This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa
File:                     3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa (raw, json)
Hash identifier:          VQh3L0QSSxWYlTisUQ5RIsSuLm75tmydUe+eFjUlGqg=
Subject key identifier:   E7:19:66:27:A5:90:8C:45:B9:EE:C3:5B:7D:20:FD:86:CF:16:67:90
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       042EFC3E9E059543F8BF4ADFE3EFBCED5E6CE5F7
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa
Signing time:             Tue 06 Jan 2026 19:25:51 +0000
ROA not before:           Tue 06 Jan 2026 19:20:51 +0000
ROA not after:            Tue 05 Jan 2027 19:25:51 +0000
asID:                     27738
IP address blocks:        200.124.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2e:fc:3e:9e:05:95:43:f8:bf:4a:df:e3:ef:bc:ed:5e:6c:e5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Jan  6 19:20:51 2026 GMT
            Not After : Jan  5 19:25:51 2027 GMT
        Subject: CN=E7196627A5908C45B9EEC35B7D20FD86CF166790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:fe:de:dd:7b:9c:10:a1:dd:2b:e4:7e:c6:
                    9a:ec:23:7b:23:49:f6:8a:89:22:22:5e:c8:57:ff:
                    83:dd:3d:8e:73:db:66:fa:2a:a1:0e:a6:97:6f:cb:
                    db:a6:96:67:7e:84:94:31:e0:b6:e3:01:38:2e:a5:
                    7c:f1:87:70:04:a0:48:34:59:f3:61:32:f1:39:ae:
                    63:0e:11:ba:bc:5a:d4:03:cc:0f:a7:fe:f0:eb:6f:
                    77:85:a7:e5:92:5a:4e:d7:d3:30:ec:7b:fa:79:0d:
                    52:32:50:82:ee:c8:32:87:ff:4a:ba:54:7d:cb:91:
                    66:9a:8e:a9:11:c5:4f:64:c6:53:a5:89:25:26:51:
                    72:c1:2f:a3:64:6b:83:3d:df:37:e4:18:6e:f3:ea:
                    af:e7:9a:c8:0c:c4:27:02:1f:33:f3:f4:a3:11:f7:
                    67:6a:38:e8:66:d4:f0:cf:6f:24:7a:86:2d:a8:6c:
                    8c:ef:87:ef:28:e9:ad:0f:63:18:fa:03:85:6e:1d:
                    e0:61:20:86:bd:b2:18:8c:c2:c4:7c:90:bb:2a:3a:
                    4f:b1:ef:02:d8:ae:d3:18:2e:cd:e4:84:6b:59:51:
                    58:40:df:08:9c:99:b4:69:7f:e3:0b:26:88:05:24:
                    ca:f0:9c:17:ef:68:8c:6f:90:c6:54:84:2e:77:03:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:66:27:A5:90:8C:45:B9:EE:C3:5B:7D:20:FD:86:CF:16:67:90
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3230302e3132342e3234302e302f32302d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:29:5d:a8:f2:7a:a2:03:9f:d0:81:f5:3e:23:d3:9b:a4:8e:
         5f:65:2c:95:bb:ce:9c:1a:57:0f:73:8f:34:2a:ee:24:e3:34:
         52:ef:e5:8d:25:46:e3:33:a4:7b:43:ea:30:17:97:c9:9d:16:
