This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa
File:                     3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          NnOWZjedy9n4vqkBg+XTYpgyovIDoCrfzWKF4Ru1jhM=
Subject key identifier:   9F:5B:4D:9E:E0:7F:E1:87:19:8E:E8:10:5A:B9:AD:4A:F9:C9:40:53
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       74E29FAEE8DCAAE2BA83CC038708710C18E5DE7A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:09 +0000
ROA not before:           Tue 06 Jan 2026 20:48:09 +0000
ROA not after:            Tue 05 Jan 2027 20:53:09 +0000
asID:                     27773
IP address blocks:        200.106.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e2:9f:ae:e8:dc:aa:e2:ba:83:cc:03:87:08:71:0c:18:e5:de:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:09 2026 GMT
            Not After : Jan  5 20:53:09 2027 GMT
        Subject: CN=9F5B4D9EE07FE187198EE8105AB9AD4AF9C94053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:3d:92:88:d7:cc:0a:8b:e3:19:df:82:40:
                    78:cc:28:f3:5d:e6:f6:6f:d8:8c:c0:a0:7b:a0:5f:
                    d6:c1:a5:21:89:f1:91:70:3d:12:1b:9f:db:07:ea:
                    1d:e0:85:cb:9d:88:7f:48:37:63:96:e3:97:d9:3c:
                    19:0e:08:01:1e:64:9c:42:69:b8:e8:07:e7:b9:12:
                    25:e5:11:0a:dd:c8:80:ba:ed:0b:25:9e:fc:54:30:
                    29:d5:4c:9b:22:58:a9:0e:0d:72:8d:a9:73:60:7d:
                    3a:0f:eb:22:44:97:82:d7:f8:07:86:86:5a:ad:1c:
                    ae:17:22:2b:47:b9:10:49:9d:77:8d:7d:f5:8f:27:
                    07:0e:0e:15:3e:1c:e3:9a:08:ea:96:27:b1:37:d3:
                    2e:8d:dc:ab:bc:f1:93:04:18:6b:7a:6c:df:aa:20:
                    e2:f8:1b:0c:1e:28:e4:61:10:2e:c5:76:e0:b7:c2:
                    0a:2a:4f:99:bf:b6:13:11:de:6d:09:fb:91:27:49:
                    61:f0:f6:58:1a:a3:cf:92:07:9e:ab:3a:a9:84:a5:
                    dc:cf:ce:ae:e3:e4:80:d5:eb:29:cc:34:08:85:17:
                    fc:c2:ac:7c:dd:65:08:6e:49:d4:5c:99:ed:83:df:
                    33:c1:d3:ef:d6:bf:8e:26:0e:d9:88:fb:77:b4:60:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:4D:9E:E0:7F:E1:87:19:8E:E8:10:5A:B9:AD:4A:F9:C9:40:53
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3233342e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:ce:54:0a:c2:a0:08:d6:8f:c0:20:b6:47:8e:bb:6f:4c:
         43:66:ce:0e:8c:11:ef:81:58:f0:c8:e2:01:01:b5:fb:e4:f8:
         ac:55:fc:ca:bb:64:cc:bd:9e:c8:cc:cc:49:db:60:45:13:fb:
         2f:4d:ba:54:f1:6a:cf:da:72:0e:f8:81:4c:ff:59:89:de:8d:
         6a:66:b3:e3:e5:5f:a6:e5:a1:2d:29:6a:20:db:a0:f1:d0:2a:
         8e:4a:e9:6f:f3:04:3e:ea:7e:92:a8:20:ba:31:96:e4:f0:2e:
         b0:ca:8c:d3:dc:df:47:4b:a5:12:e7:98:94:24:d1:f6:28:d2:
         65:78:41:92:5f:ce:25:bd:e1:25:80:da:18:0f:90:16:85:5e:
         be:24:80:25:a6:49:ed:1e:91:a2:77:97:4e:5f:f2:1f:36:01:
         d3:de:f6:43:e8:32:7c:50:da:5b:bf:7a:a9:11:69:36:23:83:
         f2:ba:3d:63:1b:ad:9a:1a:80:bb:7c:52:3a:7c:af:08:59:27:
         39:8f:30:03:0b:34:74:28:48:8c:21:21:bb:bd:c3:e3:a1:c5:
         48:97:6d:55:a4:ce:9e:88:e2:ba:de:6e:10:d4:fa:41:1e:57:
         94:8e:f1:ec:72:02:1e:77:d5:7a:f0:6a:fb:bd:28:fd:93:96:
         d6:86:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:47 2026 by rpki-client