This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa
File:                     3230302e36312e362e302f32332d3234203d3e203131313933.roa (raw, json)
Hash identifier:          1bEvGlhI8FClXBwx1l51Mhmz5XQekiJlbZ9gJjIva/E=
Subject key identifier:   21:29:D2:89:DA:8D:1B:1F:E8:70:40:CA:3F:27:42:66:15:E5:A9:9B
Certificate issuer:       /CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
Certificate serial:       5C0D1FF8910277ECB52931C877A3D9F539B221B9
Authority key identifier: 22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa
Signing time:             Tue 06 Jan 2026 19:33:33 +0000
ROA not before:           Tue 06 Jan 2026 19:28:33 +0000
ROA not after:            Tue 05 Jan 2027 19:33:33 +0000
asID:                     11193
IP address blocks:        200.61.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0d:1f:f8:91:02:77:ec:b5:29:31:c8:77:a3:d9:f5:39:b2:21:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226C64BBB2BBE1957B58156759F69D2AC21464F4
        Validity
            Not Before: Jan  6 19:28:33 2026 GMT
            Not After : Jan  5 19:33:33 2027 GMT
        Subject: CN=2129D289DA8D1B1FE87040CA3F27426615E5A99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:c2:e4:9a:29:f7:39:d8:1e:23:69:d4:71:
                    7e:ec:e2:34:2c:3f:99:f6:bd:fb:82:f8:f0:10:da:
                    be:6c:11:98:1c:2d:fa:d0:05:86:cb:0c:a4:aa:da:
                    9e:3a:e9:a6:b5:7c:bd:ba:ed:91:95:b3:c3:a1:3c:
                    94:26:04:1a:c9:d9:53:c4:ea:ca:52:5a:25:a3:0b:
                    3f:38:4b:cc:c7:4e:4e:f3:01:a9:ff:b7:36:2e:87:
                    1c:25:c9:3a:e0:54:6d:3b:43:ab:a5:29:10:0d:b6:
                    87:98:ea:eb:aa:27:a6:2c:f6:ac:70:b0:f8:68:e8:
                    2d:2b:42:f8:bf:8c:f9:8a:b6:be:49:b8:83:05:8c:
                    f2:b5:a4:fa:ba:5b:77:05:b6:78:80:cc:b8:03:54:
                    91:0e:f3:d1:b6:9f:0b:89:0b:2c:43:96:77:19:64:
                    10:a8:f5:40:43:d2:df:c2:58:8b:6a:d2:c1:7b:b0:
                    23:c2:5d:e5:e8:d1:ee:5f:88:6c:bb:79:50:e2:e5:
                    30:dd:07:de:e1:94:e9:45:63:df:a0:0d:4f:82:0a:
                    1f:ba:b7:80:63:f6:84:c9:06:3f:67:47:cd:0c:f5:
                    61:7e:f5:3e:51:76:f2:1b:b0:f2:d0:a5:4e:35:c7:
                    1f:4a:10:2c:63:b7:19:04:21:b1:5d:79:f2:a4:da:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:29:D2:89:DA:8D:1B:1F:E8:70:40:CA:3F:27:42:66:15:E5:A9:9B
            X509v3 Authority Key Identifier:
                keyid:22:6C:64:BB:B2:BB:E1:95:7B:58:15:67:59:F6:9D:2A:C2:14:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226C64BBB2BBE1957B58156759F69D2AC21464F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9EFEED6B7A1DED625D772A667A662C021A7EE61AA872CE479787BA6DD2EF193/0/3230302e36312e362e302f32332d3234203d3e203131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:17:9b:98:ad:71:94:bd:cc:41:37:3f:84:e4:fb:2c:1b:
         60:ba:56:11:e4:ca:02:76:07:84:5d:f8:68:03:ad:d4:bb:ec:
         a4:bf:d1:3a:a7:ae:e5:00:38:a8:22:6c:1a:25:90:9a:e9:17:
         a2:62:ab:ce:8d:58:a3:08:7a:2c:c5:74:c2:25:ae:a1:48:24:
         20:fd:8f:d5:42:f1:19:10:7e:e1:21:c4:6a:97:a0:b0:90:f4:
         d3:e7:ae:24:3f:5f:8a:49:46:66:4b:3e:99:b8:4c:17:3b:c9:
         b3:ef:06:33:c4:d0:cb:68:92:10:d8:2f:d2:df:00:8a:04:ef:
         f5:27:4a:d8:3d:c2:90:bb:b0:18:2b:f2:cb:42:68:bd:f9:69:
         61:10:98:83:38:4b:9b:e7:f1:df:7e:1e:e5:23:8b:3e:f7:b1:
         1d:5c:b3:8f:43:c4:26:43:58:e4:5b:7f:92:0f:e9:c7:fc:ff:
         a5:a0:a6:45:f1:c8:ee:2d:25:20:40:0a:53:53:ed:f1:e0:60:
         88:1e:69:72:33:f0:a1:f0:2f:a6:ab:97:98:7d:0b:e4:17:c1:
         e9:56:52:99:79:af:85:46:f5:d2:b5:cd:3a:b4:c6:9e:c2:53:
         08:49:34:42:0a:fe:59:9b:0a:a8:ef:1d:49:3d:cb:dc:9a:78:
         5c:e8:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 23:23:48 2026 by rpki-client