This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139352e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          LfQ2O9PEFvTH/QFG/yoX2mThup7fpxZw0JKNcLO+Nl8=
Subject key identifier:   9C:A4:C7:03:5F:04:84:E0:1B:1B:E6:8A:2F:62:D0:3F:CA:5B:F5:D2
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       60D17FE1FBC18A90AED68B249308624D58EB4920
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:28 +0000
ROA not before:           Tue 06 Jan 2026 19:39:28 +0000
ROA not after:            Tue 05 Jan 2027 19:44:28 +0000
asID:                     20015
IP address blocks:        200.71.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d1:7f:e1:fb:c1:8a:90:ae:d6:8b:24:93:08:62:4d:58:eb:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:28 2026 GMT
            Not After : Jan  5 19:44:28 2027 GMT
        Subject: CN=9CA4C7035F0484E01B1BE68A2F62D03FCA5BF5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:d5:0d:4c:7a:a6:2c:c8:fd:a1:de:02:c1:
                    20:47:c3:c9:8e:00:24:dd:f0:05:3b:d1:7a:83:f8:
                    d8:a5:ab:5a:21:e5:22:16:0f:94:da:70:d7:78:f8:
                    98:a2:68:9c:b1:1c:0e:ef:a0:13:61:32:a7:8e:bf:
                    0e:06:7c:7c:2d:41:d7:2e:ed:a4:c5:e2:c0:e1:9f:
                    3c:6f:d3:6f:1c:a4:63:84:9e:9b:0c:86:54:05:31:
                    79:2d:b5:9d:1b:91:6f:3b:d5:bb:33:be:02:cb:68:
                    2c:5e:73:ec:e4:d2:7d:a5:81:fd:d1:53:e4:06:b3:
                    63:b7:53:1f:4b:56:8d:80:cb:09:dc:e1:fb:0e:ff:
                    3d:5f:80:40:6e:09:0b:cd:5d:3c:1b:3e:a9:86:1a:
                    fe:a5:83:8a:56:a6:a3:89:83:8c:a2:21:7a:8d:97:
                    1b:5e:41:ff:1a:05:71:a2:78:36:ac:a3:6b:03:0d:
                    d5:8a:ea:65:90:b3:3f:52:09:be:bf:10:d9:d5:9b:
                    2f:13:ec:ea:38:2b:7e:3e:a4:2e:50:a9:bd:37:f8:
                    36:3f:7c:f5:a1:a8:bf:fe:31:95:17:70:f6:cd:65:
                    8a:ff:86:31:a9:c9:07:98:3c:ce:1b:fd:c2:6a:6c:
                    41:a2:32:5a:fe:92:0a:51:40:e6:de:95:72:5e:22:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A4:C7:03:5F:04:84:E0:1B:1B:E6:8A:2F:62:D0:3F:CA:5B:F5:D2
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139352e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:86:19:d6:04:b8:36:aa:dc:8d:12:27:12:11:b6:b7:85:75:
         26:81:05:f1:ba:4a:93:3e:86:d9:d1:df:b2:d1:0a:3d:9f:fe:
         a7:97:05:5b:05:cc:8e:2b:54:3d:b9:fe:61:9a:38:bd:0c:1e:
         fa:c9:25:65:f7:08:86:3a:28:a9:98:70:3b:6f:14:89:da:b6:
         4c:e1:5a:d0:97:22:df:bf:1b:37:b3:f5:b7:e4:25:52:8d:08:
         c3:23:97:45:17:5a:e1:66:97:13:c1:14:d1:98:13:35:94:01:
         cc:18:37:c8:f4:3e:a3:37:1b:49:0e:26:d0:9b:9b:fa:2d:4a:
         c6:c0:ce:ab:e1:1f:a8:34:f5:5d:6f:f7:32:8a:9d:56:54:16:
         9d:4b:4e:25:30:d2:f7:8c:05:00:38:b6:4a:e2:07:57:ab:5d:
         8d:37:8e:63:50:a9:1f:7d:0e:8d:fa:d8:9f:90:28:24:7a:ec:
         ba:bf:8b:c6:27:29:49:34:92:b3:f4:cc:8f:8e:b0:a9:0d:1f:
         89:41:f5:62:40:08:58:93:6e:fe:f8:46:ee:48:df:77:f1:cd:
         45:e8:9e:a8:bf:06:7a:8c:50:2f:d6:67:7c:34:f3:56:d0:d4:
         c4:a5:c5:c7:67:5b:f4:cc:38:73:04:4b:20:37:1e:5e:ef:c9:
         9f:c8:b9:e6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYNF/4fvBipCu1oskkwhiTVjrSSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MjhaFw0yNzAxMDUxOTQ0MjhaMDMxMTAvBgNV
BAMTKDlDQTRDNzAzNUYwNDg0RTAxQjFCRTY4QTJGNjJEMDNGQ0E1QkY1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsldUNTHqmLMj9od4CwSBHw8mO
ACTd8AU70XqD+Nilq1oh5SIWD5TacNd4+JiiaJyxHA7voBNhMqeOvw4GfHwtQdcu
7aTF4sDhnzxv028cpGOEnpsMhlQFMXkttZ0bkW871bszvgLLaCxec+zk0n2lgf3R
U+QGs2O3Ux9LVo2Aywnc4fsO/z1fgEBuCQvNXTwbPqmGGv6lg4pWpqOJg4yiIXqN
lxteQf8aBXGieDaso2sDDdWK6mWQsz9SCb6/ENnVmy8T7Oo4K34+pC5Qqb03+DY/
fPWhqL/+MZUXcPbNZYr/hjGpyQeYPM4b/cJqbEGiMlr+kgpRQObelXJeImMHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnKTHA18EhOAbG+aKL2LQP8pb9dIwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhHwzAN
BgkqhkiG9w0BAQsFAAOCAQEAg4YZ1gS4NqrcjRInEhG2t4V1JoEF8bpKkz6G2dHf
stEKPZ/+p5cFWwXMjitUPbn+YZo4vQwe+sklZfcIhjooqZhwO28Uidq2TOFa0Jci
378bN7P1t+QlUo0IwyOXRRda4WaXE8EU0ZgTNZQBzBg3yPQ+ozcbSQ4m0Jub+i1K
xsDOq+EfqDT1XW/3MoqdVlQWnUtOJTDS94wFADi2SuIHV6tdjTeOY1CpH30OjfrY
n5AoJHrsur+LxicpSTSSs/TMj46wqQ0fiUH1YkAIWJNu/vhG7kjfd/HNReieqL8G
eoxQL9ZnfDTzVtDUxKXFx2db9Mw4cwRLIDceXu/Jn8i55g==
-----END CERTIFICATE-----
Generated at Fri Jan 23 20:32:18 2026 by rpki-client