This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa
File:                     3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa (raw, json)
Hash identifier:          FF6t2cDdb3R4zBaOy+8k1qVVR/TZWKRXmoHVsHKlx/c=
Subject key identifier:   62:D6:58:D8:4C:01:1F:B4:03:22:5C:99:28:2B:4E:75:C1:6E:28:14
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       2214BD99FFE4D44E10A0597C0D6FA6045150B458
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa
Signing time:             Tue 06 Jan 2026 19:32:14 +0000
ROA not before:           Tue 06 Jan 2026 19:27:14 +0000
ROA not after:            Tue 05 Jan 2027 19:32:14 +0000
asID:                     28007
IP address blocks:        200.125.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:bd:99:ff:e4:d4:4e:10:a0:59:7c:0d:6f:a6:04:51:50:b4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Jan  6 19:27:14 2026 GMT
            Not After : Jan  5 19:32:14 2027 GMT
        Subject: CN=62D658D84C011FB403225C99282B4E75C16E2814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:3f:bf:ef:84:5f:5d:11:2f:d6:4f:f7:2b:
                    b9:1e:24:1e:59:7f:33:66:e8:d9:3b:f5:a6:14:f8:
                    75:50:59:8f:6b:cb:91:07:8c:94:e5:23:ab:5c:b0:
                    75:4c:07:d4:84:15:93:f6:60:48:af:db:90:cf:97:
                    20:89:8a:ee:01:ba:de:31:21:2d:66:f8:58:e2:a5:
                    2f:03:3c:b6:06:39:0c:bf:4d:2b:fd:8e:3c:7d:c3:
                    1d:a9:39:a7:c6:6a:50:ee:ae:7b:0f:3f:01:e3:2e:
                    bc:02:60:46:e9:cd:76:ac:9e:cc:9d:47:02:9c:a1:
                    f0:2f:24:e4:47:89:8b:1f:9f:b6:71:c1:05:02:da:
                    39:59:98:19:e7:2f:fa:2b:f6:9a:9c:ff:76:41:d2:
                    27:c7:04:6b:a6:e1:bd:e3:82:84:81:37:c8:a8:06:
                    cd:5f:7c:05:e2:ec:61:48:b6:1c:40:49:8b:5a:81:
                    a3:b7:1d:3b:72:b2:e3:27:90:2e:59:d6:96:66:24:
                    32:d0:bb:ac:c0:09:df:dc:e0:3f:6a:a4:87:5a:2f:
                    bd:e1:27:fb:b9:8e:70:d7:96:04:ab:07:49:6d:70:
                    05:bf:d3:5d:16:5f:74:88:13:a1:3f:40:14:fc:26:
                    fe:e3:85:b6:a9:11:df:d7:b3:69:df:e9:f3:12:93:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D6:58:D8:4C:01:1F:B4:03:22:5C:99:28:2B:4E:75:C1:6E:28:14
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3230302e3132352e3138342e302f32312d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:a6:4d:5a:27:10:ea:e8:88:99:e2:9a:69:95:79:e4:fa:
         f1:21:f1:b6:58:b8:26:4a:0c:1d:74:97:5d:ce:4f:22:29:d5:
         81:d6:6e:f7:94:29:69:7c:5b:17:5c:f7:06:75:dc:08:24:fd:
         6b:df:09:69:87:1e:7a:de:34:08:21:39:d3:46:9f:d7:75:8f:
         1d:40:21:87:31:5a:db:08:cf:ad:d9:c2:09:ca:0d:f2:db:f2:
         ac:26:50:cb:59:85:ca:18:3c:88:f1:af:13:f1:9b:83:88:cb:
         1b:b6:60:94:12:41:62:9e:47:71:fe:93:34:d2:d4:d1:e3:e9:
         b2:f2:b4:29:8d:a0:49:56:e3:2f:4a:a3:ea:28:e8:03:a3:8e:
         73:fe:3a:9a:f4:b0:96:28:de:54:6a:49:1a:d8:60:37:65:fd:
         22:1c:cb:2c:74:39:67:36:de:f8:12:cb:5c:b8:52:1f:25:55:
         ad:e4:b1:6a:07:c7:f0:98:db:b5:a9:e2:d6:39:a0:e3:93:98:
         76:c4:ac:e4:49:89:f9:e9:d7:74:d5:0c:6f:9e:4d:0c:5e:5f:
         7c:b7:51:ed:1a:d6:9a:4d:d7:19:9b:05:29:96:43:e3:f6:4f:
         d1:cb:8e:48:88:ed:51:db:fc:9c:bc:3b:76:c1:d3:f0:5b:ef:
         9e:da:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 19:39:55 2026 by rpki-client