This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32342d3234203d3e203238343538.roa
File:                     3230372e3234382e3131342e302f32342d3234203d3e203238343538.roa (raw, json)
Hash identifier:          QBQ7VRE0Vb3bfCwIuQg8QgaXXXv3c1gqbaIh3kq+uUQ=
Subject key identifier:   27:35:5B:C8:CC:0F:27:D4:C9:B2:BC:1C:CB:DF:BC:63:99:91:AF:DC
Certificate issuer:       /CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
Certificate serial:       620216FDE4DFFCE34C7824D71B6AE134A516030A
Authority key identifier: 03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32342d3234203d3e203238343538.roa
Signing time:             Tue 06 Jan 2026 19:40:05 +0000
ROA not before:           Tue 06 Jan 2026 19:35:05 +0000
ROA not after:            Tue 05 Jan 2027 19:40:05 +0000
asID:                     28458
IP address blocks:        207.248.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:02:16:fd:e4:df:fc:e3:4c:78:24:d7:1b:6a:e1:34:a5:16:03:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9
        Validity
            Not Before: Jan  6 19:35:05 2026 GMT
            Not After : Jan  5 19:40:05 2027 GMT
        Subject: CN=27355BC8CC0F27D4C9B2BC1CCBDFBC639991AFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:d5:93:eb:28:71:d4:af:c9:fe:91:4b:d4:
                    b9:f2:ee:23:b9:27:dc:ad:3f:11:dc:ec:c9:f3:9c:
                    74:d3:e0:69:0e:19:c8:97:8e:75:fc:69:2d:ff:5f:
                    ba:1d:0c:ad:54:bc:e0:a7:84:ea:98:d1:76:df:ef:
                    a4:32:90:47:21:7d:12:84:43:8b:6a:20:7c:85:47:
                    42:a7:83:da:04:88:9f:8c:61:04:64:dc:b1:47:e5:
                    2c:4a:b9:40:0a:2d:46:9e:80:aa:50:6a:79:38:ef:
                    95:f5:85:c5:fb:5c:4a:d3:b4:5c:80:9e:91:ce:f0:
                    dd:62:7e:bf:59:d7:74:d2:30:35:12:ba:2b:d2:5e:
                    ed:39:57:8d:98:81:36:42:bb:8a:7c:58:1e:e5:c3:
                    23:06:13:27:48:fe:31:1e:ba:98:41:76:3d:b4:c9:
                    34:31:22:59:6e:8d:27:6f:98:12:e0:9d:2a:e6:78:
                    77:bc:3f:f7:f9:b6:b7:7d:5a:72:6b:39:83:46:5c:
                    db:09:29:47:1a:2b:b4:62:c8:f5:b0:1c:38:94:ab:
                    3f:21:ca:53:68:24:91:d7:58:e8:6f:37:6a:0b:dc:
                    49:c2:0e:c7:3d:a9:d5:4c:53:eb:f8:e5:7f:8e:f6:
                    1f:ea:3f:e2:a3:7e:b4:76:8d:d8:a4:a4:b0:6f:ff:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:5B:C8:CC:0F:27:D4:C9:B2:BC:1C:CB:DF:BC:63:99:91:AF:DC
            X509v3 Authority Key Identifier:
                keyid:03:C9:CC:4E:E8:A5:1F:F2:8A:7D:58:11:EF:AB:0F:0C:70:5F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03C9CC4EE8A51FF28A7D5811EFAB0F0C705F0DC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6699EC6C7E3534FBE5924BD4393A1CCB4806FA2E55AECBEBB96E8CDE9DA995F8/0/3230372e3234382e3131342e302f32342d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:01:70:de:4f:91:f1:9f:a2:4d:f3:07:29:f3:03:b3:ef:a6:
