This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
File:                     3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (raw, json)
Hash identifier:          VOwfRTx8AbmRJ6q7IAO+ZBHe6bq2jnFxRJymsUhD8Dg=
Subject key identifier:   3A:6B:64:AA:BF:0F:7B:DC:D9:E7:7E:15:ED:EB:FE:80:B7:9C:D5:52
Certificate issuer:       /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial:       2172097987511AFF60F229ABFA0712B4D1194F24
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa
Signing time:             Tue 06 Jan 2026 20:52:41 +0000
ROA not before:           Tue 06 Jan 2026 20:47:41 +0000
ROA not after:            Tue 05 Jan 2027 20:52:41 +0000
asID:                     52293
IP address blocks:        200.12.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:72:09:79:87:51:1a:ff:60:f2:29:ab:fa:07:12:b4:d1:19:4f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
        Validity
            Not Before: Jan  6 20:47:41 2026 GMT
            Not After : Jan  5 20:52:41 2027 GMT
        Subject: CN=3A6B64AABF0F7BDCD9E77E15EDEBFE80B79CD552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:53:0d:17:96:be:4a:93:86:a0:81:ff:fe:
                    1a:a0:d1:79:57:5d:b7:f8:11:1f:a1:5c:e3:f5:5a:
                    70:72:73:41:de:c5:bc:9d:84:5e:bf:34:54:73:46:
                    ed:28:e2:66:8a:cd:d3:1e:e2:79:0d:0b:7c:95:11:
                    75:e5:fc:4a:4a:c1:80:f7:06:92:e8:48:25:e2:44:
                    00:e2:5a:1c:b2:dd:5f:14:ee:e6:3e:c9:8b:e8:1f:
                    9c:72:89:fe:74:9a:64:69:fe:aa:bf:d9:8c:1d:22:
                    69:10:3c:64:52:b9:b5:5a:ca:70:ba:68:7a:34:fe:
                    4e:9f:de:d7:64:f0:3b:53:1c:97:f9:a0:bd:44:f3:
                    a0:8d:e6:e8:f8:34:2e:2a:78:10:de:dd:4c:de:f7:
                    67:7d:f4:c5:2f:a5:9b:f5:d0:b7:a9:ed:a6:e8:6a:
                    cd:f4:c6:5f:0c:80:9b:17:16:a1:27:6e:97:78:ad:
                    9f:85:00:69:8d:17:61:45:c0:c8:b2:7b:d0:64:bf:
                    34:0d:fa:5d:cb:7f:32:d5:6d:e4:e6:91:f4:dd:0e:
                    78:e1:cc:b3:8b:0d:f8:ee:cb:fc:4a:fc:19:e4:31:
                    07:05:7a:ec:5e:bf:fc:8b:4c:e0:6e:7c:71:15:84:
                    8a:e8:cf:fc:a5:8b:ec:8d:b2:ee:2a:c9:17:1a:3e:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:64:AA:BF:0F:7B:DC:D9:E7:7E:15:ED:EB:FE:80:B7:9C:D5:52
            X509v3 Authority Key Identifier:
                keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/3230302e31322e3139322e302f32342d3234203d3e203532323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:8c:5e:2b:a3:0c:b3:b5:00:9b:29:ae:5d:e7:13:b6:a0:
