This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa
File:                     3230302e34312e33342e302f32332d3234203d3e20323633323330.roa (raw, json)
Hash identifier:          fiCTzqqAwrkgNBqueTxYf9k0L5fuT2+Lsh7LeddkTlI=
Subject key identifier:   70:0D:6C:3B:86:EB:A9:F4:EE:9C:4E:B3:E5:66:29:69:BA:54:0B:8E
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       3B3FA5BB0458548E6679DDCE71890E94523D8F9F
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa
Signing time:             Tue 06 Jan 2026 19:35:13 +0000
ROA not before:           Tue 06 Jan 2026 19:30:13 +0000
ROA not after:            Tue 05 Jan 2027 19:35:13 +0000
asID:                     263230
IP address blocks:        200.41.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3f:a5:bb:04:58:54:8e:66:79:dd:ce:71:89:0e:94:52:3d:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:13 2026 GMT
            Not After : Jan  5 19:35:13 2027 GMT
        Subject: CN=700D6C3B86EBA9F4EE9C4EB3E5662969BA540B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5a:04:6d:91:21:b3:ac:16:a3:ca:8c:0f:b2:
                    5d:8f:63:8c:a2:21:70:8b:8d:13:f1:5c:c6:da:ba:
                    33:e7:31:da:0a:30:09:b6:b5:74:15:ff:18:ef:1e:
                    54:07:8f:68:15:e9:87:34:16:20:c8:04:ba:38:3c:
                    91:a8:dd:29:59:a7:da:c1:cf:f2:b3:0d:a3:e1:65:
                    2d:eb:1d:87:d8:ba:fc:75:4e:eb:8c:7b:f0:68:c4:
                    c0:9e:07:a9:73:b7:db:57:d2:aa:ad:e3:f3:cc:a0:
                    d1:6f:f5:7a:ad:62:14:c4:8c:4d:d1:c8:8d:29:65:
                    01:0c:d9:ca:d3:b1:ac:0d:57:74:6d:7c:a3:4f:f1:
                    16:d7:24:0c:03:1f:ee:e3:ff:6a:e7:27:df:20:8d:
                    ca:3e:8c:ea:b0:81:83:06:7b:ba:60:24:8b:ed:30:
                    25:8e:65:fd:25:25:e7:59:9a:43:2f:6e:79:d3:42:
                    b4:fa:58:0a:14:e4:63:90:38:6d:87:05:e3:64:c4:
                    45:3d:e1:88:81:81:5e:82:40:24:7e:74:25:b4:ba:
                    06:27:29:6e:3d:95:4b:a1:00:e1:e8:1f:85:ac:6f:
                    f6:35:6c:94:1b:8e:f5:e0:76:a5:70:db:8b:59:29:
                    be:b0:3b:e2:52:92:e0:2b:7a:3b:f5:de:67:54:d1:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0D:6C:3B:86:EB:A9:F4:EE:9C:4E:B3:E5:66:29:69:BA:54:0B:8E
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e33342e302f32332d3234203d3e20323633323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:df:4c:6c:a6:7f:b8:ad:4d:b9:80:6a:1d:48:63:8d:1a:
         69:de:6e:4d:36:8e:99:e3:cc:1e:29:be:c7:85:e3:97:d7:b8:
         64:08:fb:d6:ff:01:08:90:f4:df:52:cb:5e:88:cc:3b:13:48:
         87:7e:25:5d:47:b6:3b:9d:cc:ce:71:1d:ac:48:cc:5c:a9:76:
         5a:e6:8a:c9:4d:63:cd:aa:20:16:9b:3e:00:fa:b1:f6:c3:07:
         10:56:5c:18:01:ee:1a:64:54:81:e4:30:af:dd:d3:42:18:00:
         ec:d3:fe:67:86:75:cc:0a:8e:e4:73:32:19:4f:f0:88:b3:08:
         c5:39:86:8a:78:1d:d9:fb:3e:24:3e:56:b9:0c:5e:ae:77:d3:
         f4:94:32:e8:c8:cf:23:13:14:e3:74:9c:f2:67:0d:0a:7c:3d:
         94:e0:b2:c5:a9:df:8b:a8:4e:c6:7d:85:48:00:2d:9c:51:07:
         ab:24:b5:db:aa:af:97:e1:1c:a4:c1:45:9e:a9:37:39:4c:aa:
         2c:8b:45:a9:93:7c:e3:b7:91:0c:98:72:6f:d8:b2:53:f7:a7:
         e2:63:0a:13:24:a9:01:31:d5:b3:73:17:28:94:c1:f1:46:89:
         33:51:1a:d7:7a:ba:62:0f:55:38:dc:a3:11:ed:2c:f3:31:45:
         2a:86:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:42:17 2026 by rpki-client