This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
File:                     3230302e31342e3130362e302f32342d3234203d3e203237373636.roa (raw, json)
Hash identifier:          B1ltUuab3IzzXvtvD7ZnE0ZrLhkQU2dkVPcPT5AzH0M=
Subject key identifier:   61:CC:93:19:A0:F9:3F:D7:5F:44:3B:69:32:ED:75:F3:21:44:14:07
Certificate issuer:       /CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
Certificate serial:       3F10AA4FFD1E04BEB81AB383AF9A255AF90B6D06
Authority key identifier: A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa
Signing time:             Tue 06 Jan 2026 20:51:03 +0000
ROA not before:           Tue 06 Jan 2026 20:46:03 +0000
ROA not after:            Tue 05 Jan 2027 20:51:03 +0000
asID:                     27766
IP address blocks:        200.14.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:aa:4f:fd:1e:04:be:b8:1a:b3:83:af:9a:25:5a:f9:0b:6d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9B097CDB61153249E534B2DD5C17C6D093C68E1
        Validity
            Not Before: Jan  6 20:46:03 2026 GMT
            Not After : Jan  5 20:51:03 2027 GMT
        Subject: CN=61CC9319A0F93FD75F443B6932ED75F321441407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:69:0d:0d:eb:22:4e:c1:9a:16:00:3a:ed:
                    55:86:fc:d1:93:bf:3f:89:1e:44:77:8b:ed:66:ac:
                    d0:42:3f:6a:bc:21:64:45:38:d3:be:f0:5a:fe:29:
                    22:81:21:7d:95:e6:cb:44:6c:61:1b:f5:84:0d:51:
                    3c:2a:99:d0:b4:77:88:c3:53:96:46:d9:c4:96:f8:
                    ab:28:8b:0f:da:45:b0:dc:d6:bc:4a:a6:f4:96:5e:
                    f6:9d:9e:8c:bb:21:83:de:bc:49:78:0b:0e:d8:71:
                    17:a2:c2:bc:9e:4d:90:b4:cb:30:3d:15:6b:fb:f5:
                    b8:85:05:9c:f3:56:4f:b9:30:f7:d2:9a:8a:eb:10:
                    77:3c:ef:f1:5a:e5:4b:ae:c3:45:ca:a1:22:70:83:
                    df:01:2d:28:f8:47:49:59:a8:25:cf:f6:3a:0d:05:
                    4f:d2:e3:22:bd:f4:35:20:8d:18:fe:2a:e7:63:f0:
                    9c:32:b0:41:cc:cf:7b:5a:20:05:f2:aa:b5:4b:66:
                    c6:98:2c:73:3b:67:5f:04:20:19:3b:b6:e2:99:d4:
                    1c:61:87:0d:ca:de:84:28:45:fe:ca:b7:8b:7a:f7:
                    89:5a:43:c5:55:f5:9f:19:b1:b4:84:c6:19:6a:10:
                    ab:d1:56:ba:00:dc:33:f2:b2:70:7a:53:94:11:b6:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:93:19:A0:F9:3F:D7:5F:44:3B:69:32:ED:75:F3:21:44:14:07
            X509v3 Authority Key Identifier:
                keyid:A9:B0:97:CD:B6:11:53:24:9E:53:4B:2D:D5:C1:7C:6D:09:3C:68:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9B097CDB61153249E534B2DD5C17C6D093C68E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/384B10DC707CAAB7883589F5865B843329942D81D9957537F55C8D6FE8AE84B0/0/3230302e31342e3130362e302f32342d3234203d3e203237373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:93:87:ec:e7:bc:21:c3:b6:2e:37:8e:b0:44:10:ff:48:
         a1:c8:8b:9b:1e:f0:e1:b9:ff:f1:08:ca:4b:73:a7:4e:e4:d9:
         34:e0:57:9d:da:da:46:3a:c3:e2:6c:25:9e:b1:51:e2:e0:89:
         60:78:47:5e:43:28:f8:c9:3a:6b:0d:06:ea:f0:a5:91:7f:b6:
         78:92:2d:1c:f9:db:d9:9c:7b:3c:e1:4e:a9:9e:e1:62:d4:df:
         cf:a2:5c:09:5c:d7:4b:dd:04:69:00:84:20:e9:b2:88:60:4a:
         67:57:06:97:bd:5d:a8:21:b0:e8:32:c4:f6:11:c7:08:5d:e1:
         da:7a:cc:9b:ac:63:0a:bf:32:f0:1a:a3:90:1c:4f:83:b8:72:
         4f:82:17:fd:77:ee:69:e2:4c:ef:48:7e:91:e7:05:bc:5b:60:
         d1:bd:3a:43:6e:0d:d1:55:ea:c2:12:6b:86:f9:ce:a9:eb:ba:
         8e:83:e3:7b:f9:73:06:bc:2b:bf:41:2c:1f:86:4d:54:6b:e6:
         17:62:6c:de:6d:ac:8a:70:8b:21:9d:c4:c8:25:4f:27:48:43:
         9b:ca:15:94:e2:b2:c5:4f:c3:1a:5c:02:9d:33:90:5d:47:72:
         a7:8f:06:b1:45:aa:b9:96:21:42:0d:db:dc:7f:88:19:43:df:
         57:02:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:29 2026 by rpki-client