This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa
File:                     3230302e37352e3132382e302f32302d3234203d3e203131353632.roa (raw, json)
Hash identifier:          xt7wYZbhwdHtDFTMYxYXLx/N+fy/DAOtPuhiRUYjw3U=
Subject key identifier:   6F:AF:0F:C9:BC:F7:53:E4:85:A5:56:58:93:9A:8A:BB:96:12:6B:A4
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       0B79E3A8B1A7A7BBB037D150CCAA8C2991A7216C
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa
Signing time:             Tue 06 Jan 2026 18:59:13 +0000
ROA not before:           Tue 06 Jan 2026 18:54:13 +0000
ROA not after:            Tue 05 Jan 2027 18:59:13 +0000
asID:                     11562
IP address blocks:        200.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:79:e3:a8:b1:a7:a7:bb:b0:37:d1:50:cc:aa:8c:29:91:a7:21:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Jan  6 18:54:13 2026 GMT
            Not After : Jan  5 18:59:13 2027 GMT
        Subject: CN=6FAF0FC9BCF753E485A55658939A8ABB96126BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:9b:b2:a3:0b:75:03:16:7b:3b:4f:e2:2a:
                    b4:1c:c1:9c:13:32:47:87:56:23:bf:76:73:7a:9c:
                    f1:4f:aa:1f:95:15:b3:af:ca:8b:b6:c9:69:5f:4f:
                    d0:5c:d5:d4:f5:d9:5d:64:2c:d6:16:b3:74:71:06:
                    e3:26:8e:ed:df:29:6a:d9:6d:1c:ee:a0:fe:78:fa:
                    d7:9b:92:2e:f4:48:9f:cf:d2:1c:17:69:53:64:be:
                    e8:69:ba:be:3a:58:5a:84:f2:e5:ed:17:c5:77:6a:
                    85:a9:71:94:c6:fe:3e:3c:f7:b7:4d:19:d4:83:27:
                    96:73:f4:a0:ba:64:c1:07:bb:25:91:7d:a8:4a:2b:
                    61:5b:db:a6:c4:a1:89:d5:28:13:ca:6a:ea:cf:d6:
                    ed:36:ef:b6:7a:80:1c:dc:4e:6c:da:10:2c:21:5f:
                    b0:8a:69:93:6a:4e:f8:7a:a6:9e:f7:36:ef:45:1d:
                    8f:14:a8:9d:e5:ce:51:ba:52:17:65:63:29:79:af:
                    ce:a6:65:ca:b9:70:18:c0:f3:8c:f5:a6:fc:51:9f:
                    0d:e0:f9:9b:05:db:71:95:56:d4:55:3b:75:76:71:
                    cb:13:93:7b:74:94:26:a9:3f:d1:60:1b:6e:95:85:
                    5b:8e:5d:7f:9c:8c:c6:d4:91:d7:7d:60:34:59:c6:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:0F:C9:BC:F7:53:E4:85:A5:56:58:93:9A:8A:BB:96:12:6B:A4
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:eb:51:93:05:4e:3a:84:5c:b1:22:c2:67:57:bc:66:c2:
         84:44:a3:c8:7f:d5:bf:00:22:02:84:0c:9a:a9:a2:a4:1d:a4:
         7c:39:58:a9:0d:d2:17:af:e6:2e:e0:7f:2d:70:57:b2:0c:f2:
         d3:55:42:50:64:12:14:c1:51:39:fd:a0:a2:27:9d:c3:90:4b:
