This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f32312d3234203d3e203130363137.roa
File:                     3230302e36392e33322e302f32312d3234203d3e203130363137.roa (raw, json)
Hash identifier:          3ABNzYTd9immx2Ug692jc3r3DRj0dSrMxumkt+71nXM=
Subject key identifier:   A2:A3:26:4D:E7:25:65:46:ED:5F:57:A8:BB:06:84:C4:BC:DE:23:13
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       3A0FF6EC9A843FCA83F22FF45E7836218D1D7E6A
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f32312d3234203d3e203130363137.roa
Signing time:             Tue 06 Jan 2026 19:41:25 +0000
ROA not before:           Tue 06 Jan 2026 19:36:25 +0000
ROA not after:            Tue 05 Jan 2027 19:41:25 +0000
asID:                     10617
IP address blocks:        200.69.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0f:f6:ec:9a:84:3f:ca:83:f2:2f:f4:5e:78:36:21:8d:1d:7e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Jan  6 19:36:25 2026 GMT
            Not After : Jan  5 19:41:25 2027 GMT
        Subject: CN=A2A3264DE7256546ED5F57A8BB0684C4BCDE2313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:20:51:54:8a:fb:b6:a5:24:7a:ca:95:aa:
                    23:56:b5:40:63:da:fc:53:ac:e2:e4:d9:0a:4e:df:
                    88:02:5e:8f:17:ca:ec:a8:15:e3:a5:86:4f:02:ec:
                    51:18:de:9e:cc:62:6b:3e:22:8e:4b:73:2a:a8:fc:
                    70:a5:af:fe:f2:47:79:04:e5:bb:ec:ef:32:7f:f6:
                    ec:9c:28:40:ac:2f:61:8f:aa:f2:ec:c9:41:0a:98:
                    23:eb:57:14:07:4f:3f:c3:5a:c2:de:51:66:01:3b:
                    5c:21:25:12:6a:b0:7f:fe:84:a4:28:2c:7e:d7:7e:
                    39:fa:a3:eb:17:53:44:07:c4:45:cb:94:53:4b:d3:
                    48:36:34:e1:7b:37:01:57:b8:02:b2:f0:0f:c5:98:
                    06:f8:c6:e7:03:72:44:1a:35:96:94:1b:e7:13:f4:
                    90:28:64:d6:3b:24:ed:20:7a:2c:27:b3:bf:c5:b7:
                    3d:03:36:d0:4d:48:ae:1f:e4:92:48:62:72:8c:8b:
                    da:e2:00:c8:3e:a2:54:e9:1e:d5:25:e4:6e:18:73:
                    bd:c5:33:83:a7:24:23:7d:41:5c:64:be:4f:a9:09:
                    f0:ff:99:7f:c2:2e:08:3b:77:63:0e:df:f9:88:5d:
                    4a:0d:3c:c0:7f:c9:a5:81:ff:98:4a:41:98:79:f2:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A3:26:4D:E7:25:65:46:ED:5F:57:A8:BB:06:84:C4:BC:DE:23:13
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f32312d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c2:21:fe:ad:3d:fe:1a:e0:dd:d4:9d:23:88:f8:a7:b5:de:33:
         75:cb:44:cd:9c:2f:a0:5e:89:11:ec:37:56:ce:9e:f1:f7:8f:
         83:ed:a8:50:e2:81:73:19:01:e7:b2:b6:c3:9f:c7:8c:08:b8:
         59:ee:bd:c2:be:a4:9b:71:a0:cb:ca:4b:58:c2:26:5e:17:61:
         74:0a:33:d6:2c:87:ba:0d:58:d5:cb:8c:9e:88:3d:a0:8d:15:
         a5:86:9d:72:8d:eb:ca:66:52:27:40:01:77:dd:76:a6:51:83:
         fe:36:3a:c7:70:72:52:43:19:37:5a:f0:2d:27:6f:11:bf:8e:
         ee:b0:10:f6:54:11:24:1f:66:9e:d1:9e:eb:00:06:7a:a0:a0:
         1d:79:6a:bd:77:90:d9:d3:ec:7b:36:ea:e9:4a:5c:45:d1:7c:
         e5:a6:f9:b3:29:84:50:d1:7a:52:0c:77:67:8f:11:51:92:b2:
         75:27:e9:ed:01:96:49:a5:70:0b:3b:36:49:15:70:be:74:c0:
         9f:16:87:e9:d7:18:22:b5:cc:c4:9f:44:cd:9b:3b:f0:30:96:
         bf:b1:5e:50:b2:82:2c:4f:ed:60:1b:65:cc:7f:39:75:57:08:
         ec:79:44:a2:32:54:d1:9a:e4:f5:24:8b:7a:0a:70:ea:11:92:
         4b:9d:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:53 2026 by rpki-client