This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e3130362e3234302e302f32322d3234203d3e20323632313735.roa
File:                     3230302e3130362e3234302e302f32322d3234203d3e20323632313735.roa (raw, json)
Hash identifier:          FjbrkJdm9EQFUU9jSAhA3FSIbIIL56FUNRAtu96mve8=
Subject key identifier:   C7:D6:A7:BF:DD:C7:E3:49:85:65:7C:FD:49:DB:82:74:B6:AB:16:AA
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       6C5D15124D231306F7A9F0260F991DDC1C7F5E15
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e3130362e3234302e302f32322d3234203d3e20323632313735.roa
Signing time:             Tue 06 Jan 2026 20:54:53 +0000
ROA not before:           Tue 06 Jan 2026 20:49:53 +0000
ROA not after:            Tue 05 Jan 2027 20:54:53 +0000
asID:                     262175
IP address blocks:        200.106.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5d:15:12:4d:23:13:06:f7:a9:f0:26:0f:99:1d:dc:1c:7f:5e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  6 20:49:53 2026 GMT
            Not After : Jan  5 20:54:53 2027 GMT
        Subject: CN=C7D6A7BFDDC7E34985657CFD49DB8274B6AB16AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:00:f5:41:b5:7c:3c:58:85:37:83:d8:d5:
                    b7:6f:33:1f:23:06:73:2c:2c:e1:7a:6e:d9:c9:20:
                    ee:b0:0a:72:ab:34:3a:65:76:4d:26:e8:ff:42:26:
                    c4:22:26:1f:2f:79:c3:6f:11:97:e9:26:06:30:d4:
                    08:1b:35:5d:60:3b:98:99:15:79:c9:7a:77:98:fa:
                    70:cc:37:cb:3d:04:b6:4c:49:fa:2f:51:b9:4b:ad:
                    62:e4:60:56:4c:af:69:9c:9a:29:f7:4b:c4:a3:17:
                    56:c9:49:80:3b:ed:40:55:34:94:3a:8d:36:9b:69:
                    a4:4a:1f:f1:9b:a7:e6:a0:d0:c3:49:94:18:a5:16:
                    29:46:4f:80:86:a3:cc:88:c4:13:29:5c:c4:44:e7:
                    86:12:a0:f9:ab:e2:cf:c2:b0:91:13:89:65:51:ca:
                    94:c8:ab:5b:0f:20:4d:87:c7:45:27:8b:d3:46:e8:
                    ee:02:84:4c:db:35:bb:70:20:84:b1:9d:d1:01:d1:
                    b2:1f:61:df:1e:ef:a7:c8:30:8e:12:cb:0f:77:a8:
                    dd:01:63:99:fa:7a:0d:ce:ac:4a:92:3e:b1:61:c3:
                    d4:82:dc:d2:04:06:8e:25:ae:a9:a7:cc:91:5c:7d:
                    a9:8a:fd:15:32:b2:f2:63:34:6f:63:70:70:35:c5:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D6:A7:BF:DD:C7:E3:49:85:65:7C:FD:49:DB:82:74:B6:AB:16:AA
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3230302e3130362e3234302e302f32322d3234203d3e20323632313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:24:73:de:f2:2e:a4:63:b6:c0:cd:bd:4b:a3:37:6a:ae:
         42:0c:05:66:28:40:c7:b4:f9:5e:2b:0e:d5:57:06:32:96:1c:
         dc:9b:c4:9b:24:34:a3:42:76:ea:4b:62:c1:94:5e:a3:86:79:
         c7:cd:5b:84:f0:aa:eb:b7:52:7b:36:e9:50:ca:a4:ab:91:24:
         f2:10:2c:85:83:1e:4a:f6:8f:ba:84:f9:91:59:24:64:11:1f:
         ab:2b:db:b1:65:77:84:c2:95:9f:5e:f3:24:b8:ee:35:2a:70:
         c9:ef:cc:0f:a3:10:05:74:42:7f:f5:6d:27:e3:90:a5:fe:bd:
         43:06:27:50:ec:b2:8c:95:05:fd:96:17:24:c0:df:7c:57:c4:
         0a:24:a9:12:1f:bb:d3:2c:1c:12:b6:a4:c7:f7:31:cb:fa:a0:
         e7:23:9a:e6:74:d3:11:4a:59:0b:9c:4d:27:13:3b:93:2f:34:
         a9:33:06:ae:03:c0:17:2a:a5:bf:31:60:33:d5:ea:a9:3f:76:
         89:79:cf:69:9c:c8:6d:92:42:39:ec:6f:4b:a4:11:9a:0f:17:
         7e:95:57:4d:35:2e:b2:1e:19:e2:1e:1c:d8:47:8e:13:46:2d:
         b3:88:bd:34:75:68:95:bd:c7:e8:3c:1e:be:ed:f5:4c:44:9e:
         d9:a7:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:43 2026 by rpki-client