This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/3230302e33342e3135362e302f32342d3234203d3e203236353631.roa
File:                     3230302e33342e3135362e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          JhvYJM5u7eMhSjsQFV5pDc68GbxNXEk147FRNbBKezU=
Subject key identifier:   8F:6B:E6:27:D6:D6:F7:37:CD:5C:10:F7:01:D8:FC:76:23:C5:83:D8
Certificate issuer:       /CN=C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C
Certificate serial:       708DEF9590AC04F3C07A9F3F518B85B414D6BF42
Authority key identifier: C0:55:EC:6F:1A:9F:C9:DE:3F:F3:F3:5B:69:41:5C:74:7C:10:B6:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/3230302e33342e3135362e302f32342d3234203d3e203236353631.roa
Signing time:             Wed 21 Jan 2026 03:00:00 +0000
ROA not before:           Wed 21 Jan 2026 02:55:00 +0000
ROA not after:            Wed 20 Jan 2027 03:00:00 +0000
asID:                     26561
IP address blocks:        200.34.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8d:ef:95:90:ac:04:f3:c0:7a:9f:3f:51:8b:85:b4:14:d6:bf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C
        Validity
            Not Before: Jan 21 02:55:00 2026 GMT
            Not After : Jan 20 03:00:00 2027 GMT
        Subject: CN=8F6BE627D6D6F737CD5C10F701D8FC7623C583D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:59:3d:c3:04:d9:34:3d:42:ab:de:ed:cd:
                    cb:11:0d:05:b5:ab:64:3b:82:56:29:a8:0c:ea:9a:
                    b4:b9:52:90:d0:8e:6a:f8:f4:aa:4d:a2:6f:4c:53:
                    8d:a4:2b:ce:bf:33:67:ab:d7:03:4b:8b:4c:c8:44:
                    47:b8:1c:13:62:60:6e:03:44:05:a9:29:cd:81:ca:
                    4a:e3:03:8b:8d:3b:60:35:41:dd:1d:60:63:3b:d2:
                    75:c9:7a:b1:50:99:97:4f:f3:eb:71:2c:a8:2a:96:
                    d0:6f:2a:3d:84:9a:3b:87:8d:c4:df:8b:66:8e:30:
                    aa:46:c7:17:d1:90:df:45:d0:10:9f:db:b9:d9:9a:
                    ec:eb:ea:0b:c6:a0:1c:50:db:5b:4c:a9:a0:ca:d0:
                    9c:8b:64:cf:8b:b3:8e:36:c4:2a:62:06:eb:d1:f6:
                    0d:f8:3f:c8:c2:ba:b3:76:39:8a:db:e8:34:5d:8e:
                    a6:bf:75:d4:aa:3a:6d:8a:12:bd:82:e5:f6:19:d7:
                    09:34:ad:b2:77:b9:a4:66:2f:c4:3d:2e:b1:57:65:
                    0d:1e:5f:9a:5f:ee:22:4a:98:93:6b:c7:01:ff:99:
                    18:07:4a:1e:f5:0b:45:50:78:0e:25:42:85:f7:0a:
                    a5:7e:4a:a5:48:3b:6b:2b:b1:5f:18:e1:4c:7c:91:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6B:E6:27:D6:D6:F7:37:CD:5C:10:F7:01:D8:FC:76:23:C5:83:D8
            X509v3 Authority Key Identifier:
                keyid:C0:55:EC:6F:1A:9F:C9:DE:3F:F3:F3:5B:69:41:5C:74:7C:10:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C055EC6F1A9FC9DE3FF3F35B69415C747C10B67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/705F963D9085806D538DA944AD174A751DAC855E710BD6051E34E6094E359D98/0/3230302e33342e3135362e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:77:dd:56:3f:a5:fb:1a:17:39:49:8a:06:3d:13:d3:68:1f:
         f5:b3:19:20:7a:c5:05:ed:33:cc:0a:82:25:10:f7:ab:d1:36:
         0d:ce:ee:ed:b6:4e:2c:1f:01:f8:ce:2b:42:6a:ed:af:24:f8:
         83:ca:f3:d2:75:e0:b5:a2:1d:c8:f0:05:c0:07:2f:97:b1:ac:
         91:35:55:0c:68:06:6b:a5:7e:39:a5:50:bc:d7:97:14:0d:5e:
         cd:cd:0a:28:c5:4c:d4:1b:14:d6:62:43:bb:2a:0b:13:2a:29:
         8c:0a:23:03:06:fd:3c:50:08:36:7b:23:78:9a:02:4d:d8:57:
         14:e0:f3:4b:9d:1a:fb:20:58:8d:6d:b8:67:7b:d8:9d:ea:6b:
         f1:38:cd:c5:e5:30:0c:68:de:bf:7c:d2:03:cd:7a:5d:51:0b:
         c8:aa:a7:d6:20:60:85:e7:19:6b:03:07:4a:33:fd:f3:ff:3d:
         ec:fd:c0:d2:0f:9a:44:ac:46:44:fe:72:8f:72:0e:6a:d6:93:
         0f:fb:69:ee:17:72:ff:4c:2d:83:03:0f:51:88:e4:ec:20:27:
         62:ef:ba:44:e3:68:67:9a:70:61:04:96:21:ae:5d:f9:e3:7a:
         23:17:a4:6c:7f:c7:81:47:be:0a:4f:48:e0:fe:e7:77:13:fc:
         69:73:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:09:09 2026 by rpki-client