This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e38362e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          Jw5vE4V9dCncA2mfetOJtNSB8MLUglQvflyTuiYrSO8=
Subject key identifier:   14:86:62:AE:FD:27:5E:E6:26:E1:B3:EF:0A:D0:C3:0E:67:3E:72:81
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       1173792A1344D2BB09F9ED3DF84CA73F6C09D6EE
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:14 +0000
ROA not before:           Tue 06 Jan 2026 19:10:14 +0000
ROA not after:            Tue 05 Jan 2027 19:15:14 +0000
asID:                     22047
IP address blocks:        200.86.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:79:2a:13:44:d2:bb:09:f9:ed:3d:f8:4c:a7:3f:6c:09:d6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:14 2026 GMT
            Not After : Jan  5 19:15:14 2027 GMT
        Subject: CN=148662AEFD275EE626E1B3EF0AD0C30E673E7281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:01:3c:12:da:92:a0:77:6e:76:9d:40:36:
                    cb:1d:2e:e8:f3:83:3d:ce:3a:2c:73:24:fb:62:18:
                    00:b5:95:1b:68:c2:82:90:c2:2d:16:a0:de:e5:ec:
                    ef:16:20:5a:f1:f2:30:70:99:5d:03:21:b0:d2:4b:
                    d2:76:de:c5:e7:76:e4:56:39:da:c1:0f:a6:a8:b5:
                    09:75:93:95:66:08:17:83:ad:15:a1:0e:53:bc:8f:
                    d4:a2:91:8e:77:2f:69:be:0a:5b:5b:b0:71:9e:bc:
                    bf:55:e8:0d:33:e5:b9:61:5f:82:50:34:ea:66:c2:
                    83:ab:d7:9e:4e:e9:f3:60:e4:d0:cf:6e:5d:19:2e:
                    59:bc:17:db:87:71:3f:c3:37:d5:76:7a:f7:19:0e:
                    64:37:29:af:26:d1:2f:82:82:f6:1e:60:96:63:46:
                    3f:a6:d3:a3:5e:93:3f:ac:25:35:8e:e1:d4:b2:83:
                    c3:46:f7:f5:04:a5:50:51:86:b5:c7:54:4c:4f:3c:
                    d9:ae:5c:8f:c8:40:d4:9b:5a:06:79:84:d0:20:c9:
                    8d:af:90:ab:fc:94:e0:85:c6:eb:08:79:dd:bd:b0:
                    49:e6:93:6c:3d:bf:c9:08:55:99:1f:06:58:00:11:
                    cd:1c:8f:59:3f:1c:ea:96:a2:fa:0c:56:b7:38:21:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:62:AE:FD:27:5E:E6:26:E1:B3:EF:0A:D0:C3:0E:67:3E:72:81
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e38362e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:10:9b:97:32:3c:b8:d9:59:78:38:6a:d6:30:ff:d0:c6:3f:
         e4:05:07:bb:a0:94:d1:87:29:06:9b:b4:e6:f2:bb:28:9c:c9:
         65:b4:10:39:0d:99:64:b7:27:70:4d:ba:95:28:11:93:93:21:
         f5:db:0a:d1:f3:a1:72:e8:cf:4c:c3:f2:a9:58:d2:8a:b1:03:
         b5:3c:2b:11:e9:7b:36:79:e2:ec:70:f9:8b:e1:c5:d4:77:48:
         3f:16:35:f1:d5:0e:1b:4e:ac:0e:06:73:2a:5f:c9:09:f1:83:
         cb:f2:19:17:e7:70:4f:28:f8:ea:a7:a1:3a:44:05:68:a7:5a:
         92:01:cd:13:dd:a9:44:6d:b6:11:56:88:56:1f:b7:30:be:1d:
         b3:8a:98:a8:70:ea:76:c2:ab:24:18:ec:2d:11:c2:87:6b:e5:
         86:14:d1:80:72:7d:25:82:f0:06:bb:8a:8c:1f:5e:66:bf:a7:
         02:09:e7:d5:0a:94:a5:e5:27:41:09:6b:a7:92:21:34:55:23:
         ca:86:20:b8:2e:ea:c3:87:ef:62:e7:14:e3:1d:79:c5:d9:c0:
         9a:d8:10:9a:38:d3:54:65:a5:dd:56:3b:7e:ea:dd:3f:0b:69:
         e1:52:c4:06:86:45:72:04:17:d8:b3:32:a5:c2:c4:fa:a7:d3:
         b4:83:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:04 2026 by rpki-client