This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          m6MD+FIyXYxsIgW2Mp2VKimGMTPtPE4XHJAgCmwjK4Y=
Subject key identifier:   36:6F:B8:19:A3:43:52:DB:45:D7:23:26:6E:F9:9B:BE:F6:62:EC:D7
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       01C2E1D9B94A3642A86937557C2C52634CC07FD8
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:30 +0000
ROA not before:           Tue 06 Jan 2026 19:39:30 +0000
ROA not after:            Tue 05 Jan 2027 19:44:30 +0000
asID:                     20015
IP address blocks:        200.71.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c2:e1:d9:b9:4a:36:42:a8:69:37:55:7c:2c:52:63:4c:c0:7f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:30 2026 GMT
            Not After : Jan  5 19:44:30 2027 GMT
        Subject: CN=366FB819A34352DB45D723266EF99BBEF662ECD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:bf:8f:e8:e4:0f:22:c3:a5:2c:b5:d3:da:
                    fc:62:58:4e:2b:42:a4:3e:15:aa:ae:fd:55:50:85:
                    68:b9:bf:ae:5c:d6:f2:1c:34:82:85:f2:6a:b0:b0:
                    a8:d6:19:d7:36:db:45:00:12:66:84:47:06:86:2d:
                    6a:07:d4:4d:88:60:26:02:96:87:f2:45:95:c0:b2:
                    fd:c9:e5:4b:8f:d2:61:a4:db:d5:08:0f:2f:ee:4d:
                    ca:53:c6:ff:6f:c1:a3:db:81:b9:66:54:08:de:dc:
                    2c:2c:13:e4:43:f5:dc:17:bd:22:85:61:b0:b9:1d:
                    69:0c:0d:c0:dc:e8:3d:dc:7b:80:da:dc:03:f1:0f:
                    63:32:02:2b:a2:10:e8:30:0d:15:9d:6a:6a:33:00:
                    70:db:23:6d:a3:d8:20:81:20:87:27:d7:1d:87:93:
                    41:3e:1d:ca:aa:c5:7c:54:de:1a:f8:7a:94:96:11:
                    35:4d:2f:69:8c:6e:c1:5a:c8:a3:7a:cf:a7:3a:2c:
                    5d:e9:8e:e9:77:8d:d3:75:3e:92:42:cf:ca:7b:87:
                    74:ef:c4:24:47:c3:64:e7:c7:cc:96:34:78:12:42:
                    24:d5:89:6b:69:a6:58:45:a5:20:8f:48:1d:36:b5:
                    b3:66:09:ad:2e:cd:69:41:ac:ce:1b:94:09:7e:db:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6F:B8:19:A3:43:52:DB:45:D7:23:26:6E:F9:9B:BE:F6:62:EC:D7
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:05:53:a8:34:fa:a2:d4:38:9a:69:4d:d0:00:47:b1:70:21:
         7b:9e:e7:c0:e8:59:fa:52:67:fa:a6:1f:4b:70:00:bb:17:a4:
         65:41:ca:5b:18:87:39:58:aa:9b:c2:d6:34:87:f7:ac:19:3d:
         86:db:fd:24:c1:01:e4:98:d4:07:27:f1:b6:d5:53:f8:08:ed:
         57:fb:25:e6:ce:3a:34:a0:1c:18:a3:9e:93:ca:50:94:59:ec:
         f1:3f:40:16:2b:89:7c:46:f2:01:71:f2:4d:76:49:0d:a3:84:
         d7:d4:ab:c4:b3:ee:c6:27:9e:d8:3c:22:87:87:5b:8e:f8:36:
         a3:22:65:43:a4:b8:8b:3c:24:d8:d2:18:c8:70:60:f6:0e:cf:
         86:07:17:e8:e0:4d:35:4b:b2:98:cd:5d:c9:55:c3:20:0a:63:
         09:3c:b0:92:f7:d0:59:fc:85:09:47:76:d2:ec:65:03:69:7b:
         cb:69:b1:8f:61:09:16:8e:f8:83:31:7d:79:f5:54:bd:cd:a7:
         86:c6:53:b0:46:4f:af:b3:d8:6e:b7:84:82:85:a3:28:b6:0c:
         73:c8:0e:87:85:41:ff:d6:eb:a4:5c:01:37:75:47:26:35:bd:
         ff:43:76:cf:96:d0:bc:e1:08:31:29:50:8c:90:b2:7e:18:d3:
         c8:ee:01:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAcLh2blKNkKoaTdVfCxSY0zAf9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MzBaFw0yNzAxMDUxOTQ0MzBaMDMxMTAvBgNV
BAMTKDM2NkZCODE5QTM0MzUyREI0NUQ3MjMyNjZFRjk5QkJFRjY2MkVDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqr+P6OQPIsOlLLXT2vxiWE4r
QqQ+Faqu/VVQhWi5v65c1vIcNIKF8mqwsKjWGdc220UAEmaERwaGLWoH1E2IYCYC
lofyRZXAsv3J5UuP0mGk29UIDy/uTcpTxv9vwaPbgblmVAje3CwsE+RD9dwXvSKF
YbC5HWkMDcDc6D3ce4Da3APxD2MyAiuiEOgwDRWdamozAHDbI22j2CCBIIcn1x2H
k0E+HcqqxXxU3hr4epSWETVNL2mMbsFayKN6z6c6LF3pjul3jdN1PpJCz8p7h3Tv
xCRHw2Tnx8yWNHgSQiTViWtpplhFpSCPSB02tbNmCa0uzWlBrM4blAl+25tLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNm+4GaNDUttF1yMmbvmbvvZi7NcwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH1DAN
BgkqhkiG9w0BAQsFAAOCAQEAvwVTqDT6otQ4mmlN0ABHsXAhe57nwOhZ+lJn+qYf
S3AAuxekZUHKWxiHOViqm8LWNIf3rBk9htv9JMEB5JjUByfxttVT+AjtV/sl5s46
NKAcGKOek8pQlFns8T9AFiuJfEbyAXHyTXZJDaOE19SrxLPuxiee2Dwih4dbjvg2
oyJlQ6S4izwk2NIYyHBg9g7PhgcX6OBNNUuymM1dyVXDIApjCTywkvfQWfyFCUd2
0uxlA2l7y2mxj2EJFo74gzF9efVUvc2nhsZTsEZPr7PYbreEgoWjKLYMc8gOh4VB
/9brpFwBN3VHJjW9/0N2z5bQvOEIMSlQjJCyfhjTyO4Bcw==
-----END CERTIFICATE-----
Generated at Fri Jan 23 20:32:04 2026 by rpki-client