This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
File:                     3230302e32332e37322e302f32332d3233203d3e2036353033.roa (raw, json)
Hash identifier:          WxKKsjHo+cTdVDIf2qs9BMvypOqiA/sccyDzRXxV+GM=
Subject key identifier:   FF:3E:ED:63:39:37:39:DF:22:3B:DC:8C:43:54:88:12:E0:D6:93:08
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       3F1CEF9FC2622A4AF0CC66C6EC1336F601C156E5
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:14:49 +0000
ROA not before:           Tue 06 Jan 2026 19:09:49 +0000
ROA not after:            Tue 05 Jan 2027 19:14:49 +0000
asID:                     6503
IP address blocks:        200.23.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:ef:9f:c2:62:2a:4a:f0:cc:66:c6:ec:13:36:f6:01:c1:56:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:49 2026 GMT
            Not After : Jan  5 19:14:49 2027 GMT
        Subject: CN=FF3EED63393739DF223BDC8C43548812E0D69308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:87:e9:18:c5:c7:66:b8:01:ae:0c:09:9f:
                    3d:fd:61:4b:30:4a:21:75:f6:d3:3b:af:84:4d:35:
                    28:19:55:63:67:8b:3c:0d:4c:96:89:9d:71:b0:0c:
                    05:f6:34:b0:b7:43:1a:c2:c4:8c:e4:ca:b6:a2:2c:
                    8e:03:a9:db:f1:a7:cb:e4:3f:fe:5c:6a:03:52:72:
                    74:2f:6e:c5:0a:ae:d1:9c:cc:6e:a5:5d:f1:98:17:
                    e2:f5:e4:d3:40:0c:ba:69:9d:a0:fc:9a:e8:f9:b9:
                    e7:34:f3:94:d2:3a:f2:b8:77:d5:2a:8d:dc:4e:10:
                    e9:44:18:93:ea:c0:92:3e:0a:64:52:09:5d:52:b9:
                    86:57:0e:04:05:d2:7e:99:df:bb:79:13:35:dc:98:
                    c0:b6:7f:8d:31:78:d7:57:14:84:08:4f:40:ca:3d:
                    c4:3a:0b:9e:aa:20:7a:3b:99:ae:0c:e2:c0:84:de:
                    21:9b:b4:f0:97:ab:0f:f9:92:9c:1c:43:3e:40:8b:
                    97:e8:a6:47:9c:bf:f1:b5:2b:1a:93:bf:f7:bd:a3:
                    65:5a:91:38:5d:65:08:67:7e:43:7d:57:9b:fb:4d:
                    0b:76:db:21:ff:9b:5a:ce:f8:5d:ac:ec:fa:2c:65:
                    c0:73:4d:e4:b9:df:76:4a:a2:9a:a0:14:91:66:81:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3E:ED:63:39:37:39:DF:22:3B:DC:8C:43:54:88:12:E0:D6:93:08
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e32332e37322e302f32332d3233203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:9a:26:26:98:9d:10:42:4f:36:ba:ab:a1:9f:56:58:d9:b6:
         8f:cc:44:3b:23:26:42:79:9f:98:4a:0c:81:08:ce:56:e5:e3:
         7e:83:48:7e:b5:67:bd:bf:f2:de:51:a8:2e:e4:62:dc:a7:9e:
         f5:19:e4:24:7d:51:6a:22:a9:ee:c2:b7:7a:ad:60:7b:18:71:
         da:1f:e1:eb:69:e5:b8:71:ff:04:01:13:c6:5a:1f:ab:2b:77:
         2e:c5:94:4f:01:95:c6:3a:af:dc:26:8e:e3:1c:d4:e0:d7:9a:
         af:8b:ab:ed:16:d5:de:5d:86:f0:0c:71:1f:f8:d7:bd:46:37:
         ce:97:7b:66:8a:41:5a:d6:93:17:19:3d:24:69:f1:b3:66:00:
         ac:36:02:a8:be:53:75:02:de:b1:75:7e:8b:ac:e8:83:50:80:
         aa:eb:f6:c4:08:49:bd:60:48:b4:9b:ed:d3:bd:5b:25:7f:de:
         31:0a:ed:fe:00:37:88:7c:c3:be:9e:0f:82:07:fc:30:bc:9c:
         84:9e:a6:55:9a:20:53:eb:a4:11:bd:b2:47:4b:af:67:c8:25:
         44:de:94:df:95:76:dd:66:38:09:5e:71:3e:97:37:93:b1:b7:
         c6:95:2a:72:a3:7e:48:95:78:1d:46:18:71:34:58:52:35:8f:
         de:a6:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:22 2026 by rpki-client