This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e382e302e302f31362d3234203d3e203231383236.roa
File:                     3230302e382e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          4+EmjVbMWNMOTDiLcSMR64FYl+DWBVKqZfMkM1zXdQ8=
Subject key identifier:   1C:81:15:BF:F6:F5:A2:45:B2:9D:6D:86:B6:3B:B3:85:1E:7E:1A:14
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       20FF63FD307D6065743D2E7F5AA64732B0847635
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e382e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 06 Jan 2026 19:37:42 +0000
ROA not before:           Tue 06 Jan 2026 19:32:42 +0000
ROA not after:            Tue 05 Jan 2027 19:37:42 +0000
asID:                     21826
IP address blocks:        200.8.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ff:63:fd:30:7d:60:65:74:3d:2e:7f:5a:a6:47:32:b0:84:76:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Jan  6 19:32:42 2026 GMT
            Not After : Jan  5 19:37:42 2027 GMT
        Subject: CN=1C8115BFF6F5A245B29D6D86B63BB3851E7E1A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:99:2c:d0:e6:53:8a:43:00:fe:c3:f4:4b:
                    9b:12:86:df:82:1e:b3:67:0f:d2:51:66:da:25:5d:
                    c7:8a:44:e6:58:f8:81:b5:9e:7e:b1:46:9b:5b:40:
                    ef:41:7c:3a:62:33:2e:b7:6c:12:84:39:8b:69:d1:
                    a4:8b:99:a4:5b:a3:d9:21:e2:c6:e3:f1:1c:10:68:
                    66:0f:39:06:82:5c:b0:fb:b5:0d:38:3f:71:d7:2f:
                    05:8f:1c:e2:b4:9d:27:68:b4:1f:e6:2d:14:7b:34:
                    2c:65:64:d3:c2:ba:61:3b:10:db:32:ff:a5:89:7c:
                    ce:da:ce:80:ec:b6:01:4a:e2:ab:5a:ec:f8:b6:54:
                    60:b3:fc:b3:44:ec:29:5f:d9:71:d1:fc:e7:94:f1:
                    29:63:55:ee:9e:57:fe:16:a6:26:22:dc:f3:f0:8c:
                    cd:aa:f2:14:6f:6b:df:1d:73:40:65:0e:2c:84:04:
                    04:11:83:e7:88:2d:79:06:30:74:f2:4e:37:63:5d:
                    f9:25:17:7c:7a:72:73:b9:47:50:f1:41:c5:46:29:
                    81:ad:59:bd:c7:da:49:e8:15:79:89:38:a7:0c:cd:
                    94:af:d5:12:34:d0:13:b6:65:3d:60:91:f1:bb:ee:
                    1a:0f:7c:21:2e:d8:0e:94:f0:22:0a:b2:4e:59:45:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:15:BF:F6:F5:A2:45:B2:9D:6D:86:B6:3B:B3:85:1E:7E:1A:14
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3230302e382e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:88:b0:a5:b4:81:3c:fa:b6:a5:b3:26:05:7f:56:29:a4:62:
         ce:d2:a9:41:80:4e:a4:74:1b:8a:c2:b5:18:1a:1b:f0:e9:11:
         d6:ae:ad:00:6c:08:51:de:67:06:6d:4a:41:b6:8a:1f:48:f6:
         5b:44:a9:a2:6e:9e:67:09:84:88:f1:46:26:a7:a4:14:60:9f:
         5d:b3:4f:37:0e:c9:ab:bd:af:4d:7a:d8:2d:d0:75:7a:04:25:
         ea:32:61:95:27:82:90:78:ad:64:65:a0:b4:5e:23:17:63:1b:
         68:9b:be:74:2f:5a:9d:7c:68:90:0a:db:e5:8b:88:14:2f:04:
         2e:4b:f9:9c:a9:8f:06:e2:2a:b3:8b:e2:f9:ec:fb:04:54:f9:
         4b:53:b2:12:e0:3d:87:82:d9:ad:08:af:82:fe:f5:aa:4b:3f:
         95:46:34:e2:24:5b:b4:d9:6b:79:18:58:c6:3f:87:0c:ed:8f:
         5d:92:e9:ad:1c:5f:b1:54:8b:e4:aa:07:6e:ce:55:4e:16:1b:
         b2:26:06:cd:b4:2b:ba:39:36:c5:10:46:54:1a:67:80:89:83:
         df:12:14:55:f5:0e:64:fe:4f:49:98:da:51:ac:60:6a:10:23:
         4e:81:1e:2e:60:4b:f8:f0:84:02:b0:5c:60:25:13:b3:ff:c4:
         a6:c4:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:37 2026 by rpki-client