         b0:7a:8c:88:12:73:c4:42:93:3a:78:cb:fa:d8:ae:67:aa:99:
         d2:0e:66:d5:9f:87:cf:c7:fa:e7:7e:cc:2d:de:22:af:b1:8a:
         5b:a3:86:71:6c:7e:9e:26:c1:ac:fa:c1:81:7b:46:5b:d6:cb:
         3c:c0:59:5d:d8:81:76:d5:06:0c:62:66:89:96:37:fd:f1:92:
         4e:bd:2e:27:18:df:d2:3c:ff:28:22:2f:63:43:54:56:e0:05:
         d1:08:6d:34:55:f8:ff:e7:a5:ff:2a:4a:8a:4f:1b:e3:e0:bc:
         f4:f2:43:0b:1d:8d:92:9d:e9:df:d6:1b:b5:82:15:79:3e:59:
         82:c0:4f:33:5c:a9:61:bc:55:e3:88:4c:a4:f7:98:87:80:27:
         a3:30:bb:bc:af:1a:39:c4:60:d1:c1:64:52:a6:34:4e:5e:37:
         a9:42:4c:cf:1b:ae:23:8b:ef:4d:30:84:5d:48:90:f0:92:02:
         13:b3:93:c0:04:78:d5:9f:03:2d:27:72:5e:8a:63:0f:b1:28:
         ae:a1:48:32:37:b3:ba:17:4a:35:df:3e:d8:cc:a5:66:fa:39:
         c8:3f:98:0b:3f:00:5c:c9:7d:0b:00:3e:f7:9e:0e:52:fe:a8:
         b1:33:81:72
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYgIW/eTf/ONMeCTXG2rhNKUWAwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNDOUNDNEVFOEE1MUZGMjhBN0Q1ODExRUZBQjBGMEM3
MDVGMERDOTAeFw0yNjAxMDYxOTM1MDVaFw0yNzAxMDUxOTQwMDVaMDMxMTAvBgNV
BAMTKDI3MzU1QkM4Q0MwRjI3RDRDOUIyQkMxQ0NCREZCQzYzOTk5MUFGREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbNWT6yhx1K/J/pFL1Lny7iO5
J9ytPxHc7MnznHTT4GkOGciXjnX8aS3/X7odDK1UvOCnhOqY0Xbf76QykEchfRKE
Q4tqIHyFR0Kng9oEiJ+MYQRk3LFH5SxKuUAKLUaegKpQank475X1hcX7XErTtFyA
npHO8N1ifr9Z13TSMDUSuivSXu05V42YgTZCu4p8WB7lwyMGEydI/jEeuphBdj20
yTQxIllujSdvmBLgnSrmeHe8P/f5trd9WnJrOYNGXNsJKUcaK7RiyPWwHDiUqz8h
ylNoJJHXWOhvN2oL3EnCDsc9qdVMU+v45X+O9h/qP+KjfrR2jdikpLBv/wFpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJzVbyMwPJ9TJsrwcy9+8Y5mRr9wwHwYDVR0j
BBgwFoAUA8nMTuilH/KKfVgR76sPDHBfDckwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Njk5RUM2QzdFMzUzNEZCRTU5MjRCRDQzOTNBMUNDQjQ4
MDZGQTJFNTVBRUNCRUJCOTZFOENERTlEQTk5NUY4LzAvMDNDOUNDNEVFOEE1MUZG
MjhBN0Q1ODExRUZBQjBGMEM3MDVGMERDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wM0M5Q0M0RUU4QTUxRkYyOEE3
RDU4MTFFRkFCMEYwQzcwNUYwREM5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjY5OUVDNkM3RTM1MzRGQkU1OTI0QkQ0MzkzQTFDQ0I0ODA2RkEyRTU1
QUVDQkVCQjk2RThDREU5REE5OTVGOC8wLzMyMzAzNzJlMzIzNDM4MmUzMTMxMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/hy
MA0GCSqGSIb3DQEBCwUAA4IBAQBmAXDeT5Hxn6JN8wcp8wOz76aweoyIEnPEQpM6
eMv62K5nqpnSDmbVn4fPx/rnfswt3iKvsYpbo4ZxbH6eJsGs+sGBe0Zb1ss8wFld
2IF21QYMYmaJljf98ZJOvS4nGN/SPP8oIi9jQ1RW4AXRCG00Vfj/56X/KkqKTxvj
4Lz08kMLHY2Snenf1hu1ghV5PlmCwE8zXKlhvFXjiEyk95iHgCejMLu8rxo5xGDR
wWRSpjROXjepQkzPG64ji+9NMIRdSJDwkgITs5PABHjVnwMtJ3JeimMPsSiuoUgy
N7O6F0o13z7YzKVm+jnIP5gLPwBcyX0LAD73ng5S/qixM4Fy
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:04 2026 by rpki-client