This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231372e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          V5oDfStK/EqULu77YDAZm5j3FYatUFJEtUEb9vu5iX8=
Subject key identifier:   74:1B:56:7C:3D:F7:7C:94:AA:60:94:11:EE:53:27:E5:D4:1A:2E:5F
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       27E1B80C6204ED1DDC5D685B8023006B8E9806C6
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:44:34 +0000
ROA not before:           Tue 06 Jan 2026 19:39:34 +0000
ROA not after:            Tue 05 Jan 2027 19:44:34 +0000
asID:                     20015
IP address blocks:        200.71.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e1:b8:0c:62:04:ed:1d:dc:5d:68:5b:80:23:00:6b:8e:98:06:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Jan  6 19:39:34 2026 GMT
            Not After : Jan  5 19:44:34 2027 GMT
        Subject: CN=741B567C3DF77C94AA609411EE5327E5D41A2E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:14:a9:2e:b9:8d:7d:f5:56:e0:f6:3e:16:
                    aa:84:82:1a:f1:72:fb:76:77:31:e8:5f:b4:03:7c:
                    85:5c:32:0d:7a:4f:67:b0:95:b2:14:23:a5:20:27:
                    a6:3d:77:91:b3:be:09:b2:42:34:2e:9b:17:9e:3a:
                    97:60:50:55:e2:bf:b9:5e:65:ce:26:f5:68:fe:d7:
                    c0:64:60:49:68:70:d3:0a:b2:7a:ee:fe:5f:1e:76:
                    d2:22:20:d2:bf:34:e8:69:78:d9:29:5d:34:62:91:
                    59:d5:32:06:36:d9:70:b4:2b:58:d9:97:13:85:96:
                    09:0d:bf:cd:12:dd:92:ae:ac:0b:32:c0:92:a8:47:
                    80:e8:3d:0d:86:cf:85:be:67:ce:c1:a1:c3:97:55:
                    7c:dd:19:d2:7d:99:ea:69:bd:cc:c2:3a:50:30:fe:
                    14:69:6f:09:6f:45:fc:c5:d1:56:a3:09:b9:60:94:
                    99:75:77:1e:7c:0d:f5:9a:44:63:61:b6:c9:d5:05:
                    b7:cd:49:e4:9c:91:5c:c6:11:5d:c9:1e:d1:75:9f:
                    fd:b5:de:47:95:66:77:40:71:fd:6e:de:23:01:27:
                    00:92:2a:5c:50:11:cb:ba:86:c3:e2:4a:83:25:80:
                    ea:a4:3a:51:fa:51:95:3f:86:33:c6:af:7f:93:e8:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:56:7C:3D:F7:7C:94:AA:60:94:11:EE:53:27:E5:D4:1A:2E:5F
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231372e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:1c:57:db:01:b3:f9:d1:d7:37:56:d6:4e:d0:cc:9a:7c:
         b5:4a:b7:3d:a6:29:74:f7:84:58:25:e8:be:d0:dc:a7:f8:9e:
         b1:21:19:09:d3:1d:f7:6b:f3:8b:ef:1b:0f:5e:24:c0:9f:52:
         80:47:32:c7:0d:bd:6a:6e:a7:d5:18:d2:eb:a0:fd:7e:c5:c3:
         02:5b:eb:bb:db:48:7b:47:49:23:57:fa:e5:76:ee:4b:34:46:
         61:63:a9:f8:49:dd:32:4d:b8:71:cd:47:03:38:d2:47:1e:bd:
         a2:eb:4e:7b:83:3b:95:c3:ee:c6:f4:89:4c:85:b2:8a:c6:76:
         0c:03:57:0f:b1:b1:92:c3:ad:9c:e5:f4:09:0c:9f:bf:65:07:
         68:19:89:54:30:e5:b2:f2:36:a5:c8:84:c0:8c:0b:0c:c9:94:
         21:b5:2c:ff:6b:19:93:b2:16:50:c0:f7:50:78:d6:94:5a:6a:
         ff:44:8c:a0:fa:31:18:6e:77:b1:79:ac:b3:b5:43:c0:ef:cf:
         1c:76:0c:7c:ab:50:fd:2c:76:46:5b:89:d4:c0:d2:a4:a4:a5:
         e0:ac:c9:f8:9c:86:5b:02:52:29:2f:98:2e:0f:65:5a:4c:eb:
         cc:36:18:40:9a:9f:51:05:0e:47:c9:bb:f4:2a:96:c3:1f:d1:
         3b:40:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 20:32:05 2026 by rpki-client