         1f:fa:46:a8:a5:a6:a5:c8:2d:ef:00:48:bb:e4:5e:1f:22:c0:
         a7:c8:2c:85:0e:bb:ff:d1:ed:69:80:a3:30:b0:89:6b:a0:3d:
         1a:d8:9f:31:fb:46:14:a3:53:01:e6:96:e4:ac:27:a1:90:79:
         7d:d1:01:e0:43:7d:40:96:ef:c5:56:d3:de:81:6b:10:cc:c8:
         85:bf:ef:05:e3:42:e9:37:66:a1:e6:0a:fc:3c:5d:10:e9:fe:
         53:94:17:76:bc:28:e9:a3:5f:66:fd:fb:69:0d:eb:af:0c:72:
         25:3c:cc:15:14:71:c5:a7:93:17:cc:f9:62:7e:96:83:48:c2:
         cc:86:6e:9c:10:a8:72:3d:60:6d:f6:78:a7:cd:bc:4d:27:ed:
         c4:47:d1:d9:ef:cd:16:37:50:89:26:57:5f:75:c0:f8:41:f2:
         94:a7:4a:59:5e:75:d4:d2:f3:c8:f0:59:07:d1:23:aa:06:04:
         4a:a1:a4:33
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC3njqLGnp7uwN9FQzKqMKZGnIWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2QTdBNjEwNjdDQURENjU5MjkxOTFGMzU1NjAyMkJE
MUQyRTA5QTAeFw0yNjAxMDYxODU0MTNaFw0yNzAxMDUxODU5MTNaMDMxMTAvBgNV
BAMTKDZGQUYwRkM5QkNGNzUzRTQ4NUE1NTY1ODkzOUE4QUJCOTYxMjZCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuJuyowt1AxZ7O0/iKrQcwZwT
MkeHViO/dnN6nPFPqh+VFbOvyou2yWlfT9Bc1dT12V1kLNYWs3RxBuMmju3fKWrZ
bRzuoP54+tebki70SJ/P0hwXaVNkvuhpur46WFqE8uXtF8V3aoWpcZTG/j4897dN
GdSDJ5Zz9KC6ZMEHuyWRfahKK2Fb26bEoYnVKBPKaurP1u0277Z6gBzcTmzaECwh
X7CKaZNqTvh6pp73Nu9FHY8UqJ3lzlG6UhdlYyl5r86mZcq5cBjA84z1pvxRnw3g
+ZsF23GVVtRVO3V2ccsTk3t0lCapP9FgG26VhVuOXX+cjMbUkdd9YDRZxk5VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUb68Pybz3U+SFpVZYk5qKu5YSa6QwHwYDVR0j
BBgwFoAUjWp6YQZ8rdZZKRkfNVYCK9HS4JowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjEzQkVBQzhDMjVCMEFERDRCQzI0MUJCNkE1REJDOTA3
MzgzQTQ1OEQxM0UxMjdFRTUxMzcwNDRCQUI1ODJBLzAvOEQ2QTdBNjEwNjdDQURE
NjU5MjkxOTFGMzU1NjAyMkJEMUQyRTA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDZBN0E2MTA2N0NBREQ2NTky
OTE5MUYzNTU2MDIyQkQxRDJFMDlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTIxM0JFQUM4QzI1QjBBREQ0QkMyNDFCQjZBNURCQzkwNzM4M0E0NThE
MTNFMTI3RUU1MTM3MDQ0QkFCNTgyQS8wLzMyMzAzMDJlMzczNTJlMzEzMjM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMTM1MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhLgDAN
BgkqhkiG9w0BAQsFAAOCAQEAlMbrUZMFTjqEXLEiwmdXvGbChESjyH/VvwAiAoQM
mqmipB2kfDlYqQ3SF6/mLuB/LXBXsgzy01VCUGQSFMFROf2goiedw5BLH/pGqKWm
pcgt7wBIu+ReHyLAp8gshQ67/9HtaYCjMLCJa6A9GtifMftGFKNTAeaW5KwnoZB5
fdEB4EN9QJbvxVbT3oFrEMzIhb/vBeNC6TdmoeYK/DxdEOn+U5QXdrwo6aNfZv37
aQ3rrwxyJTzMFRRxxaeTF8z5Yn6Wg0jCzIZunBCocj1gbfZ4p828TSftxEfR2e/N
FjdQiSZXX3XA+EHylKdKWV511NLzyPBZB9EjqgYESqGkMw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:11 2026 by rpki-client