This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/3230302e312e3136312e302f32342d3234203d3e20323639393431.roa
File:                     3230302e312e3136312e302f32342d3234203d3e20323639393431.roa (raw, json)
Hash identifier:          KYuU+wjthWMyT+p27a96RBIKOde2OQzRDCZTx7mgDeY=
Subject key identifier:   7B:B8:7E:F4:41:5A:AA:C4:67:0F:06:3A:A6:83:E8:EB:16:56:6C:E0
Certificate issuer:       /CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
Certificate serial:       784853D250370EB6F0791BB70B31C1DAAD72F941
Authority key identifier: 8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/3230302e312e3136312e302f32342d3234203d3e20323639393431.roa
Signing time:             Tue 06 Jan 2026 20:55:22 +0000
ROA not before:           Tue 06 Jan 2026 20:50:22 +0000
ROA not after:            Tue 05 Jan 2027 20:55:22 +0000
asID:                     269941
IP address blocks:        200.1.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Feb 2026 21:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:48:53:d2:50:37:0e:b6:f0:79:1b:b7:0b:31:c1:da:ad:72:f9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B
        Validity
            Not Before: Jan  6 20:50:22 2026 GMT
            Not After : Jan  5 20:55:22 2027 GMT
        Subject: CN=7BB87EF4415AAAC4670F063AA683E8EB16566CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:83:b1:4b:69:50:90:4b:b3:a5:51:ef:f0:
                    98:bf:f0:23:43:de:c6:92:ec:30:86:f0:3e:85:84:
                    6f:59:e2:2c:8a:28:47:b6:18:24:36:70:47:83:47:
                    1b:8a:d5:47:48:1d:b7:58:4c:4c:cd:5b:c5:b6:d5:
                    e8:f7:9e:cb:38:cf:b7:87:b2:85:c0:45:8b:1d:09:
                    c0:f8:db:84:3e:59:73:22:65:78:66:ac:cb:ff:ea:
                    ca:3c:58:09:9d:08:82:ce:8d:bc:b9:74:00:c9:0b:
                    9c:24:d3:e2:27:65:aa:f3:5a:54:73:58:13:9c:ec:
                    a7:c9:07:59:61:cb:47:e4:25:23:22:a8:41:02:c2:
                    ba:41:b5:26:41:83:26:21:8b:ae:4c:13:be:64:ad:
                    e0:6a:3b:86:87:56:01:07:71:a1:5d:7c:25:59:41:
                    40:21:07:89:30:3f:f0:17:eb:23:0e:f3:aa:62:d8:
                    5d:4d:54:98:a7:fc:db:36:84:31:eb:ee:56:b2:19:
                    a5:a6:dd:00:09:4b:48:56:69:52:bf:fb:c5:75:a1:
                    f5:17:ce:a6:08:84:05:cf:41:04:25:b5:27:10:bd:
                    22:84:75:92:0d:0e:25:b4:00:4c:51:3b:02:59:ac:
                    4d:31:de:c8:c6:26:0e:a4:b1:47:e9:74:d0:8f:cd:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B8:7E:F4:41:5A:AA:C4:67:0F:06:3A:A6:83:E8:EB:16:56:6C:E0
            X509v3 Authority Key Identifier:
                keyid:8F:B5:C8:80:52:FB:05:C9:C4:F2:CE:D1:DE:5A:46:4A:20:D6:A3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FB5C88052FB05C9C4F2CED1DE5A464A20D6A37B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3687998E84DC10F80F44DBA07D476A5AC0DCC4C86A52A468FD42B6493C56F911/0/3230302e312e3136312e302f32342d3234203d3e20323639393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:4c:1f:cf:a4:5d:45:02:2a:94:a4:a8:4c:28:bb:db:d1:
         f7:0d:0a:f6:25:86:d6:2d:d2:26:ef:3e:d4:58:46:df:1d:03:
         18:15:e9:9a:c3:e2:56:18:87:de:06:5d:a2:1f:02:da:d8:10:
         58:ec:fa:c3:7e:c4:20:13:55:d9:3f:f3:01:e1:02:71:2d:d7:
         2e:51:ab:74:7a:13:12:76:2b:2b:00:b7:25:40:e8:6f:63:33:
         1e:a9:43:c6:8d:e7:04:3e:fb:57:b2:35:78:1e:72:3c:88:8d:
         4e:eb:f0:d5:4e:7b:d1:85:13:5d:18:ca:20:d6:ac:70:f5:30:
         92:f2:7c:96:46:76:f7:37:26:05:c6:47:2a:a3:c1:e6:51:87:
         bd:aa:f8:cc:4d:48:56:97:37:73:18:48:9b:10:60:ae:d4:c5:
         d6:c3:27:04:1a:2f:82:7c:5a:29:8d:c8:1f:40:ed:19:8f:9c:
         f9:19:d0:9e:8b:93:de:aa:59:22:1b:05:86:10:10:f4:bb:12:
         4c:6c:ab:22:51:c5:e1:f8:6e:b7:0e:55:86:02:e8:b6:cd:0b:
         aa:8c:22:ca:35:07:17:8a:52:0c:c4:3b:21:19:d9:c3:d6:98:
         97:29:9a:4f:c0:e8:2d:eb:aa:52:94:1f:bb:77:b5:2e:20:bf:
         9b:32:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 19:41:40 2026 by rpki-client