This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa
File:                     3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa (raw, json)
Hash identifier:          jpgFMfAG0zw4nXjQv5oF1UmBbGj5MmdgsGRJFBprZlo=
Subject key identifier:   FE:32:D8:2F:F9:14:DF:5A:59:4C:46:78:27:8D:7D:EE:63:5F:70:57
Certificate issuer:       /CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
Certificate serial:       030B360F426D7AF03A594091DC8D5C2BE7FFC494
Authority key identifier: AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa
Signing time:             Tue 06 Jan 2026 19:33:54 +0000
ROA not before:           Tue 06 Jan 2026 19:28:54 +0000
ROA not after:            Tue 05 Jan 2027 19:33:54 +0000
asID:                     271906
IP address blocks:        200.85.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:36:0f:42:6d:7a:f0:3a:59:40:91:dc:8d:5c:2b:e7:ff:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3
        Validity
            Not Before: Jan  6 19:28:54 2026 GMT
            Not After : Jan  5 19:33:54 2027 GMT
        Subject: CN=FE32D82FF914DF5A594C4678278D7DEE635F7057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:f2:56:16:cf:cd:21:f5:58:b7:0e:3a:fa:
                    d2:0e:06:06:75:3d:89:d8:33:1e:b0:34:16:55:38:
                    e2:2a:4a:87:0a:6b:4a:fd:0e:6f:66:96:90:83:96:
                    c6:50:cd:37:d3:11:fb:0d:7c:fa:a8:52:f5:3f:cd:
                    39:b5:ce:12:9f:b2:e9:84:4a:15:d7:73:5c:fd:99:
                    df:3d:72:ac:5d:b0:8a:ea:76:ee:9e:7a:19:70:34:
                    d5:11:98:31:da:41:72:ac:29:3e:b2:db:52:fe:85:
                    1c:17:fb:bb:43:91:8b:97:88:ec:af:a2:02:e9:8e:
                    24:5a:85:4d:89:1e:79:8e:83:d0:5d:9b:d1:8f:35:
                    8a:92:e0:04:e8:e3:76:60:1d:3c:c9:4d:4c:7b:94:
                    f8:16:64:b6:f2:d2:ee:5c:62:a4:95:84:0c:e8:54:
                    43:5a:dc:41:29:7a:9b:a1:81:65:22:ed:c4:07:2c:
                    9d:f4:b0:bf:ef:4d:7f:70:61:30:2b:c9:82:34:53:
                    e5:bd:2f:45:ff:5d:30:f5:37:cf:c1:fd:74:6e:a6:
                    7b:f4:16:58:84:79:0d:97:42:46:f0:ab:33:ba:4b:
                    67:ae:2a:6d:50:81:9a:ad:b9:78:00:56:04:c0:4d:
                    16:bf:d0:8a:32:59:d0:13:32:de:5b:81:24:3b:20:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:32:D8:2F:F9:14:DF:5A:59:4C:46:78:27:8D:7D:EE:63:5F:70:57
            X509v3 Authority Key Identifier:
                keyid:AC:68:ED:FE:9E:FC:97:5A:F8:92:AC:92:B6:AE:19:14:A3:B2:D0:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC68EDFE9EFC975AF892AC92B6AE1914A3B2D0D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8FB9B50BD6F6BDB905D4F5295E39E7770BEABC2471F2B45989B36198CFAF67/0/3230302e38352e3133342e302f32342d3234203d3e20323731393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:b2:39:c9:24:dd:34:46:1b:98:f6:38:22:9d:ca:f0:12:
         a3:16:0c:84:bd:16:99:4a:78:b9:bd:a0:b7:42:01:37:3e:f3:
         ea:ad:5e:67:aa:06:38:22:ba:3e:19:2a:43:fd:77:79:05:c5:
         06:84:aa:7d:c4:dc:8c:3f:bd:dd:5e:b7:95:3f:20:61:b5:8d:
         af:2c:22:42:cb:ab:26:da:72:e4:9d:70:28:1a:e2:75:99:1e:
         70:d6:d2:98:24:9c:f8:7f:14:c7:57:bb:11:19:f0:69:42:01:
         a5:98:ba:4f:0c:71:27:d6:74:d3:11:3d:1f:69:89:81:4c:aa:
         55:9f:83:32:97:21:74:ff:aa:c1:55:2e:9a:e7:55:ef:60:fa:
         5a:d7:9a:a9:70:c9:42:42:ab:3d:d8:e8:52:3c:d7:b8:a7:9f:
         2a:6a:62:52:6d:f6:f9:5b:15:0b:9d:dc:76:4a:45:0b:0b:9a:
         21:b5:9f:50:46:ec:c8:c8:9e:1f:cf:a4:61:ca:ff:c3:e8:41:
         9e:6f:2a:f0:61:d0:7e:8f:3f:35:fa:70:f6:6e:b1:7f:d4:7d:
         92:ce:49:87:6b:23:ee:ee:10:fc:92:19:e9:c2:13:e8:c5:9b:
         74:39:d3:ca:ef:a3:61:42:c3:07:7f:8b:3c:89:c1:1e:d1:c5:
         30:60:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:09 2026 by rpki-client