:3e:60:b9:7b:d7:
                    7f:a0:69:0f:c6:25:bd:95:a3:fc:5d:45:fb:ba:8d:
                    47:43:39:ec:eb:d4:ac:d4:78:b8:5e:fa:aa:92:7c:
                    e7:6b:48:ec:11:17:e7:67:51:57:a6:71:70:1b:32:
                    9a:ef:64:c5:fa:60:0f:2f:27:ce:6e:33:b3:c4:b8:
                    d3:0d:ae:ba:ba:cb:30:92:19:01:41:87:91:ff:66:
                    4f:ff:15:9f:66:4d:7f:ef:31:00:de:94:80:be:3c:
                    24:89:7d:9f:ea:27:c0:03:89:50:5d:7c:51:7a:5f:
                    b7:02:db:e9:a6:59:ea:4e:f9:0a:08:8a:b0:8b:1a:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:F9:96:EC:B4:BF:FF:9C:6C:0F:34:63:4B:C1:FA:EB:30:93:2E
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133312e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:81:a6:4e:0a:72:de:3d:1b:65:77:58:19:91:99:0c:31:5c:
         64:e7:9b:c0:26:94:78:7d:54:03:77:68:ba:6b:b1:04:79:7f:
         c2:61:25:cc:31:42:f4:97:af:88:34:36:33:05:8e:db:ab:23:
         b6:02:d5:a2:e8:a1:b8:af:3a:f1:94:5f:b5:ee:9b:f3:12:ac:
         60:d4:4e:de:55:38:be:4d:c5:1c:2a:b3:d5:c2:77:bc:9c:25:
         80:69:0a:b7:9c:01:24:1b:c5:26:9a:ec:34:5d:74:b0:60:f4:
         e1:68:9e:9e:b2:0a:eb:97:97:8c:b0:39:1f:f9:76:ac:cc:9d:
         f5:0b:66:90:6d:2f:97:ad:34:51:63:20:7f:75:e7:9d:e8:bd:
         9a:cb:e8:28:c6:70:1a:79:8a:9f:75:5a:b1:7b:e0:2a:e9:e9:
         f8:95:38:15:4f:4d:73:a1:5c:13:b4:c8:95:01:7d:9f:f6:fd:
         85:86:19:c1:85:45:4d:96:ae:62:1d:49:52:ce:37:ef:af:c1:
         19:91:dc:dd:6a:0d:a4:47:6a:7b:ae:9e:d0:dc:3d:86:93:0d:
         a1:22:5e:ac:94:a9:41:15:9d:bd:a2:b4:66:1f:67:7b:c6:af:
         28:b1:b2:41:d7:25:f9:6c:7d:c1:a3:80:25:fd:12:83:f1:af:
         4d:ec:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:39 2026 by rpki-client