This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136382e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136382e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          lo4UIUo96a9/i3xHh35ZPWOGwo0gsiZRk0/PsOGQOes=
Subject key identifier:   47:F6:3C:0A:CD:D9:9A:71:78:40:8B:3D:8C:94:38:D8:A1:01:B7:76
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       7F2ACC05F1748AD9DE72997F544AE2660993E97E
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136382e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:46 +0000
ROA not before:           Tue 06 Jan 2026 20:45:46 +0000
ROA not after:            Tue 05 Jan 2027 20:50:46 +0000
asID:                     22541
IP address blocks:        200.75.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2a:cc:05:f1:74:8a:d9:de:72:99:7f:54:4a:e2:66:09:93:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:46 2026 GMT
            Not After : Jan  5 20:50:46 2027 GMT
        Subject: CN=47F63C0ACDD99A7178408B3D8C9438D8A101B776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:54:f3:31:3c:25:32:57:70:c8:bf:64:90:
                    47:da:45:ae:21:f0:70:e5:c1:c3:4b:cf:46:f1:6f:
                    7b:f8:23:4e:45:c1:9b:d3:2e:8f:9e:03:88:5a:32:
                    ec:84:35:c7:6a:dc:88:69:21:4e:43:8e:47:82:0a:
                    ce:e3:3f:d5:c9:bb:2d:f5:65:e3:64:b1:c5:a6:f8:
                    20:f5:d6:65:23:c0:cb:e9:04:45:24:25:02:25:fa:
                    66:1b:5b:91:8f:a0:ff:dc:f7:58:ce:89:b6:2b:6a:
                    01:91:cc:58:be:03:1c:8b:19:92:84:f0:48:5f:c2:
                    d0:1a:08:0c:37:32:a9:3e:fa:6a:44:69:cd:8e:7f:
                    d2:84:36:94:48:3b:af:1d:d6:21:fd:ba:1a:b3:70:
                    58:3a:de:35:6f:49:aa:03:03:48:d8:ef:1c:7e:c5:
                    18:c1:d4:9c:25:b1:bd:e5:32:8c:8e:3b:1b:eb:89:
                    45:a6:30:07:c7:df:a8:1b:6c:81:80:55:03:d5:a5:
                    c2:49:49:95:a1:d0:0e:47:82:e7:c5:de:80:ce:2d:
                    d5:69:74:2d:d7:5a:39:5e:66:17:37:c9:bb:54:c9:
                    2b:48:49:0d:fa:0f:a1:d8:93:c1:e0:7e:7d:db:cd:
                    40:0a:d9:91:7d:56:0a:cc:54:f6:7b:98:8d:0e:f8:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F6:3C:0A:CD:D9:9A:71:78:40:8B:3D:8C:94:38:D8:A1:01:B7:76
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136382e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:aa:09:2e:a0:de:c6:03:57:9c:22:70:d6:7c:fd:74:6c:
         b7:5b:e2:28:c4:4b:e9:9f:6c:81:39:8b:e3:23:93:14:17:60:
         43:de:d1:8c:b7:ea:e1:44:be:34:1c:df:38:2d:4b:84:75:64:
         51:61:80:23:36:7c:8b:c2:ca:d8:5d:97:ad:c5:2a:4d:f4:08:
         25:ae:bc:5d:a1:92:04:76:7c:f8:c9:d2:01:61:dc:c4:6f:7f:
         26:c4:4d:25:7d:28:95:2b:43:9d:b7:88:31:4b:14:e9:52:45:
         82:fa:14:ca:d1:c3:e9:be:83:5d:68:ea:a6:b6:a1:d6:7e:b9:
         c6:ae:01:cd:ee:fc:8c:91:89:0a:93:fa:b9:b2:c7:73:44:e2:
         cd:c7:21:59:51:27:7b:ad:40:01:e5:2d:e3:ad:10:02:33:81:
         f6:b9:74:3f:ab:b3:ce:3d:1e:fb:ca:ec:f1:88:fb:7b:ca:73:
         fa:2f:4e:d6:86:98:07:e4:28:8a:d2:bd:6d:1c:2e:d4:cd:e0:
         0c:9a:92:3a:7e:59:6a:90:b8:12:57:ef:d5:77:02:07:1b:f0:
         1c:e1:26:c2:40:bb:a6:84:cf:40:48:0a:be:2e:39:45:22:cf:
         ac:f3:71:de:0a:35:99:c0:b2:03:28:ee:ee:0a:62:ea:7a:e6:
         9a:23:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:42 2026 by rpki-client