This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230382e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          d69e3zizUN10EIasKU3/KejBEm7Int9YCOiZZWNBXuE=
Subject key identifier:   71:01:53:B2:A7:71:29:A4:46:81:EC:F4:3F:C2:87:72:B7:75:F7:A9
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       77DBC8AC50F69F4E225DC940422F8ECD69278C11
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:32 +0000
ROA not before:           Tue 06 Jan 2026 19:39:32 +0000
ROA not after:            Tue 05 Jan 2027 19:44:32 +0000
asID:                     20015
IP address blocks:        200.71.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:c8:ac:50:f6:9f:4e:22:5d:c9:40:42:2f:8e:cd:69:27:8c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:32 2026 GMT
            Not After : Jan  5 19:44:32 2027 GMT
        Subject: CN=710153B2A77129A44681ECF43FC28772B775F7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:18:07:59:d1:1d:e7:2d:c0:73:02:cc:f0:
                    22:96:16:53:f4:c1:5a:0e:02:58:59:55:93:4d:9a:
                    2e:8c:40:b4:b9:9e:c4:7d:a0:39:8f:c0:c0:1a:7d:
                    00:a6:f7:e8:d3:35:ea:5e:34:b6:0a:95:2b:de:25:
                    e8:32:9e:35:6f:e8:54:fd:d8:73:ff:25:81:6c:c3:
                    a4:e7:22:62:96:12:ef:b2:0a:fe:ac:a9:9f:6c:74:
                    f6:2d:16:c4:75:c4:61:53:16:13:5e:8d:fc:30:6a:
                    9e:bf:5d:c5:74:c2:8c:7b:ef:ed:d6:79:06:12:de:
                    2c:de:66:af:b8:26:c0:7b:d3:a8:9e:b9:ba:27:0a:
                    55:07:04:d6:85:d4:25:a7:c2:93:4d:5e:5c:e9:8f:
                    bd:6c:b3:f9:a3:3d:e3:4c:a4:96:a2:5e:8d:5f:a4:
                    ce:50:89:d5:53:72:30:3f:96:0c:66:5b:d0:95:aa:
                    81:9c:1b:04:66:ef:f4:e4:ae:e2:6f:9a:86:7e:bf:
                    2a:23:29:74:55:86:53:c6:d1:64:af:b1:33:79:f5:
                    44:2c:ff:b3:57:01:9d:e5:22:f7:83:48:8d:9f:43:
                    e7:45:3e:3c:4b:e0:0a:95:61:54:2e:49:55:dc:4d:
                    33:fc:d7:63:39:d2:ac:0a:5d:4f:de:7a:8f:99:fa:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:01:53:B2:A7:71:29:A4:46:81:EC:F4:3F:C2:87:72:B7:75:F7:A9
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230382e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:dd:e1:fc:1c:fc:23:63:50:dd:91:e2:96:54:96:6b:16:
         2c:a3:73:0b:d0:52:63:55:4e:50:08:18:3d:33:39:86:97:c9:
         a5:96:2c:39:df:53:e2:a8:3d:d4:79:86:b6:8b:b0:38:be:e8:
         3d:0c:61:38:b8:67:02:9b:b9:a0:b8:31:9c:4e:33:10:c2:44:
         e8:82:e7:0b:e3:5a:4c:9e:2d:80:76:7e:ee:58:46:4a:31:66:
         a1:23:51:8b:19:26:27:a8:bc:0f:7a:91:c3:fe:b6:b7:3b:c4:
         34:6b:83:2c:3a:31:4b:98:5c:f2:00:6e:b6:7e:83:e8:c5:39:
         1f:d6:5a:33:82:dd:66:b4:b7:d4:a6:f6:77:e8:1e:35:06:1e:
         4d:b7:5d:b8:8d:c9:1e:5b:d0:47:86:1b:f2:47:3f:7d:ad:4a:
         e1:f8:7a:de:a9:fe:f2:e9:6b:01:da:03:a9:b1:6d:9e:4e:8f:
         8f:f2:f6:8d:52:b1:82:ce:e8:c1:0e:bd:31:2f:30:5f:20:83:
         5c:85:d2:40:0d:f1:a8:40:00:f3:b7:2c:71:70:e0:57:ae:22:
         89:d6:73:d7:24:2e:40:22:df:62:55:1c:a0:52:e2:e2:ce:78:
         36:50:c0:07:f0:44:42:26:a2:56:9c:25:11:c3:3f:07:ce:65:
         e4:1f:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:31:25 2026 by rpki-client