This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
File:                     3230302e35392e3230362e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          c+8t1KEPtL9wthk5hzCQyq0WxKJyaSR3YhOBM6BsDvA=
Subject key identifier:   99:6A:3F:77:E0:B2:04:8D:B3:CE:37:1C:FB:85:A5:D4:8B:6A:0E:6D
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       6566BA319F004B181DF028D9D3118FA578AFC4EA
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 06 Jan 2026 19:45:39 +0000
ROA not before:           Tue 06 Jan 2026 19:40:39 +0000
ROA not after:            Tue 05 Jan 2027 19:45:39 +0000
asID:                     7049
IP address blocks:        200.59.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:66:ba:31:9f:00:4b:18:1d:f0:28:d9:d3:11:8f:a5:78:af:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Jan  6 19:40:39 2026 GMT
            Not After : Jan  5 19:45:39 2027 GMT
        Subject: CN=996A3F77E0B2048DB3CE371CFB85A5D48B6A0E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:0e:41:35:50:69:97:10:28:6b:d7:5e:10:
                    f7:ad:13:78:e8:5a:e8:ba:37:0a:b2:36:9d:9b:3c:
                    6d:82:95:c9:28:c9:1a:39:82:c9:9a:d2:28:c3:9b:
                    88:84:01:8f:17:63:de:13:2a:1e:b9:59:ec:9c:43:
                    2b:1e:fa:00:be:b4:23:dd:ca:48:e9:bf:2d:8f:9e:
                    1f:6f:00:1a:b6:c6:4f:e2:eb:c1:b0:99:fd:9e:12:
                    5f:a8:d9:be:89:1f:49:58:db:b2:82:0a:76:13:42:
                    f5:94:70:27:9d:68:06:66:07:40:f0:05:df:1f:9c:
                    60:5c:47:d0:57:23:e7:ab:df:28:35:95:1a:96:29:
                    22:76:0a:c1:de:55:f8:b1:d8:a8:ae:ef:71:1f:31:
                    87:56:51:f6:98:b1:22:06:3a:f0:a5:93:82:f7:8a:
                    5d:42:5d:cc:1a:f7:d7:89:92:b9:2f:9b:47:75:49:
                    6b:52:12:ce:00:43:46:7e:37:1d:f7:45:ff:77:18:
                    42:27:58:06:e0:96:95:81:d4:25:46:64:93:ce:c7:
                    ed:cb:47:fb:61:2b:ea:1f:ee:31:cc:c4:25:1f:61:
                    fb:f3:40:d1:39:6d:9d:79:ab:4b:8d:2a:ff:8b:c1:
                    36:7b:4e:01:7c:98:86:3c:8b:04:ea:43:38:d4:5d:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:3F:77:E0:B2:04:8D:B3:CE:37:1C:FB:85:A5:D4:8B:6A:0E:6D
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e3230362e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:e0:05:d5:d9:fa:06:9f:a1:2a:21:44:da:8a:78:3d:04:
         32:48:2d:8a:0c:3b:f4:62:0f:a7:4d:14:0a:90:bf:17:9b:cf:
         0d:bc:bd:d2:9c:56:3a:d0:cd:2c:f8:59:b8:70:2b:24:4e:5f:
         2f:6d:75:d0:94:27:dd:f7:03:4e:ca:9b:3f:dc:09:85:bd:da:
         2f:0f:d8:39:aa:7f:d3:67:f4:e1:5f:1f:03:9d:02:04:cf:8c:
         f4:fa:24:d2:3a:54:2e:b3:67:5c:9c:15:29:0f:82:7c:78:a3:
         86:3a:45:ef:67:35:80:02:6e:22:97:2b:9e:29:91:0c:b2:19:
         77:4d:02:fb:28:d1:da:34:45:0b:d9:5d:ea:cb:13:35:da:07:
         6c:f1:08:3e:f6:70:35:46:c8:f4:b6:0b:90:2f:bd:16:09:79:
         5a:52:8d:e9:9d:96:69:21:31:f2:f7:db:df:1e:ba:de:1d:1b:
         a1:32:d1:76:2a:88:a3:f3:ff:b0:8f:cf:ad:94:85:50:f2:7f:
         73:b0:f4:7a:19:7d:24:41:1e:fb:8f:92:28:4f:85:b7:00:15:
         bb:fd:4e:f1:75:9e:f7:00:bd:6a:7d:13:6b:84:8b:c1:e6:f9:
         22:dc:a4:30:b9:83:f6:47:fa:b2:64:c4:91:99:14:c7:c9:fe:
         f2:4c:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:31:27 2026 by rpki-client