This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa
File:                     3230302e3131352e38352e302f32342d3234203d3e203631343431.roa (raw, json)
Hash identifier:          3UcltiZx+uWc5X/GEF2VaIV1P4/EFsgPfd3snHOQ740=
Subject key identifier:   D4:9A:27:5C:45:4E:BA:3B:86:AA:8E:84:D0:05:55:81:0F:30:BD:ED
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5F8E33152D4E698B8FA455619C748BEF97B19B72
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa
Signing time:             Tue 06 Jan 2026 19:29:23 +0000
ROA not before:           Tue 06 Jan 2026 19:24:23 +0000
ROA not after:            Tue 05 Jan 2027 19:29:23 +0000
asID:                     61441
IP address blocks:        200.115.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Jan 2026 15:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8e:33:15:2d:4e:69:8b:8f:a4:55:61:9c:74:8b:ef:97:b1:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:23 2026 GMT
            Not After : Jan  5 19:29:23 2027 GMT
        Subject: CN=D49A275C454EBA3B86AA8E84D00555810F30BDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:60:ba:96:85:10:80:e8:38:e1:14:1f:59:
                    5a:7c:9c:9f:39:5e:6e:aa:9e:64:c3:47:50:d6:b8:
                    a6:13:e2:0d:3d:7e:71:67:b3:03:f1:c3:eb:df:81:
                    7c:4a:56:7f:26:13:c5:0e:e7:de:27:ba:23:63:3e:
                    dd:5f:ca:b1:1d:ba:54:41:20:c4:87:1d:06:46:a1:
                    f6:78:d4:27:45:e5:64:eb:a8:13:99:38:f6:87:ac:
                    f2:8c:8d:38:71:54:57:3d:03:fa:26:63:49:8c:4c:
                    34:67:94:65:a0:8d:cd:a9:73:0a:31:dd:6b:33:bc:
                    f5:ec:0c:a2:b3:2b:52:69:a8:03:1e:cf:bd:d2:c6:
                    02:70:29:92:82:da:89:dd:c7:2d:df:02:bf:df:2f:
                    58:5f:18:5d:20:d6:7c:24:dc:8e:50:85:f6:3e:94:
                    34:bd:3c:cd:fd:e3:91:9d:62:91:c7:a9:df:53:66:
                    1c:a4:1c:70:1a:cf:11:a0:c7:95:43:4a:da:c7:ba:
                    fc:08:52:19:16:b7:47:4e:b9:52:76:f5:73:85:a0:
                    0d:fa:f4:84:3d:45:09:fd:80:d4:7a:a7:d8:84:7f:
                    d0:78:b0:ef:0d:7a:a2:ce:a8:13:d8:73:00:1d:a4:
                    7d:08:6f:7a:7e:d2:eb:92:08:a6:ec:74:ee:92:c4:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9A:27:5C:45:4E:BA:3B:86:AA:8E:84:D0:05:55:81:0F:30:BD:ED
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38352e302f32342d3234203d3e203631343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:ce:bf:37:75:9d:98:ee:cb:ab:7f:c5:da:7e:26:b2:9d:
         74:6b:b7:70:a2:e5:d5:06:2e:e8:b1:86:90:36:83:0b:ad:7c:
         f5:29:f0:6e:74:88:8d:63:ec:b0:62:d8:bf:a0:c3:9d:6d:c7:
         ac:59:b6:b3:2d:51:ff:66:c6:a2:eb:1b:c4:e7:4e:1b:1e:80:
         e4:8a:6f:92:46:2f:42:8e:a1:54:6a:88:50:ca:2a:a0:78:96:
         ba:00:59:09:ce:bb:75:0e:20:2e:01:71:a9:47:c9:9d:ff:af:
         78:da:3a:49:6d:fc:48:ab:70:2d:c0:f2:51:94:2b:6b:5c:b7:
         1a:12:97:7b:88:e1:62:e3:26:41:aa:db:29:95:57:3e:4d:ad:
         66:da:75:d8:f5:2e:3a:04:72:d3:72:c6:83:6d:7e:2e:2d:c7:
         ae:ce:f4:92:ea:ba:4b:5b:6e:89:fc:cd:08:e8:a4:76:1e:12:
         79:5e:59:6d:cb:c0:c6:62:20:9c:95:9a:a9:e9:fb:06:a8:91:
         12:32:bc:7e:d4:82:c0:19:38:76:5c:59:81:0b:ec:72:57:3d:
         74:25:a6:99:54:1c:23:ce:a9:fb:a8:52:74:94:f5:c8:63:50:
         4e:9e:f3:c2:1f:4a:13:42:e3:4a:79:49:c6:de:d6:3f:dd:aa:
         c5:4f:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 16:40:11 2026 by rpki-client