This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa
File:                     3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa (raw, json)
Hash identifier:          9MF9/d8+4eUmqeXquq+QUlknm9X8u+thwAA+qC7hXKo=
Subject key identifier:   51:22:2E:17:12:AA:FF:CB:76:A6:F9:28:2D:94:40:6B:27:A1:47:03
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       080B168379EEE9E0D4E509BE7A25CA8567504487
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa
Signing time:             Fri 28 Nov 2025 19:53:48 +0000
ROA not before:           Fri 28 Nov 2025 19:48:48 +0000
ROA not after:            Fri 27 Nov 2026 19:53:48 +0000
asID:                     6762
IP address blocks:        200.123.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 01:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:16:83:79:ee:e9:e0:d4:e5:09:be:7a:25:ca:85:67:50:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Nov 28 19:48:48 2025 GMT
            Not After : Nov 27 19:53:48 2026 GMT
        Subject: CN=51222E1712AAFFCB76A6F9282D94406B27A14703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:e3:d4:12:ef:7e:43:31:25:85:9f:6a:3f:
                    62:91:25:59:22:9c:9f:ae:67:76:eb:89:aa:47:a3:
                    28:85:5b:54:85:26:a7:cd:ce:8f:db:48:dc:a9:5f:
                    d8:27:fd:76:d6:cb:df:2d:cc:6e:6b:80:c3:19:f2:
                    49:62:00:40:cd:48:dd:80:bc:d0:c4:b5:99:54:69:
                    3c:4e:1e:19:e0:62:ed:8e:cc:5b:c3:1f:96:11:46:
                    81:aa:39:06:80:39:88:e6:72:19:10:24:58:8b:ec:
                    07:63:d4:aa:f2:1e:69:b1:e7:3e:3f:ca:2f:59:67:
                    e9:70:98:63:43:6d:0d:28:2e:dd:74:f2:eb:0a:80:
                    37:76:d3:f5:17:36:fc:f1:f6:54:a1:f9:61:bb:cb:
                    f9:d4:a6:fa:87:4b:0e:4e:a3:f0:37:4c:ea:7a:2a:
                    b5:d1:b3:7c:e9:75:88:a8:51:d5:62:3a:c6:4d:44:
                    3b:d0:97:02:4e:99:5a:3e:62:2d:33:dc:c9:87:6a:
                    0e:e7:f1:94:8f:79:fe:2b:7a:bb:9d:9f:55:f0:cc:
                    3b:78:b0:bf:b9:e4:03:81:37:c3:7e:24:72:3e:c3:
                    09:57:d4:f3:0d:3d:77:5a:02:a7:d5:f2:31:b7:b3:
                    11:f0:33:a0:66:18:5f:70:e0:7a:1e:8c:97:9a:99:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:2E:17:12:AA:FF:CB:76:A6:F9:28:2D:94:40:6B:27:A1:47:03
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139322e302f32302d3234203d3e2036373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:1d:ce:7f:66:f3:e0:6b:24:bf:39:77:69:48:05:62:50:4f:
         12:88:a5:f4:76:2c:0a:f9:25:e6:c3:d2:81:03:33:28:f7:2b:
         92:96:89:05:7c:ed:20:fa:1d:e3:42:67:77:f1:86:a7:60:e4:
         d1:a4:99:77:49:6d:40:21:05:3c:14:bb:1f:2e:ad:e4:ff:9c:
         49:f9:1a:cf:01:7d:9d:a2:d1:9c:20:f5:f9:de:3e:c5:1a:14:
         d5:75:7f:b8:1c:30:50:8a:13:1c:ea:0d:bc:49:e2:33:10:dc:
         a1:0e:a5:97:ae:55:1a:60:b1:b9:a8:b0:bd:f5:da:0f:f3:fe:
         89:f5:75:93:2a:f2:bb:1c:e1:ea:ab:ea:e5:5d:6e:9d:12:bb:
         99:cd:fa:0e:b5:06:00:9f:53:37:d0:11:07:be:f6:a0:b2:0f:
         5d:df:8c:86:f6:a9:60:21:cb:94:a6:ae:64:57:b4:46:b3:61:
         46:13:d5:d0:70:8a:e4:b3:ba:dd:79:5f:76:6f:5e:40:89:0a:
         e8:c5:2e:4e:0c:4e:21:71:28:ba:49:e7:a9:0d:23:a6:74:8e:
         d8:79:49:16:75:53:5c:7a:0e:e0:19:d9:08:f5:2b:41:06:75:
         5c:83:ee:f1:5e:dd:11:8f:33:47:cf:12:d5:0e:58:79:dd:23:
         b4:06:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:09:50 2025 by rpki-client