This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          ITS3Ll0+QlpeHqmJlh3Nc34th8xwycJK1VSiwjsUB54=
Subject key identifier:   9C:13:51:5B:33:E4:1E:C7:2E:52:0F:5A:7A:40:69:52:9A:1B:4F:ED
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       4700267941C3111803F317E32699EAD2CAEAA4FE
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:34 +0000
ROA not before:           Tue 06 Jan 2026 19:39:34 +0000
ROA not after:            Tue 05 Jan 2027 19:44:34 +0000
asID:                     20015
IP address blocks:        200.71.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:26:79:41:c3:11:18:03:f3:17:e3:26:99:ea:d2:ca:ea:a4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:34 2026 GMT
            Not After : Jan  5 19:44:34 2027 GMT
        Subject: CN=9C13515B33E41EC72E520F5A7A4069529A1B4FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:b2:20:0e:67:ae:db:99:da:3c:18:be:e7:
                    c7:e8:93:a3:40:c6:89:e4:bf:4e:b2:7e:97:99:b8:
                    74:aa:e0:17:ff:a8:24:5d:bc:93:26:5f:df:aa:7b:
                    72:6a:df:99:95:95:58:ba:6e:ed:8e:cc:7c:9e:bd:
                    ee:ac:08:04:cf:01:fb:ad:cd:89:0f:08:6c:a6:a5:
                    d9:aa:c0:c7:c6:a4:fa:d9:c2:71:43:5b:72:7c:29:
                    d2:a5:ff:3d:36:90:1a:df:ff:55:e4:67:66:6c:38:
                    f4:2d:e2:77:fa:e6:c4:24:84:3c:0a:51:b4:02:a1:
                    9c:d6:23:04:c2:f3:d3:91:b7:ad:96:50:9e:8d:d0:
                    7b:57:f7:67:b7:7f:13:ad:42:96:4a:88:1a:83:74:
                    67:20:2c:0b:7e:b9:f7:f5:ad:a2:42:27:8a:4c:19:
                    00:02:eb:d1:69:70:91:15:59:23:2c:c4:e5:bf:27:
                    2f:3c:e5:c8:91:71:a7:44:44:7f:69:ba:a9:11:3d:
                    ae:fb:a0:69:4f:eb:3b:14:63:d6:ce:a1:de:76:40:
                    e8:66:52:40:0e:12:44:a2:34:bd:ab:a8:4a:9c:24:
                    88:df:35:d1:04:da:e6:aa:5d:ff:a0:3b:6e:c8:ba:
                    c3:37:ee:60:32:46:c4:7e:67:3f:7a:43:9f:b5:5e:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:13:51:5B:33:E4:1E:C7:2E:52:0F:5A:7A:40:69:52:9A:1B:4F:ED
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:50:31:ff:18:9a:e5:1b:8b:c2:17:1b:3c:99:82:4a:73:39:
         41:6f:e8:7e:42:71:9b:25:c4:86:4e:66:d2:91:16:1a:56:26:
         e7:5f:2b:b9:29:83:54:05:b3:1d:bb:a8:ac:92:75:d6:3d:d4:
         46:8b:64:4c:3d:bd:c3:0f:ff:4e:80:7f:04:ce:90:0c:1d:d4:
         95:1c:27:0c:99:1c:d6:c8:1c:e9:25:3d:ae:ad:a9:e1:ef:50:
         fa:82:f2:5b:5a:88:43:b6:ab:38:8e:cb:7e:69:1d:b7:ee:2d:
         c8:97:8f:62:b5:74:bb:7e:d5:10:c9:32:0d:ae:13:72:d2:bb:
         8a:59:4c:19:d3:f8:c0:a2:f2:9b:8a:19:09:38:fd:10:35:8e:
         1f:af:10:a8:e4:cf:94:0a:49:58:9f:59:37:c5:f8:1a:ec:a0:
         0f:ad:3c:f4:f2:41:df:1d:16:21:84:46:f6:5b:c4:f0:43:24:
         b3:fc:f1:d5:c7:f3:20:e6:80:d1:25:81:8d:d1:1c:7a:5d:70:
         6f:dd:c3:a3:3c:bc:f4:98:ea:46:e2:9f:96:ef:61:63:60:9a:
         1a:56:c3:81:31:86:22:a2:0a:62:4b:97:b3:97:b3:9b:2e:8e:
         89:f2:e0:6e:76:e3:82:8c:b5:ff:ea:07:d1:f3:17:f7:f2:6e:
         90:7f:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:31:24 2026 by rpki-client