         38:2c:32:c4:42:47:17:22:4f:8b:c4:cb:9c:1e:b9:eb:f7:10:
         69:32:28:75:99:f4:0e:2e:08:34:e4:7f:fb:1a:91:98:b1:54:
         e6:07:77:7c:ea:f5:6e:a9:b0:d5:76:89:3e:d0:e3:04:87:ea:
         06:09:fd:2f:98:1f:94:9b:b0:0e:04:95:6c:24:94:41:4a:2b:
         3e:fb:36:76:d0:b6:e4:91:68:00:d7:e3:85:b3:70:41:77:6e:
         67:ec:17:3b:0a:ea:c0:d6:a1:64:a0:bc:20:b2:34:b5:fe:16:
         52:70:d7:9d:29:6f:b2:a4:1f:a8:8d:9b:f1:0b:a6:82:ff:8e:
         f2:f3:af:23:07:36:7b:7b:c1:db:d4:b2:3e:15:d8:ad:af:86:
         0b:24:9c:ad:c6:c7:b6:95:89:ea:f0:02:b9:b0:d0:f2:9b:d6:
         90:38:d2:a7:82:64:28:a1:90:01:61:a3:41:f3:df:a0:a0:c4:
         23:c7:56:48:83:33:9c:d8:78:16:ba:f5:78:be:a2:e9:4d:8c:
         41:4a:e5:da
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBC78Pp4FlUP4v0rf4++87V5s5fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYzQTBCNjQzNDhFNzA2MDFERTg2N0M1OTRGMzRBOEJC
ODdFQzkxMTAeFw0yNjAxMDYxOTIwNTFaFw0yNzAxMDUxOTI1NTFaMDMxMTAvBgNV
BAMTKEU3MTk2NjI3QTU5MDhDNDVCOUVFQzM1QjdEMjBGRDg2Q0YxNjY3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3v7e3XucEKHdK+R+xprsI3sj
SfaKiSIiXshX/4PdPY5z22b6KqEOppdvy9umlmd+hJQx4LbjATgupXzxh3AEoEg0
WfNhMvE5rmMOEbq8WtQDzA+n/vDrb3eFp+WSWk7X0zDse/p5DVIyUILuyDKH/0q6
VH3LkWaajqkRxU9kxlOliSUmUXLBL6Nka4M93zfkGG7z6q/nmsgMxCcCHzPz9KMR
92dqOOhm1PDPbyR6hi2obIzvh+8o6a0PYxj6A4VuHeBhIIa9shiMwsR8kLsqOk+x
7wLYrtMYLs3khGtZUVhA3wicmbRpf+MLJogFJMrwnBfvaIxvkMZUhC53A1w5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5xlmJ6WQjEW57sNbfSD9hs8WZ5AwHwYDVR0j
BBgwFoAU5joLZDSOcGAd6GfFlPNKi7h+yREwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Qjg1REQ2NDUzNTg0MTJGNTAxODc1MDcwMjJEMEUyMUND
MkU1NjhCNEU0MDkyNDc3RkM5RDUyNTk4MkJEMzcxLzAvRTYzQTBCNjQzNDhFNzA2
MDFERTg2N0M1OTRGMzRBOEJCODdFQzkxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNjNBMEI2NDM0OEU3MDYwMURF
ODY3QzU5NEYzNEE4QkI4N0VDOTExLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI4NURENjQ1MzU4NDEyRjUwMTg3NTA3MDIyRDBFMjFDQzJFNTY4QjRF
NDA5MjQ3N0ZDOUQ1MjU5ODJCRDM3MS8wLzMyMzAzMDJlMzEzMjM0MmUzMjM0MzAy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3MzczMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyHzw
MA0GCSqGSIb3DQEBCwUAA4IBAQBCKV2o8nqiA5/QgfU+I9ObpI5fZSyVu86cGlcP
c480Ku4k4zRS7+WNJUbjM6R7Q+owF5fJnRY4LDLEQkcXIk+LxMucHrnr9xBpMih1
mfQOLgg05H/7GpGYsVTmB3d86vVuqbDVdok+0OMEh+oGCf0vmB+Um7AOBJVsJJRB
Sis++zZ20LbkkWgA1+OFs3BBd25n7Bc7CurA1qFkoLwgsjS1/hZScNedKW+ypB+o
jZvxC6aC/47y868jBzZ7e8Hb1LI+Fditr4YLJJytxse2lYnq8AK5sNDym9aQONKn
gmQooZABYaNB89+goMQjx1ZIgzOc2HgWuvV4vqLpTYxBSuXa
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:32 2026 by rpki-client