This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
File:                     3230302e36312e3136302e302f31392d3234203d3e203136383134.roa (raw, json)
Hash identifier:          N1A3khJ8rQ9aWVJ4gcGBeBdmoioZTfjyT4oij5oQTZI=
Subject key identifier:   27:28:15:24:14:1A:ED:7E:29:7B:39:36:0D:C4:B1:83:59:4F:F1:FB
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       28DA529A33B9FD62FD09640A0C99590C23705D85
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
Signing time:             Tue 06 Jan 2026 20:55:06 +0000
ROA not before:           Tue 06 Jan 2026 20:50:06 +0000
ROA not after:            Tue 05 Jan 2027 20:55:06 +0000
asID:                     16814
IP address blocks:        200.61.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:da:52:9a:33:b9:fd:62:fd:09:64:0a:0c:99:59:0c:23:70:5d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:06 2026 GMT
            Not After : Jan  5 20:55:06 2027 GMT
        Subject: CN=27281524141AED7E297B39360DC4B183594FF1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:5b:d4:70:87:9a:16:32:11:5f:51:d0:90:
                    b1:3d:4c:97:f0:47:6c:1d:3d:81:07:ba:a6:83:7c:
                    4c:88:51:43:9d:b7:f1:1a:2a:33:13:43:75:e6:5c:
                    ed:62:40:4d:4a:ae:7c:29:a3:c4:f9:10:5e:58:7d:
                    b3:8f:69:12:b0:a9:5d:25:59:1c:08:b1:cb:78:c2:
                    45:40:34:21:09:a7:cd:41:fb:4a:dd:be:3f:9c:01:
                    4b:96:db:2d:6d:98:c6:9c:c0:02:69:3a:c6:47:2c:
                    d7:94:32:84:42:f2:36:47:ed:42:13:35:a8:69:cd:
                    35:4f:55:76:7e:79:0e:50:4c:c6:2c:d7:4b:1a:b1:
                    2c:7c:b1:2c:11:2a:ad:0c:9d:73:2b:b9:78:46:d4:
                    3a:e0:f4:79:12:63:5c:ac:38:cb:ad:60:05:be:e1:
                    8a:df:93:b2:ec:94:5b:af:d1:09:f4:48:c6:1d:49:
                    01:25:0f:3a:6b:b8:21:f6:c7:b3:1e:c3:f0:fd:4b:
                    1a:b3:04:2a:84:af:86:6f:7e:f2:45:79:43:37:68:
                    cd:ff:2b:1a:c7:b7:a1:55:a0:28:5d:da:3a:00:4a:
                    50:f3:a0:7b:30:b2:eb:32:cb:f6:e3:9c:c0:59:e5:
                    fa:f1:00:3f:76:27:e4:a9:73:e3:44:3f:a4:b9:2e:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:15:24:14:1A:ED:7E:29:7B:39:36:0D:C4:B1:83:59:4F:F1:FB
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:be:d7:eb:50:a5:23:f4:80:31:cb:13:3a:46:9a:f8:9b:
         9e:86:8a:26:84:de:67:af:55:6c:45:db:92:3c:0c:09:94:0b:
         19:7a:c2:27:15:57:be:5f:84:36:66:c5:f8:42:f3:e6:55:c8:
         1a:f4:00:e2:82:13:e9:9a:4e:95:d7:dd:d2:5d:5b:3c:c5:0c:
         6d:a9:b8:57:35:3a:46:7a:2c:74:e1:e8:f1:98:90:f8:c9:3d:
         46:45:15:c4:97:21:e7:30:1e:6d:cd:af:79:ed:44:57:cd:26:
         8b:ee:cb:f7:e1:e8:20:59:2a:11:d6:96:c7:42:bd:71:08:48:
         c5:e4:9f:86:e5:94:bf:2f:07:e0:9b:20:17:6c:75:5c:50:1d:
         82:da:5b:8f:e9:d0:ae:3e:ba:b7:7c:8e:1b:8d:fc:5a:b2:ea:
         a2:e8:be:01:78:bc:64:49:8b:33:f6:d6:0e:49:81:26:ae:1b:
         ec:05:ca:6c:bd:24:fc:b6:d2:bd:3e:4f:d8:06:b0:d5:1b:75:
         e6:e0:59:51:44:a9:a5:53:dd:87:86:43:2a:d7:ed:b2:76:ef:
         88:6a:55:da:ef:57:0b:6a:4d:a4:b1:87:c0:89:c1:f3:e1:ce:
         bb:a6:34:62:7e:34:37:5b:f1:39:91:02:8b:ce:78:f7:ab:0f:
         b7:8f:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:57 2026 by rpki-client