This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
File:                     3230302e33352e3135362e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          YC8w0dAyt7ZD2ZiwakdTxh58szXhcFZcacBRXE4WyuY=
Subject key identifier:   F8:7B:B7:15:0A:F6:A0:52:6B:E7:DC:7A:B0:B8:3B:12:FA:87:B0:DC
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       55F7624DC641824A6ACD277295C7FE5336D75009
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 06 Jan 2026 18:59:42 +0000
ROA not before:           Tue 06 Jan 2026 18:54:42 +0000
ROA not after:            Tue 05 Jan 2027 18:59:42 +0000
asID:                     14259
IP address blocks:        200.35.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f7:62:4d:c6:41:82:4a:6a:cd:27:72:95:c7:fe:53:36:d7:50:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Jan  6 18:54:42 2026 GMT
            Not After : Jan  5 18:59:42 2027 GMT
        Subject: CN=F87BB7150AF6A0526BE7DC7AB0B83B12FA87B0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:d5:63:5c:ad:b1:98:dd:62:a0:e2:1f:b4:
                    ae:7f:76:a4:88:ef:54:a7:92:43:23:49:97:3c:6d:
                    d0:da:81:4a:74:6f:24:08:2c:37:b8:cd:66:fd:c8:
                    39:c8:d4:ed:3e:3b:2e:c7:f0:d9:83:44:9c:fc:ca:
                    d1:f0:57:19:cc:ff:83:72:e9:31:49:b0:2f:bf:8e:
                    de:2c:4d:27:e4:b1:0f:87:72:ad:f1:5e:fb:d3:4d:
                    7c:e2:bc:b8:7c:dd:e1:89:b9:5c:d2:78:69:7d:67:
                    6d:55:f5:f4:60:bb:fb:3a:c6:f9:35:0c:b9:5d:d5:
                    53:1c:e8:e5:9e:8b:b8:37:7e:6a:42:5b:a4:8a:ac:
                    22:bd:85:80:5c:6d:ef:67:66:96:54:c1:72:3a:3d:
                    1b:03:80:fa:40:ee:cd:07:14:c8:9e:cb:06:cb:b4:
                    81:63:95:c4:64:e0:8c:42:23:cb:c6:3b:fe:9b:0c:
                    a1:69:c2:c9:8f:a9:b8:c8:5f:f8:a5:4e:46:02:ed:
                    2f:25:35:3b:91:58:ff:c4:59:66:b2:cc:3e:95:aa:
                    0a:fa:dc:aa:e5:61:e6:93:4a:a7:d2:62:ef:9a:e9:
                    75:bf:dd:4c:be:fd:1a:7c:11:5a:e5:5d:07:95:79:
                    21:58:02:c0:72:4c:70:17:1d:62:c2:61:ce:92:31:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:B7:15:0A:F6:A0:52:6B:E7:DC:7A:B0:B8:3B:12:FA:87:B0:DC
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:01:c2:ff:d5:8c:aa:6d:51:12:e9:b9:c0:7a:85:e1:c2:72:
         c7:9a:ea:35:61:ae:64:43:9b:76:57:33:ce:99:c0:0d:16:c3:
         21:7c:c3:cf:d0:73:16:6c:e8:1c:ee:72:80:e7:5f:68:02:21:
         29:79:c8:bc:04:1e:51:da:94:cb:a8:99:23:15:73:fd:e1:00:
         c4:bd:70:08:83:1e:81:6d:32:26:be:2d:8c:e0:55:15:f1:74:
         a2:99:74:83:0a:96:70:ce:ec:00:dd:d3:bd:03:5f:2f:8f:f2:
         db:7f:2e:ec:4f:7e:25:ac:a6:42:bf:1c:5e:83:1f:30:14:4e:
         73:f2:ce:aa:05:8b:4b:14:fa:f1:84:5f:36:10:ee:52:09:16:
         0e:59:21:c6:1a:9a:e2:3c:26:fe:04:14:50:bd:f3:78:f1:8e:
         b7:6a:60:15:3b:aa:c0:fa:fa:0e:a6:a1:75:a1:e6:94:86:aa:
         de:ae:fa:be:ea:fe:28:db:52:c8:dd:87:14:da:69:95:d4:5a:
         43:a4:b7:2f:76:71:56:c4:54:62:48:e5:2a:a4:2f:f0:3e:dc:
         3e:02:0b:8b:46:8f:a9:6b:fe:44:e0:b0:e5:b9:4d:e5:91:59:
         74:a8:62:99:31:04:c4:9b:a5:ad:b7:0c:a1:dd:c7:db:3f:15:
         a5:57:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:51 2026 by rpki-client