         87:91:a0:65:be:97:32:b1:3f:49:95:89:03:73:0e:e7:df:83:
         48:2d:84:6a:b4:67:e6:df:71:48:f9:89:23:ea:ec:11:dd:d3:
         c1:ff:cc:18:2b:79:46:89:7a:86:b7:99:d2:72:b1:cc:aa:9c:
         8d:49:4b:b3:ec:96:ef:db:43:07:52:14:89:05:3c:cd:8f:a3:
         c6:a0:71:f6:92:3a:78:10:6f:1c:68:c8:97:95:7a:c9:e8:a1:
         d5:71:a4:3e:00:d4:5c:39:63:f2:b9:b3:80:00:7b:4d:a5:64:
         05:df:17:9e:26:0a:a3:9d:90:16:02:d5:59:25:fa:12:2d:f6:
         0f:22:83:27:f2:5a:e3:a8:bb:7f:4d:0c:c8:9e:b8:cd:47:c1:
         4f:a8:cf:46:fd:61:4c:6d:f9:ee:cb:8a:1e:8f:e2:5d:e3:3b:
         63:fb:16:e9:e4:d0:db:02:6e:e0:ea:a5:8c:9f:93:08:ce:c2:
         e3:86:c2:de:01:a9:68:f5:d9:e7:10:a4:dd:31:33:bd:28:3a:
         7a:27:69:28:7b:7f:03:5d:1f:c9:72:b6:ae:4c:0e:a6:95:ee:
         fa:29:76:59:12:41:ec:1f:4b:ad:31:71:97:19:b2:33:7d:ed:
         4e:a6:0d:93
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIXIJeYdRGv9g8imr+gcStNEZTyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVFNUJCNjBGNDVEQTdBNUVCODM5OEUxMTlCRjNFOUMy
RUE1OTRCMjAeFw0yNjAxMDYyMDQ3NDFaFw0yNzAxMDUyMDUyNDFaMDMxMTAvBgNV
BAMTKDNBNkI2NEFBQkYwRjdCRENEOUU3N0UxNUVERUJGRTgwQjc5Q0Q1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoD1MNF5a+SpOGoIH//hqg0XlX
Xbf4ER+hXOP1WnByc0HexbydhF6/NFRzRu0o4maKzdMe4nkNC3yVEXXl/EpKwYD3
BpLoSCXiRADiWhyy3V8U7uY+yYvoH5xyif50mmRp/qq/2YwdImkQPGRSubVaynC6
aHo0/k6f3tdk8DtTHJf5oL1E86CN5uj4NC4qeBDe3Uze92d99MUvpZv10Lep7abo
as30xl8MgJsXFqEnbpd4rZ+FAGmNF2FFwMiye9BkvzQN+l3LfzLVbeTmkfTdDnjh
zLOLDfjuy/xK/BnkMQcFeuxev/yLTOBufHEVhIroz/yli+yNsu4qyRcaPkkBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOmtkqr8Pe9zZ534V7ev+gLec1VIwHwYDVR0j
BBgwFoAUNeW7YPRdp6Xrg5jhGb8+nC6llLIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTg3Nzg5NjIwQUVGMTE3MUM4NUFFQkE0MUZFRkRCMkEz
QjY4QTY1QkUyOTAyQ0U5MzNCNEE4MzkxMUM4QTIxLzAvMzVFNUJCNjBGNDVEQTdB
NUVCODM5OEUxMTlCRjNFOUMyRUE1OTRCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUU1QkI2MEY0NURBN0E1RUI4
Mzk4RTExOUJGM0U5QzJFQTU5NEIyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E4Nzc4OTYyMEFFRjExNzFDODVBRUJBNDFGRUZEQjJBM0I2OEE2NUJF
MjkwMkNFOTMzQjRBODM5MTFDOEEyMS8wLzMyMzAzMDJlMzEzMjJlMzEzOTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgMwDAN
BgkqhkiG9w0BAQsFAAOCAQEAkH+MXiujDLO1AJsprl3nE7agh5GgZb6XMrE/SZWJ
A3MO59+DSC2EarRn5t9xSPmJI+rsEd3Twf/MGCt5Rol6hreZ0nKxzKqcjUlLs+yW
79tDB1IUiQU8zY+jxqBx9pI6eBBvHGjIl5V6yeih1XGkPgDUXDlj8rmzgAB7TaVk
Bd8XniYKo52QFgLVWSX6Ei32DyKDJ/Ja46i7f00MyJ64zUfBT6jPRv1hTG357suK
Ho/iXeM7Y/sW6eTQ2wJu4OqljJ+TCM7C44bC3gGpaPXZ5xCk3TEzvSg6eidpKHt/
A10fyXK2rkwOppXu+il2WRJB7B9LrTFxlxmyM33tTqYNkw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:49 2026 by rpki-client