This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e203233343536.roa
File:                     3230302e3139322e3233362e302f32322d3234203d3e203233343536.roa (raw, json)
Hash identifier:          bdG59DZYdemQLzTNvKHHV4ymPsHJ2YbYX1J5QU7MQLE=
Subject key identifier:   27:1E:B2:E9:EB:13:97:19:03:A7:3E:24:61:80:B7:8F:95:7F:BB:3F
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       35BAAB1E8FB8345012331B3639F83C1AB8DA76FF
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e203233343536.roa
Signing time:             Tue 06 Jan 2026 19:11:01 +0000
ROA not before:           Tue 06 Jan 2026 19:06:01 +0000
ROA not after:            Tue 05 Jan 2027 19:11:01 +0000
asID:                     23456
IP address blocks:        200.192.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:ab:1e:8f:b8:34:50:12:33:1b:36:39:f8:3c:1a:b8:da:76:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Jan  6 19:06:01 2026 GMT
            Not After : Jan  5 19:11:01 2027 GMT
        Subject: CN=271EB2E9EB13971903A73E246180B78F957FBB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:50:0e:6d:34:a1:32:df:6f:4a:ac:f2:f7:
                    c1:5b:96:b0:a4:8f:95:6b:d5:b4:78:37:76:e7:b2:
                    65:09:b0:0a:c4:e6:7a:e4:0b:a0:6e:f3:b4:a3:40:
                    b7:52:3d:56:4c:6b:8d:cc:bc:81:26:00:b3:de:82:
                    0e:eb:8e:36:55:ce:1c:f5:4f:f4:6c:5c:be:29:0d:
                    35:87:13:a0:a4:b6:d8:5b:f8:fa:9a:f6:2a:78:02:
                    8b:88:c3:72:d7:df:a4:fb:fe:26:db:9d:66:d2:30:
                    b6:1a:ed:4d:b9:f6:d2:11:56:51:db:70:dc:f7:4a:
                    50:50:3b:2a:7b:37:12:33:c1:b7:c1:19:c6:7a:ea:
                    31:d9:61:f8:ab:47:7b:5b:e1:be:9c:1e:ec:d6:b8:
                    60:6b:92:88:d2:66:b3:6e:be:1a:30:08:a7:fb:f5:
                    f7:67:18:93:72:3e:29:02:8c:12:19:82:fc:70:18:
                    3d:b0:c5:c4:b3:81:9a:03:49:91:9a:2d:1c:78:24:
                    17:54:e6:14:b5:98:bb:70:d7:f5:03:56:e8:8e:35:
                    25:78:5f:02:96:79:60:dd:31:96:09:2d:ae:70:1b:
                    26:1c:59:76:59:ec:14:b3:fa:17:86:2a:1e:40:0a:
                    98:a4:ea:6d:65:ec:28:f0:c7:a7:16:4d:5c:56:a7:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1E:B2:E9:EB:13:97:19:03:A7:3E:24:61:80:B7:8F:95:7F:BB:3F
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/3230302e3139322e3233362e302f32322d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:33:94:b6:64:61:99:0d:96:2a:bd:e1:0c:04:e3:70:ca:
         db:59:79:90:7c:43:cc:fa:db:d4:0e:2a:92:2f:7b:e0:48:c3:
         02:b6:2f:ff:eb:0e:23:ae:f3:a4:bd:10:1e:b5:92:91:de:07:
