This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
File:                     3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (raw, json)
Hash identifier:          kTaf89zbV8DPx751zfxW+Rd67to9CAzT8zKeAESSzYo=
Subject key identifier:   2C:05:E0:B2:35:B6:35:90:20:B2:DC:C7:26:2D:DE:BB:DA:17:6F:12
Certificate issuer:       /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
Certificate serial:       0752E8B6DBCDCB0E1CE216BA1B4D9C432E6B8F7A
Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa
Signing time:             Tue 06 Jan 2026 19:39:45 +0000
ROA not before:           Tue 06 Jan 2026 19:34:45 +0000
ROA not after:            Tue 05 Jan 2027 19:39:45 +0000
asID:                     270078
IP address blocks:        200.71.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:52:e8:b6:db:cd:cb:0e:1c:e2:16:ba:1b:4d:9c:43:2e:6b:8f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF
        Validity
            Not Before: Jan  6 19:34:45 2026 GMT
            Not After : Jan  5 19:39:45 2027 GMT
        Subject: CN=2C05E0B235B6359020B2DCC7262DDEBBDA176F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:fb:39:7a:5d:7f:81:f1:5b:8a:bf:fa:06:
                    6a:6e:a4:a3:6d:75:71:96:99:aa:d3:43:d6:2a:86:
                    49:7a:e6:d1:f8:8a:bb:18:aa:1e:81:81:68:44:9e:
                    c6:19:c4:94:f1:cc:e7:b7:d1:20:2e:3d:b6:4f:99:
                    3f:c5:d6:97:ad:bd:86:18:32:8b:db:91:e6:b1:df:
                    59:63:f9:25:00:c9:78:46:bf:e0:b4:d1:fe:ea:6b:
                    0b:27:d6:a4:00:97:e2:ac:86:cb:e7:09:d1:ce:87:
                    ac:dc:55:d1:79:ab:4c:78:09:07:c1:c8:96:0d:f5:
                    0d:fd:0c:36:6a:fb:be:00:30:d3:b9:de:b2:fa:99:
                    9b:eb:8d:be:9e:cd:a8:2b:3e:e0:98:db:da:2e:41:
                    53:c6:ac:88:8b:3b:78:56:04:92:10:f7:dd:9f:2d:
                    51:49:d9:41:a4:43:59:4c:3c:b3:e9:fd:a5:a7:06:
                    8a:71:29:10:db:bb:01:a3:65:10:c6:a3:94:26:e2:
                    dc:c9:6d:59:d3:4f:9e:96:0c:a0:38:65:e8:33:2c:
                    a9:b8:3c:11:57:2e:4d:38:a4:79:0c:ba:b1:d1:5b:
                    b4:6b:8b:7d:c3:b5:0d:f1:d6:a4:82:5a:af:cf:35:
                    53:a8:da:5a:f2:74:40:29:42:ad:f5:de:34:28:67:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:E0:B2:35:B6:35:90:20:B2:DC:C7:26:2D:DE:BB:DA:17:6F:12
            X509v3 Authority Key Identifier:
                keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/3230302e37312e38302e302f32332d3234203d3e20323730303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:8d:1c:7d:9f:5a:30:a6:14:a1:be:93:fc:c8:5c:0b:25:64:
         f3:c3:00:23:3c:4e:de:9e:c4:b6:43:56:07:34:96:d3:fd:c5:
         24:64:42:1a:0c:9f:fd:d9:b1:a6:43:ed:f2:16:74:8c:b3:5f:
         23:47:3e:bf:22:45:16:a2:86:d0:d6:a8:c4:59:18:e6:81:d3:
         69:23:43:21:94:00:c5:8c:a5:ee:1f:b3:fd:3b:53:f0:2f:41:
         21:ea:c1:27:cc:59:69:c9:cc:92:d5:c0:6f:12:12:d0:b6:7d:
         b1:11:01:eb:0b:68:5c:a7:0f:56:74:55:68:be:e8:ec:d7:f8:
         90:4c:ad:23:15:00:97:a6:ca:f3:9d:72:7d:c8:59:a6:e6:bb:
         ac:b6:37:af:53:d6:f2:c8:e6:43:6c:40:c7:e3:3c:ba:3a:9d:
         67:bc:1a:5c:c5:c4:6b:e5:4a:28:ca:4a:f9:44:0d:f7:d9:8b:
         21:6a:5d:c0:2e:ef:22:0d:d3:39:7e:c9:0d:8c:ad:62:f7:4c:
         ca:ba:24:7d:46:ab:bf:54:49:eb:76:86:e4:5b:c4:a4:60:b6:
         de:77:ba:c8:a3:1b:a4:c8:d4:26:a8:dd:fb:ef:bb:96:33:8e:
         57:a2:53:8d:b5:11:bb:37:9b:13:28:73:73:2c:df:93:85:b6:
         74:b9:0f:30
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUB1LottvNyw4c4ha6G02cQy5rj3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy
QzI1QThBRjAeFw0yNjAxMDYxOTM0NDVaFw0yNzAxMDUxOTM5NDVaMDMxMTAvBgNV
BAMTKDJDMDVFMEIyMzVCNjM1OTAyMEIyRENDNzI2MkRERUJCREExNzZGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXPs5el1/gfFbir/6BmpupKNt
dXGWmarTQ9Yqhkl65tH4irsYqh6BgWhEnsYZxJTxzOe30SAuPbZPmT/F1petvYYY
Movbkeax31lj+SUAyXhGv+C00f7qawsn1qQAl+KshsvnCdHOh6zcVdF5q0x4CQfB
yJYN9Q39DDZq+74AMNO53rL6mZvrjb6ezagrPuCY29ouQVPGrIiLO3hWBJIQ992f
LVFJ2UGkQ1lMPLPp/aWnBopxKRDbuwGjZRDGo5Qm4tzJbVnTT56WDKA4ZegzLKm4
PBFXLk04pHkMurHRW7Rri33DtQ3x1qSCWq/PNVOo2lrydEApQq313jQoZ+qHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULAXgsjW2NZAgstzHJi3eu9oXbxIwHwYDVR0j
BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5
QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5
RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw
RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC
QUM5NTJGNUUwODNERURFMDAxMTAxMS8wLzMyMzAzMDJlMzczMTJlMzgzMDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchHUDAN
BgkqhkiG9w0BAQsFAAOCAQEAjo0cfZ9aMKYUob6T/MhcCyVk88MAIzxO3p7EtkNW
BzSW0/3FJGRCGgyf/dmxpkPt8hZ0jLNfI0c+vyJFFqKG0NaoxFkY5oHTaSNDIZQA
xYyl7h+z/TtT8C9BIerBJ8xZacnMktXAbxIS0LZ9sREB6wtoXKcPVnRVaL7o7Nf4
kEytIxUAl6bK851yfchZpua7rLY3r1PW8sjmQ2xAx+M8ujqdZ7waXMXEa+VKKMpK
+UQN99mLIWpdwC7vIg3TOX7JDYytYvdMyrokfUarv1RJ63aG5FvEpGC23ne6yKMb
pMjUJqjd+++7ljOOV6JTjbURuzebEyhzcyzfk4W2dLkPMA==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:59 2026 by rpki-client