This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
File:                     3230302e36382e36342e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          W8RYn4gzQsK7h5Ul0i24VN/DgGvI84ZSGxu6mstqRSQ=
Subject key identifier:   96:8A:F0:08:0C:B3:A7:7E:D0:9E:85:76:72:6D:FE:43:AD:1F:9B:88
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       57AE11D3DF2B7FEE960A6784A0F6DA912A75C1AA
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 06 Jan 2026 20:55:07 +0000
ROA not before:           Tue 06 Jan 2026 20:50:07 +0000
ROA not after:            Tue 05 Jan 2027 20:55:07 +0000
asID:                     16814
IP address blocks:        200.68.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ae:11:d3:df:2b:7f:ee:96:0a:67:84:a0:f6:da:91:2a:75:c1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:07 2026 GMT
            Not After : Jan  5 20:55:07 2027 GMT
        Subject: CN=968AF0080CB3A77ED09E8576726DFE43AD1F9B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:98:ca:dc:6b:e0:ea:11:5e:4a:9c:93:a8:
                    08:08:4f:22:1d:4c:d9:78:1f:fd:e9:21:53:49:28:
                    87:b4:15:6d:3f:82:b4:9c:36:d0:d6:09:01:03:1a:
                    53:2f:23:a7:8c:88:5d:1c:31:9c:ce:44:ce:b5:7a:
                    90:95:3e:b5:7c:10:80:d6:11:2c:78:ea:b9:45:c4:
                    93:80:a6:cd:0b:42:f8:56:a4:6a:ca:a6:ac:5a:0c:
                    5a:ce:02:b0:22:a4:3b:9f:f4:7e:cd:11:93:fa:ad:
                    29:c1:63:23:9c:74:6a:36:6e:a5:7e:96:26:52:ac:
                    5d:1e:dc:b6:69:b6:ae:11:9a:dc:e3:fd:ec:14:b8:
                    3a:9f:43:9b:ea:bb:9f:8a:4b:c6:d3:14:35:52:36:
                    d4:5c:45:ad:ba:74:f9:8d:6a:cf:5f:eb:0e:63:c1:
                    44:06:c1:5e:9d:f1:80:9b:98:ab:1f:f8:e5:7a:f8:
                    f6:6b:b8:29:ee:26:96:37:e8:0c:ba:ca:43:9f:62:
                    c9:d2:42:78:87:09:d6:89:27:8e:29:ab:04:9b:07:
                    f4:61:e1:2c:76:2a:81:29:d8:0e:a2:41:1b:fc:51:
                    95:b6:de:ed:2c:12:eb:ba:eb:08:40:47:4d:9f:ab:
                    3a:f0:c1:a3:fd:09:69:8f:3d:2c:6d:04:ec:ff:36:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8A:F0:08:0C:B3:A7:7E:D0:9E:85:76:72:6D:FE:43:AD:1F:9B:88
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36382e36342e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.68.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:0b:80:a3:a4:db:fb:34:cd:74:c3:8c:6b:dd:15:c8:09:
         bf:b8:d8:63:60:0d:e4:55:6e:b6:fb:a2:93:d9:88:7d:26:d0:
         8c:e1:66:34:fa:36:a9:32:d8:a1:f0:1b:b9:5c:8a:3f:9c:cf:
         b5:f2:b2:a5:c9:c8:f1:bb:9a:7a:8a:23:05:e1:40:09:89:2d:
         29:03:d7:f9:12:b8:ca:c2:52:58:4e:48:50:49:a0:c5:f6:77:
         2e:65:40:ea:03:35:7c:59:cc:cc:7c:08:d8:32:1a:51:02:34:
         98:84:75:ff:35:11:3c:3a:15:72:49:9b:6b:fe:f9:6b:d0:ae:
         48:ac:f9:45:67:c8:48:3d:5c:af:1b:45:7f:4a:62:ba:18:ec:
         d6:e6:66:a0:a5:e8:6d:63:6c:18:f0:ea:ca:7e:c6:39:c1:f4:
         35:a8:16:1e:7e:ab:91:26:6c:63:fc:18:33:ab:67:5e:8a:a9:
         70:56:3b:21:58:9f:31:b8:00:5f:89:0d:70:4f:70:76:37:3a:
         fd:0a:e1:02:9f:67:49:ca:51:3f:88:4b:76:4f:fd:9f:a9:bb:
         3b:0d:eb:b5:64:b7:a5:33:f3:ae:cb:e5:28:ce:37:9a:22:0e:
         1b:c5:9d:79:68:53:ba:c3:c4:82:32:1a:d1:93:c4:1d:2c:b2:
         fb:ca:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:48 2026 by rpki-client