         07:bb:78:42:91:8b:96:d1:4c:6d:aa:b1:4d:87:50:b9:0a:43:
         fc:cc:a8:8a:3a:2f:36:77:e0:1c:0e:6d:f0:3d:58:bb:73:a4:
         25:33:54:0d:96:24:a7:ed:35:7b:a1:99:80:41:9d:f2:f5:a0:
         6d:e9:03:02:92:be:f2:37:55:35:44:d3:e4:06:f7:7d:5b:38:
         10:d7:4e:33:fe:f2:3c:b6:bd:60:e1:4b:2f:03:96:e8:66:e5:
         00:77:bc:7a:03:fc:9e:34:98:fe:b2:43:54:f0:78:f4:48:0b:
         b1:f5:b0:52:03:26:d9:e1:7c:95:fd:a7:bf:de:3b:b8:fb:33:
         99:fa:2e:b8:9a:67:84:f3:bd:38:73:95:8b:20:b0:54:e0:ee:
         9d:00:d8:4f:fe:a9:84:ea:e6:7a:0d:5e:0e:fc:cc:68:22:61:
         92:35:75:77:23:3c:33:df:67:8e:63:b9:95:3e:ec:b0:a4:7a:
         2e:91:a8:bb:3e:c3:0a:ea:6f:cb:66:ba:b0:58:90:6f:2b:28:
         5b:23:c3:1e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNbqrHo+4NFASMxs2Ofg8Grjadv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFQzg0NzVGOTgwMTRCOTY1RjM0QjI1QTJBNjhGNThB
QUVFMTk5QjAeFw0yNjAxMDYxOTA2MDFaFw0yNzAxMDUxOTExMDFaMDMxMTAvBgNV
BAMTKDI3MUVCMkU5RUIxMzk3MTkwM0E3M0UyNDYxODBCNzhGOTU3RkJCM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF1AObTShMt9vSqzy98FblrCk
j5Vr1bR4N3bnsmUJsArE5nrkC6Bu87SjQLdSPVZMa43MvIEmALPegg7rjjZVzhz1
T/RsXL4pDTWHE6Cktthb+Pqa9ip4AouIw3LX36T7/ibbnWbSMLYa7U259tIRVlHb
cNz3SlBQOyp7NxIzwbfBGcZ66jHZYfirR3tb4b6cHuzWuGBrkojSZrNuvhowCKf7
9fdnGJNyPikCjBIZgvxwGD2wxcSzgZoDSZGaLRx4JBdU5hS1mLtw1/UDVuiONSV4
XwKWeWDdMZYJLa5wGyYcWXZZ7BSz+heGKh5ACpik6m1l7Cjwx6cWTVxWp/KtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJx6y6esTlxkDpz4kYYC3j5V/uz8wHwYDVR0j
BBgwFoAUpOyEdfmAFLll80sloqaPWKruGZswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQzk2NkFGMkQ2NjdDNzFEQjhGN0RDNkNCRTdBQTNCNTRD
OUExMzQxQUNBODcxQjU3QjQzOERGOEVBQzc2MURDLzAvQTRFQzg0NzVGOTgwMTRC
OTY1RjM0QjI1QTJBNjhGNThBQUVFMTk5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNEVDODQ3NUY5ODAxNEI5NjVG
MzRCMjVBMkE2OEY1OEFBRUUxOTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEM5NjZBRjJENjY3QzcxREI4RjdEQzZDQkU3QUEzQjU0QzlBMTM0MUFD
QTg3MUI1N0I0MzhERjhFQUM3NjFEQy8wLzMyMzAzMDJlMzEzOTMyMmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMzMzQzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyMDs
MA0GCSqGSIb3DQEBCwUAA4IBAQANUzOUtmRhmQ2WKr3hDATjcMrbWXmQfEPM+tvU
DiqSL3vgSMMCti//6w4jrvOkvRAetZKR3gcHu3hCkYuW0UxtqrFNh1C5CkP8zKiK
Oi82d+AcDm3wPVi7c6QlM1QNliSn7TV7oZmAQZ3y9aBt6QMCkr7yN1U1RNPkBvd9
WzgQ104z/vI8tr1g4UsvA5boZuUAd7x6A/yeNJj+skNU8Hj0SAux9bBSAybZ4XyV
/ae/3ju4+zOZ+i64mmeE8704c5WLILBU4O6dANhP/qmE6uZ6DV4O/MxoImGSNXV3
Izwz32eOY7mVPuywpHoukai7PsMK6m/LZrqwWJBvKyhbI8Me
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:36 2026 by rpki-client