This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa
File:                     3230302e322e382e302f32312d3234203d3e2037393635.roa (raw, json)
Hash identifier:          Tfku8h4Hxi1nda7tgluxBj4lbHN1UWAtvxGDrj74DR4=
Subject key identifier:   70:23:56:34:EB:15:F7:4A:3E:8A:7E:21:65:70:70:2C:A0:31:39:76
Certificate issuer:       /CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
Certificate serial:       4D7012A0BA3012D4C6D7E339D09BC830C0EAC97F
Authority key identifier: BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa
Signing time:             Tue 06 Jan 2026 20:50:17 +0000
ROA not before:           Tue 06 Jan 2026 20:45:17 +0000
ROA not after:            Tue 05 Jan 2027 20:50:17 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:70:12:a0:ba:30:12:d4:c6:d7:e3:39:d0:9b:c8:30:c0:ea:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
        Validity
            Not Before: Jan  6 20:45:17 2026 GMT
            Not After : Jan  5 20:50:17 2027 GMT
        Subject: CN=70235634EB15F74A3E8A7E216570702CA0313976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:92:d1:49:a0:40:3f:da:d7:bf:b3:e6:69:
                    33:86:14:72:f2:c6:b4:b2:06:8b:e9:41:d5:d6:78:
                    69:e5:68:4d:3a:30:5e:4f:1b:a1:ae:84:d2:5c:51:
                    c0:37:72:b7:9c:f0:9b:9f:df:6d:5b:dc:fb:1b:03:
                    1c:67:8a:73:c9:cf:38:e0:ad:ed:0b:1c:31:1c:e6:
                    e1:5c:68:59:9e:ac:ba:de:71:82:66:ce:8d:13:64:
                    86:74:20:e2:04:4b:dc:8c:03:ef:c2:e7:29:f3:a6:
                    7a:ba:78:61:96:54:02:18:71:ca:22:e9:44:1e:de:
                    f4:c3:13:86:e4:43:54:85:a4:dc:d0:be:df:a6:9e:
                    85:1a:e4:70:27:78:88:12:ec:f4:62:f2:8c:1e:7f:
                    29:98:6d:ab:ee:38:53:44:e1:38:a4:32:e2:b6:89:
                    df:1c:3c:95:d1:36:12:33:7d:ab:62:8b:02:61:a3:
                    4d:4d:0c:90:ae:b4:cb:46:89:ec:37:75:e7:65:2d:
                    7d:fd:9e:6c:a0:88:3e:e5:13:4e:82:9c:fe:72:77:
                    88:c6:4c:21:41:52:50:f4:db:bb:e9:02:d6:83:b8:
                    aa:ad:bf:e0:bf:eb:7f:42:19:51:67:16:42:3d:4d:
                    cd:dd:2c:36:bc:dc:5d:d3:2c:41:ea:5c:9a:f9:89:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:23:56:34:EB:15:F7:4A:3E:8A:7E:21:65:70:70:2C:A0:31:39:76
            X509v3 Authority Key Identifier:
                keyid:BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3234203d3e2037393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:9d:ee:4f:b7:19:d0:22:67:90:3d:c6:52:4a:d4:49:84:
         1b:01:a2:05:e8:c6:2f:5d:b1:66:09:63:e0:c7:31:14:b7:9a:
         1e:1c:f2:a8:69:0c:0e:35:b7:64:7f:de:64:ff:72:f7:c2:38:
         16:8a:a8:c2:f1:8a:e3:4f:d3:72:41:fc:77:2e:8f:de:5e:60:
         c5:7c:04:c0:f2:a4:da:ea:a4:25:7c:47:94:13:b1:41:cc:71:
         d5:a4:60:83:49:c7:09:64:70:ee:75:34:54:00:4d:1c:23:ef:
         88:75:42:6d:44:57:e7:3b:ac:5e:50:8d:76:0a:26:d9:50:df:
         bd:8f:ff:c1:20:f3:9b:8f:26:30:a0:0e:62:68:47:0d:c8:31:
         22:c2:f3:bc:73:74:05:3a:32:7f:7a:37:c2:b3:14:c0:43:dc:
         d2:9b:bf:df:26:30:96:48:4e:b8:74:d0:47:f1:59:dd:07:61:
         97:7b:29:2e:6d:3e:1b:99:4b:5c:1e:64:de:7b:c0:ea:01:98:
         c9:b7:92:c2:c9:3b:4b:a3:40:1a:4f:e4:83:26:ef:c9:89:47:
         3d:72:11:6f:03:82:5b:92:16:8b:6d:96:00:18:d0:b7:c3:cd:
         8e:01:ea:5e:35:39:b5:ea:59:92:02:65:95:0c:4f:57:a6:0e:
         e2:bd:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:49 2026 by rpki-client