This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa
File:                     3230302e33322e36362e302f32332d3234203d3e203133353931.roa (raw, json)
Hash identifier:          SumVwwpi/MQ66RY+KB7KJwanAGeQ+h74R6Me77ghCnk=
Subject key identifier:   72:B1:24:5B:90:BC:9E:B5:33:90:EF:03:CB:EE:ED:CC:1E:D2:E8:D0
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5B33500301DC10E0751A41FFE0D0CC63B1954D81
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa
Signing time:             Tue 06 Jan 2026 19:35:18 +0000
ROA not before:           Tue 06 Jan 2026 19:30:18 +0000
ROA not after:            Tue 05 Jan 2027 19:35:18 +0000
asID:                     13591
IP address blocks:        200.32.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:33:50:03:01:dc:10:e0:75:1a:41:ff:e0:d0:cc:63:b1:95:4d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:18 2026 GMT
            Not After : Jan  5 19:35:18 2027 GMT
        Subject: CN=72B1245B90BC9EB53390EF03CBEEEDCC1ED2E8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:07:e1:0c:b4:eb:80:2e:95:32:84:35:e3:
                    ac:45:f6:de:c4:54:ba:12:4f:16:35:a6:a5:d4:9b:
                    71:cf:ac:1d:74:73:75:f7:52:d0:97:ae:21:b8:56:
                    cd:06:1e:d7:02:44:b0:96:78:a3:87:f5:1a:a3:05:
                    95:d2:20:2a:79:c2:bc:59:8b:23:39:d9:38:e7:17:
                    78:e1:4e:fb:1a:de:ac:d6:b6:64:44:15:4c:47:ce:
                    a9:d1:82:53:a9:ad:9f:f4:6e:50:15:3b:90:6d:50:
                    6a:e3:52:70:9f:a2:bb:bc:b5:9b:22:0c:46:3d:80:
                    01:cb:c7:af:34:06:3a:3a:7c:25:7a:3b:36:91:c0:
                    d8:07:8f:f1:52:db:95:63:b2:0b:fa:45:81:30:f5:
                    f3:33:50:cc:d6:65:8e:aa:1f:18:7a:1a:d0:e3:4d:
                    e7:62:61:cd:4f:73:51:50:d3:4d:72:90:b0:ab:98:
                    08:f0:a8:cd:c6:a9:ef:05:a7:aa:62:e5:6b:93:5c:
                    72:c1:a4:79:62:e2:be:09:05:fb:d5:33:4d:f8:12:
                    5b:bb:34:5f:fb:b3:df:0c:8d:eb:04:f1:75:0b:cb:
                    e4:ad:f6:d9:29:88:dd:2f:59:92:de:a0:f8:93:36:
                    b1:a3:a2:cc:36:dd:3c:58:a5:c9:e0:d6:9b:c9:17:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:24:5B:90:BC:9E:B5:33:90:EF:03:CB:EE:ED:CC:1E:D2:E8:D0
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33322e36362e302f32332d3234203d3e203133353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:da:aa:ce:e0:2c:b7:c3:df:7e:91:7e:63:ae:89:83:92:27:
         c5:f8:0a:32:48:32:7b:4d:3d:7a:0b:1a:ca:dc:79:8d:44:a2:
         e7:4d:24:73:0d:76:5f:9b:38:dc:34:58:16:40:28:9f:8c:74:
         3d:a0:43:84:b2:03:88:56:e2:14:75:76:67:c3:e8:a4:44:b2:
         9a:5e:34:2d:28:19:9d:93:aa:be:e6:bf:c0:99:7e:a7:f1:c5:
         c4:02:d8:16:94:b3:38:d6:c7:3b:c9:5d:6d:2b:44:a7:6d:45:
         c6:cc:73:72:1a:6f:4f:eb:42:fe:0b:3f:1b:00:4a:13:dc:9a:
         7e:e4:47:52:3a:00:f6:0a:f2:16:b7:10:19:20:57:98:cd:07:
         8e:e3:fe:35:4e:1f:d1:d5:d6:65:8d:6f:b6:78:3e:0e:da:54:
         01:c0:da:73:25:3c:fd:51:c1:03:c0:69:13:28:17:cb:c9:b0:
         73:92:ea:c5:95:01:d9:c4:58:54:7d:f8:b6:11:14:18:fb:08:
         22:d8:ba:66:06:7d:c6:e2:89:eb:68:6f:dc:42:01:44:33:78:
         7f:99:ca:74:7e:92:92:7d:c4:ba:1d:26:b5:8c:f0:c4:66:75:
         32:cd:b0:42:59:95:f5:71:c6:65:42:74:0b:28:3a:76:3f:a6:
         e9:75:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:41:51 2026 by rpki-client