This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230352e302f32342d3234203d3e2036343631.roa
File:                     3230302e3132332e3230352e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          RSkLnBHsDZQneLs1ereYDFyOt7f5XlXpI0b0WkvNsRY=
Subject key identifier:   7C:2A:46:4C:C8:B1:A7:CD:FC:A4:16:51:27:FC:DD:F1:CD:D3:7D:C4
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       6F2852E28E82AD85CF452AD57B54F443F42E9BA0
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230352e302f32342d3234203d3e2036343631.roa
Signing time:             Fri 30 Jan 2026 22:05:00 +0000
ROA not before:           Fri 30 Jan 2026 22:00:00 +0000
ROA not after:            Fri 29 Jan 2027 22:05:00 +0000
asID:                     6461
IP address blocks:        200.123.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 06:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:52:e2:8e:82:ad:85:cf:45:2a:d5:7b:54:f4:43:f4:2e:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Jan 30 22:00:00 2026 GMT
            Not After : Jan 29 22:05:00 2027 GMT
        Subject: CN=7C2A464CC8B1A7CDFCA4165127FCDDF1CDD37DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:cb:5f:64:a9:9b:8f:fd:82:7a:bb:18:70:
                    e5:cc:0d:9e:d1:3a:3c:5a:b3:88:13:b8:ab:26:dd:
                    f4:55:86:8e:e3:bd:b9:cb:60:8b:28:36:b2:9b:63:
                    cc:21:58:93:46:17:e1:c4:62:67:db:da:05:3e:b9:
                    57:43:29:0c:59:a3:31:f5:64:f5:24:d8:43:59:b4:
                    4f:ba:b7:ba:20:d9:3b:25:df:68:88:7b:e3:09:61:
                    11:50:11:d6:41:7e:ce:11:92:99:f3:8e:4c:3d:9f:
                    44:e5:d2:26:ec:28:03:c9:c8:76:60:b2:53:57:74:
                    ae:9c:26:14:ba:5c:c8:50:11:c6:74:8a:36:52:dc:
                    53:e5:46:ac:8d:66:dd:d9:1a:fa:95:f0:eb:7d:a5:
                    dc:78:61:42:e6:e7:7f:a3:9b:26:c2:51:9e:44:27:
                    11:fb:ec:95:24:ee:ae:91:d5:8c:24:bd:95:a7:9f:
                    b2:32:d1:fd:87:8d:68:36:13:67:6c:46:6c:ba:6b:
                    ab:27:fd:01:15:2e:5a:02:f8:94:62:4e:72:df:b5:
                    d1:ce:8c:99:df:b2:d8:9a:90:de:04:5e:fe:61:ca:
                    a0:88:26:7e:a5:f3:15:d7:ff:b9:3a:f9:74:65:30:
                    b4:8c:bb:24:4b:15:ed:6b:22:35:96:a3:48:e8:ff:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:46:4C:C8:B1:A7:CD:FC:A4:16:51:27:FC:DD:F1:CD:D3:7D:C4
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3230352e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:b8:5f:79:50:a7:7e:92:37:ec:e5:f9:9e:c2:d8:fd:b1:
         09:0a:44:81:ae:a4:79:0b:17:60:2d:cc:61:93:9c:72:c9:7f:
         bc:61:7d:b1:de:12:3f:7c:ca:eb:05:b3:13:bf:19:4f:f3:d9:
         59:58:06:ad:8b:ab:41:44:8b:4f:30:f1:3f:a2:96:16:c2:2d:
         54:06:0e:4d:17:c0:21:66:93:f5:2f:75:0b:13:05:6c:48:01:
         fc:19:16:0f:f7:dc:94:ec:12:98:54:9c:99:1c:af:74:46:4a:
         c0:49:3a:f0:d2:29:a9:df:3d:58:b4:7b:43:86:fd:3c:5e:e7:
         7a:36:03:60:98:c1:e4:bb:c7:bb:d4:a6:40:c4:45:16:b6:34:
         fb:ac:b7:88:62:3c:fe:e8:93:7e:8f:63:4e:2b:7e:b4:7f:cc:
         aa:97:4b:59:f4:f3:fc:73:37:4d:70:69:84:2a:6a:15:53:89:
         ca:41:92:60:eb:18:08:a9:be:1b:54:bc:fa:88:4e:2d:f6:1b:
         4d:6e:63:6c:87:64:d4:78:e1:ee:38:3a:07:d7:52:fb:69:3c:
         f2:a6:f7:a1:b6:67:05:13:eb:e3:75:68:9d:e9:3d:cf:f4:2a:
         26:0f:6e:bd:0c:e9:ca:ab:97:02:6c:9d:9e:8b:d7:7c:fd:f4:
         55:d9:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:45 2026 by rpki-client