This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
File:                     3230302e38312e3135322e302f32312d3234203d3e203237383531.roa (raw, json)
Hash identifier:          u5lyXyPeRhsgkNTrCp2ojD9EjKhX4bbahRURw9bSGdU=
Subject key identifier:   3F:95:83:7D:D9:54:E8:CC:42:22:CA:0F:8E:F3:60:94:75:CC:40:99
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       799D3D925677FC59EA43D6FF029AC0937706CC21
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa
Signing time:             Tue 06 Jan 2026 19:41:27 +0000
ROA not before:           Tue 06 Jan 2026 19:36:27 +0000
ROA not after:            Tue 05 Jan 2027 19:41:27 +0000
asID:                     27851
IP address blocks:        200.81.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9d:3d:92:56:77:fc:59:ea:43:d6:ff:02:9a:c0:93:77:06:cc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Jan  6 19:36:27 2026 GMT
            Not After : Jan  5 19:41:27 2027 GMT
        Subject: CN=3F95837DD954E8CC4222CA0F8EF3609475CC4099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:56:61:44:23:fc:80:01:10:b5:a5:d3:d5:80:
                    62:65:be:d3:b8:55:11:0a:ca:4b:4a:1c:cf:27:f8:
                    63:69:eb:09:0e:72:12:c2:d0:f7:80:07:fe:d4:05:
                    c6:0e:ec:10:bd:56:4c:da:00:a2:d7:f7:2b:12:f2:
                    76:2d:ca:e5:6a:23:fd:40:c2:39:a2:3e:fb:a9:ee:
                    23:49:51:94:6b:2b:20:c0:ef:31:0c:25:f6:ba:0c:
                    cd:ae:a9:96:ec:c1:24:ab:de:ab:7e:8a:b2:a7:07:
                    75:52:82:91:33:ee:a6:21:6d:38:09:3c:95:cb:49:
                    46:d4:ba:86:bb:35:01:1f:0c:eb:85:e1:b4:7c:a3:
                    0b:dd:39:0b:07:7b:a1:f0:fc:62:b1:78:52:78:82:
                    8b:95:b9:a9:55:27:b6:f1:f8:58:1b:2a:46:ef:2c:
                    a2:ee:7d:12:76:55:b3:3e:08:60:84:88:10:16:0b:
                    a1:a1:80:ee:4a:0a:44:38:8e:23:6b:b6:36:09:f3:
                    05:a7:10:f6:3d:19:ad:17:ed:00:86:bc:85:10:c1:
                    58:18:9f:14:9a:3d:ae:99:cf:9a:25:32:b6:79:8a:
                    9c:b8:71:4b:7e:d0:50:95:e2:e4:28:b3:70:ee:35:
                    62:b6:b4:b1:5b:4c:3d:70:ce:90:81:09:37:f2:0f:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:83:7D:D9:54:E8:CC:42:22:CA:0F:8E:F3:60:94:75:CC:40:99
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3230302e38312e3135322e302f32312d3234203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:d4:c6:c0:d4:d1:bc:81:24:3e:cb:87:25:b7:0e:9e:d1:
         54:79:4a:f9:1e:61:f2:44:72:50:4f:0d:31:d1:23:bd:c2:31:
         8b:62:12:b7:e0:1b:e3:61:c2:d8:5f:74:3a:04:3d:c6:bf:fd:
         4c:8c:fd:30:fc:5f:4a:21:23:72:30:c5:15:1f:75:ad:26:5e:
         26:a8:ce:38:82:ee:a1:95:68:6f:e2:a1:f0:fd:4b:ce:d5:8b:
         9c:42:c4:56:a4:eb:e1:1f:c9:98:af:2f:32:64:d1:ca:0c:d0:
         0a:d7:49:9e:3a:40:64:0c:bd:dc:ce:a1:26:7c:f8:df:d8:93:
         11:36:a5:a3:e5:03:98:4e:47:4b:ca:4d:76:af:02:68:44:3f:
         54:18:88:b1:22:c1:6b:ad:80:d7:68:9e:5d:c3:d2:2a:e9:63:
         c1:0f:c9:a6:db:85:73:0d:a7:0b:f8:5a:20:f9:9d:b0:24:ac:
         df:55:36:6e:46:aa:c9:1c:3d:51:7a:d2:ad:56:3e:ab:00:8f:
         a6:6b:11:95:75:37:7f:31:2e:03:a9:62:65:2d:6d:f7:ce:53:
         b3:bc:86:f2:e6:e0:e5:2a:de:56:f9:eb:3a:c4:a5:c1:27:f1:
         dc:56:b2:f9:d2:bf:6c:ca:26:e5:8b:4d:8c:f9:20:49:f0:5e:
         bb:4f:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:38:47 2026 by rpki-client