This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136342e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          jy+uQy5YVhCsivS6z7K8Y2llcmllxm830PsPCFtq60c=
Subject key identifier:   CA:E1:A8:F4:70:5D:82:85:A5:F5:9D:42:90:03:4D:75:E0:65:DF:AA
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       2D0311881B0E70C5BBA5997C42DF5E18AFBF2969
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:50 +0000
ROA not before:           Tue 06 Jan 2026 20:45:50 +0000
ROA not after:            Tue 05 Jan 2027 20:50:50 +0000
asID:                     22541
IP address blocks:        200.75.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:03:11:88:1b:0e:70:c5:bb:a5:99:7c:42:df:5e:18:af:bf:29:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:50 2026 GMT
            Not After : Jan  5 20:50:50 2027 GMT
        Subject: CN=CAE1A8F4705D8285A5F59D4290034D75E065DFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:a6:ff:01:c7:7c:b3:9c:75:4a:47:11:cc:
                    5f:b7:e1:48:cf:b1:89:2a:b9:f4:26:8f:0d:a0:ec:
                    f9:3d:3b:85:9e:39:93:f4:e0:15:ab:f7:e2:f8:e6:
                    38:50:14:cf:7a:ed:ff:bb:15:c7:b6:82:31:43:ea:
                    fe:9e:86:ad:ff:8c:33:e3:70:82:30:4e:5f:04:c5:
                    b5:f8:ef:0e:bf:ec:a3:3a:21:dd:f0:f6:f5:78:97:
                    4b:25:5e:92:ed:76:b1:7e:9b:d9:8f:ba:65:fd:5b:
                    5d:d6:87:eb:27:55:62:0b:6c:9c:c3:eb:26:8a:f4:
                    88:0d:1d:4a:6c:ba:a2:25:cd:ae:63:f9:77:d5:41:
                    d9:4d:c2:ee:46:82:2e:3d:81:b3:d6:0c:16:53:87:
                    72:ca:4b:6d:e4:d9:ae:c3:60:3c:f8:f9:79:98:e7:
                    c9:dc:cb:13:31:fa:6f:3d:a8:c8:a3:18:63:05:98:
                    c6:c7:2e:68:e4:a2:d4:8e:88:ba:bc:22:5d:55:d7:
                    20:41:85:c7:62:fc:9e:fd:54:00:67:2c:0f:5a:5d:
                    3b:25:d5:a0:34:bd:e4:11:11:84:52:b4:bb:ba:93:
                    12:55:6d:8c:35:4d:1c:6f:58:ea:02:c2:4d:a0:54:
                    7a:15:70:de:72:0e:77:4e:cf:52:7e:a9:49:45:a0:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:A8:F4:70:5D:82:85:A5:F5:9D:42:90:03:4D:75:E0:65:DF:AA
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:ce:ce:15:e6:cc:79:1f:6a:17:df:9f:a8:29:63:a6:16:
         b5:87:c1:d2:8f:c0:06:69:ab:f2:8d:05:09:2a:1c:b3:be:bb:
         76:7d:57:16:76:c3:37:4b:56:8e:c0:00:50:0c:93:07:f2:17:
         25:95:cf:5a:3b:47:02:af:a3:12:1a:97:ad:1b:f8:e1:e2:34:
         55:52:8d:c8:c8:f8:86:07:f5:22:58:82:28:38:e1:c5:e1:11:
         39:53:28:5f:fd:bd:c6:90:43:17:94:ba:d5:39:93:fc:aa:3b:
         4a:75:3c:fd:95:34:9a:ba:40:8c:c5:8c:c2:b6:11:14:d3:02:
         fb:fa:fa:8e:6d:ac:62:8b:a8:3e:54:99:d2:59:8f:0c:a5:8c:
         fe:74:7a:d0:32:0a:01:5a:97:fd:1e:c1:ca:56:a1:15:01:40:
         ae:b1:eb:aa:a4:cd:13:09:03:1f:7d:5f:6a:95:24:b0:11:39:
         a8:70:35:8e:ac:43:d9:a5:b6:92:b2:e2:b7:4c:94:12:2a:34:
         d7:a9:50:f8:7e:ab:6c:af:1a:70:a9:0f:4e:41:86:80:fe:a6:
         f0:78:42:62:90:ae:13:52:be:29:a8:77:ef:ce:9c:5c:dd:b2:
         e2:4f:d1:9b:0e:b7:a3:a7:3a:04:7d:c6:2b:65:63:f6:ca:b9:
         27:94:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:27 2026 by rpki-client