This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136352e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          hbZzQeBzFqzVaHN6JNOMey7IffZOuWJc8pMu1AbBjDY=
Subject key identifier:   8C:16:B9:C9:1F:BA:7E:80:AB:80:FF:E3:F0:9E:F7:29:AD:9D:EA:35
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       423B5DA28434815DB81D7B17F13F871036557E81
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:50 +0000
ROA not before:           Tue 06 Jan 2026 20:45:50 +0000
ROA not after:            Tue 05 Jan 2027 20:50:50 +0000
asID:                     22541
IP address blocks:        200.75.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3b:5d:a2:84:34:81:5d:b8:1d:7b:17:f1:3f:87:10:36:55:7e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:50 2026 GMT
            Not After : Jan  5 20:50:50 2027 GMT
        Subject: CN=8C16B9C91FBA7E80AB80FFE3F09EF729AD9DEA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:0d:95:7a:95:9f:6b:9d:6d:c7:f1:be:22:
                    0d:64:a8:07:b7:70:49:9c:e4:a8:6b:1d:20:81:82:
                    52:73:f7:bf:9d:e9:aa:d8:f5:03:d3:7a:38:79:33:
                    e6:52:28:3f:2b:46:c7:43:6d:8b:fe:70:41:d7:d8:
                    43:76:7a:2b:0e:b0:6d:e5:3f:b8:98:41:ed:8b:53:
                    4c:75:58:a7:f0:81:98:13:d2:b4:1b:17:61:4e:0f:
                    80:5d:b2:c7:88:c1:3e:09:90:68:42:78:25:18:45:
                    b9:e5:81:9d:62:a6:de:48:8f:cd:9b:68:08:a0:f6:
                    de:51:84:5b:a2:09:8c:47:85:58:7d:1e:d6:ff:bc:
                    6e:4b:fa:16:73:df:79:33:6c:31:b1:6f:b8:d7:ed:
                    d9:7a:85:7c:7f:49:e0:47:74:2c:d8:3e:18:c1:c6:
                    53:57:16:a5:d1:37:65:13:d7:d4:59:30:8c:64:4c:
                    99:14:9a:51:b9:ae:71:42:66:54:7f:b8:99:c0:f5:
                    9b:e7:1f:57:b0:a2:75:2c:8d:8a:13:41:4f:bd:eb:
                    2a:26:64:14:28:d8:13:78:8a:a6:08:c2:65:c9:0b:
                    06:b8:35:eb:9b:45:c0:78:9a:7b:aa:11:57:a3:0f:
                    26:d3:1a:fc:90:d4:4f:05:7f:0b:ab:73:a4:24:82:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:B9:C9:1F:BA:7E:80:AB:80:FF:E3:F0:9E:F7:29:AD:9D:EA:35
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136352e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:40:b3:39:27:84:9f:51:80:18:8a:94:23:70:79:55:b6:4f:
         96:ab:99:de:02:e5:78:51:cb:29:88:7a:c9:c6:63:99:97:3c:
         dc:07:22:46:d0:8b:f6:75:1a:5c:43:1d:73:bb:b1:b8:10:75:
         33:dd:1b:b8:79:ff:27:c9:f9:0c:5e:3b:b9:b6:e5:82:40:fa:
         d5:f7:90:95:cc:59:b5:d0:2a:95:b7:d1:6e:cf:8e:4f:c9:39:
         f8:c6:3e:9b:5b:cf:ff:5f:95:70:6b:28:e8:83:ed:d9:74:0e:
         bc:e0:f4:37:99:eb:8b:fc:f9:01:31:77:b8:e1:0c:1a:1b:5e:
         6f:b0:3f:a1:6e:dc:da:18:dd:7f:1e:48:82:1d:0f:6c:ef:b4:
         1b:5b:03:8e:30:e9:84:9d:63:61:4a:be:9d:b4:d6:89:d5:3f:
         86:d9:f1:63:51:cf:c7:05:de:0b:9c:fb:14:99:18:4f:15:19:
         91:f3:56:37:dc:c3:3e:b9:0a:a4:2a:3d:dd:4c:94:fe:70:25:
         b6:22:8d:5b:cc:e1:18:fb:cd:7f:c5:18:6a:db:14:2e:d0:1c:
         2e:ec:d8:61:fc:0c:e9:7f:4b:07:b3:12:3e:e1:1b:48:d4:54:
         a2:ac:b3:74:1e:1d:dc:1a:87:b2:98:56:6f:00:66:8f:c2:4e:
         de:0b:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:09 2026 by rpki-client