This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231342e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231342e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          D36kO5FZOod3pujtUEtYl5FCncG/Bd3qJP+/w5eLGWE=
Subject key identifier:   F8:B9:E3:91:AF:F2:76:7C:B9:27:27:A7:96:34:4F:3A:BA:36:C7:DF
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       1DCA2EAE2E67627C2817FE8ABA4CBCF4E4EA6D38
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231342e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:35 +0000
ROA not before:           Tue 06 Jan 2026 19:39:35 +0000
ROA not after:            Tue 05 Jan 2027 19:44:35 +0000
asID:                     20015
IP address blocks:        200.71.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:2e:ae:2e:67:62:7c:28:17:fe:8a:ba:4c:bc:f4:e4:ea:6d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:35 2026 GMT
            Not After : Jan  5 19:44:35 2027 GMT
        Subject: CN=F8B9E391AFF2767CB92727A796344F3ABA36C7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:b3:ed:0a:87:7e:d1:a5:bd:92:b7:75:6b:
                    50:5d:9d:22:e9:5a:81:b1:95:8c:47:92:08:74:2d:
                    50:e5:33:b4:04:56:f3:1e:69:e8:7c:ea:5d:75:b9:
                    dc:d0:d0:a6:08:0e:a1:04:90:e0:9e:a7:09:90:59:
                    0e:1a:e2:6c:3d:94:1d:dc:85:01:8d:95:c7:16:2a:
                    ad:40:22:3a:e9:07:f1:28:1f:49:bc:ee:6c:42:66:
                    c3:81:ae:2b:27:00:1b:1a:28:5b:45:bf:06:5c:cd:
                    1e:03:1d:36:4d:c8:45:a0:4d:ab:36:13:e9:e2:e0:
                    ef:5a:66:d0:c3:7d:bf:e0:9d:f6:17:9b:ac:4a:22:
                    8a:2a:8b:6a:46:ed:43:ce:65:36:a7:57:49:2f:03:
                    33:24:ee:5f:9c:0d:1e:81:da:cc:07:2e:5c:be:cb:
                    20:03:12:79:07:47:13:97:40:22:70:e6:66:e6:1a:
                    db:0f:08:f5:7a:ee:20:a6:9d:09:4e:58:3a:c5:6b:
                    3b:7b:9c:40:ac:76:9b:ec:f5:ef:ab:db:99:c2:9a:
                    eb:9f:6a:2a:67:60:cc:50:30:e2:ec:97:54:18:94:
                    df:fb:8c:b9:bc:f5:9b:8e:91:c6:44:bc:2b:64:56:
                    b0:a6:c8:62:ea:c0:ba:93:0a:80:8f:8a:4e:fd:ac:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B9:E3:91:AF:F2:76:7C:B9:27:27:A7:96:34:4F:3A:BA:36:C7:DF
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231342e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:87:17:bf:55:62:de:08:6a:60:b3:a8:09:04:4e:4b:01:
         bd:fd:a7:bf:ad:47:32:f7:29:84:74:a2:ff:56:97:e2:d8:79:
         0d:55:75:2d:84:b0:48:b6:cb:e9:20:e9:79:13:93:6b:0f:28:
         53:14:f0:05:86:b1:11:e2:40:36:3b:3a:1d:aa:cd:46:8e:c5:
         fe:85:c7:3c:a3:ca:63:60:d4:f3:41:32:df:59:fb:65:8e:b2:
         43:0a:13:1e:3f:d0:ca:84:c8:83:b7:7e:f8:d9:00:c1:59:51:
         7f:31:00:f1:ab:73:64:08:0e:0f:e1:06:38:9e:96:52:5c:4d:
         ea:05:03:e3:79:ca:b4:7e:83:ee:d6:02:00:16:f9:31:5b:c7:
         d2:5c:56:be:b6:22:16:00:05:a9:60:6a:41:a2:fd:bf:93:78:
         ce:ce:c4:61:6c:0b:73:2d:94:df:8d:50:9a:49:a5:d5:84:fd:
         cf:c8:44:fc:7a:84:eb:15:96:93:7c:04:f3:b4:46:00:a2:39:
         6d:87:9d:8e:79:16:b0:45:48:9e:8d:cd:81:17:27:0c:c6:14:
         17:a4:06:73:e3:84:43:ef:be:d9:75:ae:b1:ae:23:3f:67:b6:
         49:5c:22:44:7f:2b:9f:03:6e:52:84:fb:e2:da:40:a2:ae:31:
         21:92:65:dd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHcouri5nYnwoF/6Kuky89OTqbTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNjAxMDYxOTM5MzVaFw0yNzAxMDUxOTQ0MzVaMDMxMTAvBgNV
BAMTKEY4QjlFMzkxQUZGMjc2N0NCOTI3MjdBNzk2MzQ0RjNBQkEzNkM3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKh7PtCod+0aW9krd1a1BdnSLp
WoGxlYxHkgh0LVDlM7QEVvMeaeh86l11udzQ0KYIDqEEkOCepwmQWQ4a4mw9lB3c
hQGNlccWKq1AIjrpB/EoH0m87mxCZsOBrisnABsaKFtFvwZczR4DHTZNyEWgTas2
E+ni4O9aZtDDfb/gnfYXm6xKIooqi2pG7UPOZTanV0kvAzMk7l+cDR6B2swHLly+
yyADEnkHRxOXQCJw5mbmGtsPCPV67iCmnQlOWDrFazt7nECsdpvs9e+r25nCmuuf
aipnYMxQMOLsl1QYlN/7jLm89ZuOkcZEvCtkVrCmyGLqwLqTCoCPik79rAvlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+Lnjka/ydny5JyenljRPOro2x98wHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzIzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhH1jAN
BgkqhkiG9w0BAQsFAAOCAQEASvSHF79VYt4IamCzqAkETksBvf2nv61HMvcphHSi
/1aX4th5DVV1LYSwSLbL6SDpeROTaw8oUxTwBYaxEeJANjs6HarNRo7F/oXHPKPK
Y2DU80Ey31n7ZY6yQwoTHj/QyoTIg7d++NkAwVlRfzEA8atzZAgOD+EGOJ6WUlxN
6gUD43nKtH6D7tYCABb5MVvH0lxWvrYiFgAFqWBqQaL9v5N4zs7EYWwLcy2U341Q
mkml1YT9z8hE/HqE6xWWk3wE87RGAKI5bYedjnkWsEVIno3NgRcnDMYUF6QGc+OE
Q+++2XWusa4jP2e2SVwiRH8rnwNuUoT74tpAoq4xIZJl3Q==
-----END CERTIFICATE-----
Generated at Fri Jan 23 20:30:20 2026 by rpki-client