This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa
File:                     3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          fHFPNTRUxl/SFg676R5hBOQT6BX3aakXQWmxF4S9Lwo=
Subject key identifier:   F8:C6:A4:8E:25:01:37:1C:44:5C:0E:81:EC:14:DB:00:7F:48:61:9B
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       2040674B688413D978E1707DEDD6DB72473E667B
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:52 +0000
ROA not before:           Tue 06 Jan 2026 19:42:52 +0000
ROA not after:            Tue 05 Jan 2027 19:47:52 +0000
asID:                     14754
IP address blocks:        200.107.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:67:4b:68:84:13:d9:78:e1:70:7d:ed:d6:db:72:47:3e:66:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Jan  6 19:42:52 2026 GMT
            Not After : Jan  5 19:47:52 2027 GMT
        Subject: CN=F8C6A48E2501371C445C0E81EC14DB007F48619B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:47:8d:09:7a:a6:a6:58:3e:88:d6:5b:d9:
                    e7:11:c1:64:df:b7:e6:1a:3b:8d:7f:0a:63:62:bd:
                    09:56:d0:90:75:11:35:a5:45:d0:de:15:36:59:71:
                    be:78:99:69:6a:4e:d1:a8:ab:96:c4:d8:79:a4:ff:
                    fb:bb:03:b4:7d:3a:a4:f0:38:82:ea:a8:b1:ac:29:
                    c9:c4:d8:a8:59:72:ec:03:15:7b:72:e9:a5:8c:ae:
                    46:e1:38:56:ad:c2:32:38:46:a3:c8:0f:15:d4:77:
                    58:be:3a:96:5d:45:6d:08:ae:d9:cc:67:ef:f2:bc:
                    6f:7e:0b:54:56:9c:18:03:64:a7:04:38:33:42:6f:
                    a2:a0:eb:05:1b:51:9a:36:1a:3b:f6:ac:82:1e:b6:
                    4c:36:7c:1f:e1:2c:b1:84:c6:52:0e:ae:77:b0:b7:
                    89:59:1f:11:29:8c:a8:b0:d2:bc:22:a6:da:55:53:
                    0a:e2:e5:ad:1b:79:3b:24:cc:30:20:a6:1c:b0:67:
                    b4:9f:ce:ed:c7:55:9e:34:4f:46:fd:9b:88:0e:70:
                    d8:88:a2:22:74:f5:f5:df:c6:a7:26:e0:bb:4d:5b:
                    de:19:7f:23:16:4c:95:49:f4:75:b2:66:57:d9:75:
                    2b:8e:ed:1b:d2:5d:dc:f3:6a:12:dc:a5:cd:6c:1f:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:A4:8E:25:01:37:1C:44:5C:0E:81:EC:14:DB:00:7F:48:61:9B
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230302e3130372e3132302e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:6f:cd:19:00:ef:ca:e5:a2:57:ec:88:b6:70:83:ea:59:
         39:f2:b8:23:dd:29:31:6f:be:15:d2:04:8d:83:d8:08:09:64:
         73:1d:dc:c8:2e:10:7e:6b:bf:66:28:77:2e:12:f5:ff:81:0c:
         97:cf:9d:a7:92:fc:bd:f3:57:af:4f:5b:23:3c:61:b9:c0:ab:
         99:df:fe:85:cd:06:c5:66:df:f5:3c:19:f6:19:08:81:ea:68:
         28:75:33:f0:5c:07:25:36:cc:21:b4:35:f6:59:c6:6f:b5:11:
         92:d8:8d:c4:9e:c0:34:86:ec:fa:43:0d:61:da:9b:27:b8:5e:
         37:1a:7a:17:f4:db:6f:33:a4:4d:12:fc:d6:82:1d:55:6d:11:
         66:89:32:ea:21:71:c6:4a:8f:66:37:ee:cb:41:b2:7b:d6:2e:
         eb:bc:58:90:f5:7b:38:3e:4e:8d:b3:d8:64:e2:15:75:32:44:
         fa:20:79:71:68:cf:30:73:95:ba:2e:1b:0b:b8:0f:24:f3:70:
         d6:91:33:67:f3:26:cc:96:3d:3f:bf:1a:1c:2b:ef:91:32:cb:
         a5:a4:c0:02:ec:a0:25:7a:15:06:e5:dc:da:a9:83:52:84:14:
         34:33:b9:44:00:a0:53:47:c0:79:75:d2:94:92:ee:4f:0a:5a:
         d6:b1:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:31 2026 by rpki-client