This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e20323732393831.roa
File:                     3230302e33352e3135362e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          6/Dco3upXzFVktdWZGJziOj0t5xoE+xNumaIfIyqDdM=
Subject key identifier:   21:DC:F2:90:DA:CF:EC:2D:8E:9F:87:13:60:03:5F:78:0E:2D:37:9E
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       14ADD4FBD1FC15017482C8F6F421BD1CA78A1C05
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 06 Jan 2026 18:59:41 +0000
ROA not before:           Tue 06 Jan 2026 18:54:41 +0000
ROA not after:            Tue 05 Jan 2027 18:59:41 +0000
asID:                     272981
IP address blocks:        200.35.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ad:d4:fb:d1:fc:15:01:74:82:c8:f6:f4:21:bd:1c:a7:8a:1c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Jan  6 18:54:41 2026 GMT
            Not After : Jan  5 18:59:41 2027 GMT
        Subject: CN=21DCF290DACFEC2D8E9F871360035F780E2D379E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:73:fc:a5:5f:44:64:3c:0b:a1:4a:1a:59:
                    8d:7a:cb:1d:a3:51:dc:8c:d4:ea:60:3d:07:df:2e:
                    01:3b:56:b3:6a:c3:80:c3:af:2f:9d:3a:71:76:6e:
                    21:ee:c7:74:e5:af:82:31:61:4a:b6:f2:92:77:77:
                    0d:6f:c1:37:26:d5:fc:8b:1c:be:b7:21:d1:8c:dd:
                    3c:db:66:19:49:4e:d8:d8:1b:4f:d7:e6:03:bf:90:
                    a8:90:b3:29:64:e0:1c:66:b3:b0:ed:0a:69:59:3c:
                    09:43:5e:30:78:8d:aa:1d:01:54:01:f8:cf:41:db:
                    56:d7:65:3f:1f:58:0d:8a:9b:d4:55:c1:4b:f3:7a:
                    b4:a9:ec:57:9e:80:2b:f3:1c:51:97:50:05:4b:2d:
                    fb:1d:58:fd:07:77:14:66:af:c7:72:ac:53:6b:73:
                    65:37:0d:2e:58:63:e5:25:d0:4b:53:00:86:1e:d7:
                    be:4c:6a:99:4a:a5:6a:e2:05:f5:9f:08:8e:a5:4e:
                    6c:56:0a:59:c6:63:67:07:34:2b:60:cf:41:8b:b2:
                    93:77:d6:04:f7:db:c5:e1:67:22:01:aa:d5:22:82:
                    53:9a:57:70:95:9b:14:82:6b:41:92:db:20:e2:7d:
                    79:e8:04:a6:3c:b2:6f:f0:7e:2e:bf:aa:ee:46:07:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DC:F2:90:DA:CF:EC:2D:8E:9F:87:13:60:03:5F:78:0E:2D:37:9E
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3230302e33352e3135362e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:59:d0:e8:ff:06:98:3f:c2:f5:33:e6:06:6f:e6:6a:c4:
         08:be:18:75:04:ef:ac:15:48:2a:f7:f3:64:c1:bf:42:ef:98:
         f7:3a:2c:7c:03:e8:0e:67:d6:7c:21:cf:69:c3:4f:73:4d:80:
         76:91:98:50:43:8a:0c:47:28:94:f4:c7:15:e3:9a:7f:d4:36:
         61:25:0d:2d:ff:6d:b6:74:96:77:d1:e9:af:77:f3:9f:eb:bf:
         aa:24:19:d2:c6:a0:3f:99:80:6f:95:91:df:73:31:31:ae:49:
         39:8d:42:4a:8b:e8:65:32:01:fa:be:f6:0e:c2:19:8c:7e:e5:
         05:ac:f2:b0:1d:c1:d2:e8:f4:0a:c5:93:55:f3:6a:48:38:04:
         50:62:54:64:62:d7:b0:76:1e:8c:d7:1c:dd:c0:12:96:23:a0:
         60:f3:5d:2d:7e:e0:37:c4:84:d8:ce:4d:c3:f6:07:57:99:bc:
         18:1a:1e:5d:12:08:6d:0a:ed:34:1f:a3:1a:c9:a7:fc:f7:bc:
         ab:4b:fb:d7:d6:17:f9:5d:12:39:76:60:18:9e:0d:98:1a:59:
         43:b2:95:4a:c1:19:6f:a6:8e:eb:38:ed:64:7d:99:a3:6b:84:
         3d:a7:28:f3:5c:f5:0c:53:88:56:5e:e4:95:6b:09:ad:ce:5b:
         fd:ea:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:07 2026 by rpki-client