This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3232322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          NaIdNmFIjxtZnPqoO4c+8S4RoanmxYh9msoAV5aaNj4=
Subject key identifier:   0E:D0:64:A4:C7:2A:40:43:75:9C:29:39:E5:3E:4C:F7:09:91:F5:46
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       54E7780031E6FF45932CBB430C2347FCDD6E0EF0
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:30 +0000
ROA not before:           Tue 06 Jan 2026 19:39:30 +0000
ROA not after:            Tue 05 Jan 2027 19:44:30 +0000
asID:                     20015
IP address blocks:        200.71.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e7:78:00:31:e6:ff:45:93:2c:bb:43:0c:23:47:fc:dd:6e:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:30 2026 GMT
            Not After : Jan  5 19:44:30 2027 GMT
        Subject: CN=0ED064A4C72A4043759C2939E53E4CF70991F546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:1f:06:ea:6c:c6:13:d5:fa:7c:01:16:25:
                    77:73:50:00:c5:e6:c5:16:ef:77:a6:76:fc:1b:06:
                    d3:b3:cf:4a:3f:79:7c:61:87:18:5a:78:6e:fe:d6:
                    22:86:9c:4a:45:0d:35:56:26:b2:fa:36:dd:d9:21:
                    1b:05:94:3a:46:86:92:3e:2c:e2:76:c7:02:15:c4:
                    df:c8:82:c9:5d:a1:db:22:d4:80:76:ca:bc:2a:49:
                    95:8f:09:13:23:34:84:27:0f:44:14:c5:e7:a1:36:
                    33:fc:8f:9c:dc:f1:46:b8:15:5e:34:65:26:04:6c:
                    49:8b:37:d6:d8:62:24:f0:a9:89:56:ef:0c:9f:22:
                    bf:56:7d:b4:67:c0:c9:93:97:33:62:de:8d:56:ea:
                    0c:75:27:b2:fb:0a:c2:a0:47:4a:f7:c5:55:47:f5:
                    55:83:31:b8:c0:00:83:11:ab:a3:4d:a7:8e:fc:14:
                    0b:e7:e1:86:ae:f9:c8:03:0c:35:43:58:3c:25:a3:
                    48:e0:9f:8b:f3:1a:b3:a3:47:ba:3d:b1:af:17:d0:
                    38:45:53:f1:ec:df:8b:09:41:27:8e:40:2d:63:03:
                    4a:92:6d:7d:c5:a8:d6:66:0f:ba:84:28:e0:bc:9d:
                    86:95:11:f7:8e:38:25:0c:5f:8e:7a:67:a7:f5:1b:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:64:A4:C7:2A:40:43:75:9C:29:39:E5:3E:4C:F7:09:91:F5:46
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3232322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a2:2d:b1:55:9d:98:1b:15:93:6f:9d:d3:ad:21:7e:d0:a5:
         a2:4f:a4:1e:98:fe:4f:02:6a:e8:68:c0:77:1c:cb:ed:92:6f:
         43:c8:23:1e:e9:8b:f5:bd:c5:ed:b7:ee:8f:3c:75:27:6c:41:
         4f:7d:48:92:51:58:9e:10:bd:a4:b9:33:2e:21:25:e2:64:9c:
         7a:5a:03:35:f3:e4:af:d7:f3:4c:62:40:8d:f6:92:23:1d:11:
         d7:37:e4:d7:58:02:a9:47:6c:14:b0:12:de:3a:79:fe:8a:e5:
         19:72:47:d3:93:1b:b5:03:9b:fc:61:67:bd:70:6b:1e:20:aa:
         fa:84:91:2a:c3:eb:67:45:90:8b:c4:3b:cd:b9:b4:78:66:01:
         12:ea:78:c3:48:1b:71:71:a9:54:83:9f:30:be:4e:57:95:8f:
         fa:21:22:30:22:88:47:5a:bb:e9:43:22:75:c4:9e:5f:1a:47:
         74:38:37:25:ba:40:fe:a9:39:65:43:52:32:12:b1:35:4e:b9:
         40:84:ce:13:c6:d8:6e:f3:64:ed:de:00:78:48:c7:8f:24:31:
         11:69:c1:d3:73:29:80:ce:b4:72:18:fe:40:63:7f:3e:0d:d7:
         63:a6:c4:a9:46:14:ab:e8:dd:91:a7:9b:ba:ad:ac:49:2b:63:
         1e:72:a0:e0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVOd4ADHm/0WTLLtDDCNH/N1uDvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MzBaFw0yNzAxMDUxOTQ0MzBaMDMxMTAvBgNV
BAMTKDBFRDA2NEE0QzcyQTQwNDM3NTlDMjkzOUU1M0U0Q0Y3MDk5MUY1NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVR8G6mzGE9X6fAEWJXdzUADF
5sUW73emdvwbBtOzz0o/eXxhhxhaeG7+1iKGnEpFDTVWJrL6Nt3ZIRsFlDpGhpI+
LOJ2xwIVxN/Igsldodsi1IB2yrwqSZWPCRMjNIQnD0QUxeehNjP8j5zc8Ua4FV40
ZSYEbEmLN9bYYiTwqYlW7wyfIr9WfbRnwMmTlzNi3o1W6gx1J7L7CsKgR0r3xVVH
9VWDMbjAAIMRq6NNp478FAvn4Yau+cgDDDVDWDwlo0jgn4vzGrOjR7o9sa8X0DhF
U/Hs34sJQSeOQC1jA0qSbX3FqNZmD7qEKOC8nYaVEfeOOCUMX456Z6f1G+R/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDtBkpMcqQEN1nCk55T5M9wmR9UYwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH3jAN
BgkqhkiG9w0BAQsFAAOCAQEAuKItsVWdmBsVk2+d060hftClok+kHpj+TwJq6GjA
dxzL7ZJvQ8gjHumL9b3F7bfujzx1J2xBT31IklFYnhC9pLkzLiEl4mSceloDNfPk
r9fzTGJAjfaSIx0R1zfk11gCqUdsFLAS3jp5/orlGXJH05MbtQOb/GFnvXBrHiCq
+oSRKsPrZ0WQi8Q7zbm0eGYBEup4w0gbcXGpVIOfML5OV5WP+iEiMCKIR1q76UMi
dcSeXxpHdDg3JbpA/qk5ZUNSMhKxNU65QITOE8bYbvNk7d4AeEjHjyQxEWnB03Mp
gM60chj+QGN/Pg3XY6bEqUYUq+jdkaebuq2sSStjHnKg4A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:03:03 2026 by rpki-client