This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/3230302e33342e3133352e302f32342d3234203d3e2037303837.roa
File:                     3230302e33342e3133352e302f32342d3234203d3e2037303837.roa (raw, json)
Hash identifier:          OgQGFo/wxZpeN8w6x70SniTOsbZQrafMMrTY90n+lKk=
Subject key identifier:   CB:D2:F7:AF:E4:54:15:EC:72:34:42:E4:AA:84:84:34:1B:8C:75:D0
Certificate issuer:       /CN=B33D645E6A5CF960775ABC065DCEC403DBA9ABE4
Certificate serial:       6FFA62B7EED5F6A67E53059209D3950D59B3878E
Authority key identifier: B3:3D:64:5E:6A:5C:F9:60:77:5A:BC:06:5D:CE:C4:03:DB:A9:AB:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/3230302e33342e3133352e302f32342d3234203d3e2037303837.roa
Signing time:             Wed 14 Jan 2026 12:35:01 +0000
ROA not before:           Wed 14 Jan 2026 12:30:01 +0000
ROA not after:            Wed 13 Jan 2027 12:35:01 +0000
asID:                     7087
IP address blocks:        200.34.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fa:62:b7:ee:d5:f6:a6:7e:53:05:92:09:d3:95:0d:59:b3:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33D645E6A5CF960775ABC065DCEC403DBA9ABE4
        Validity
            Not Before: Jan 14 12:30:01 2026 GMT
            Not After : Jan 13 12:35:01 2027 GMT
        Subject: CN=CBD2F7AFE45415EC723442E4AA8484341B8C75D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:17:dc:ac:96:8a:a9:c6:60:4b:c6:2d:90:
                    92:6d:98:bc:cc:2b:a5:99:a8:67:56:81:b3:9a:06:
                    71:9d:c6:cd:af:44:f3:72:73:9d:01:e4:90:c9:b9:
                    88:06:0c:5f:5f:75:b5:dc:d1:11:31:01:a9:53:7d:
                    2d:21:77:6e:31:43:19:28:b3:3c:5c:3f:c5:7a:d2:
                    46:fd:a2:51:1e:9f:16:da:92:6a:3d:4b:0e:a6:b6:
                    98:4d:e0:92:4d:2a:1b:1c:20:2a:7f:77:bb:ba:1b:
                    11:75:cf:37:ef:af:01:3a:5b:1c:d0:c4:e7:ea:1b:
                    48:e6:6a:4b:23:bd:21:c3:37:ad:cb:96:aa:bc:f6:
                    15:d1:c6:fd:dd:13:e4:5d:05:5e:b8:b8:4d:7c:b7:
                    52:f7:8e:34:78:e5:19:7d:ba:13:ab:05:62:28:56:
                    ee:b2:5f:2d:eb:62:de:e0:1a:c5:61:b8:c2:6b:94:
                    41:c9:85:b7:fc:e8:8c:2a:15:07:47:88:df:a0:59:
                    87:47:ac:81:22:3e:4f:16:55:15:be:90:d7:95:65:
                    8c:ca:58:5b:4b:3a:c4:0d:e6:b8:3a:7e:b5:ab:a7:
                    0b:35:f6:d1:49:56:8a:b3:96:39:4f:1a:e3:c0:38:
                    f5:da:8f:29:32:8f:31:5e:d2:f3:bf:8a:19:82:28:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:F7:AF:E4:54:15:EC:72:34:42:E4:AA:84:84:34:1B:8C:75:D0
            X509v3 Authority Key Identifier:
                keyid:B3:3D:64:5E:6A:5C:F9:60:77:5A:BC:06:5D:CE:C4:03:DB:A9:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33D645E6A5CF960775ABC065DCEC403DBA9ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA96FE9DC29C23C4589BAFCF5D4FB7A65A8E142D89BDC1DAD1383AA743D02B26/0/3230302e33342e3133352e302f32342d3234203d3e2037303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:3b:88:fb:02:9b:d5:54:de:94:9d:3c:23:ba:ca:9f:7b:60:
         8a:b6:a6:ea:ba:99:b5:f7:78:fc:50:73:08:30:41:ca:83:4c:
         d0:21:cf:8e:b4:15:3e:d3:4a:bd:a3:e9:0a:d7:28:c4:73:91:
         b2:d2:d0:0e:3e:25:ec:a8:41:a5:17:90:d4:8a:a2:1d:c9:cf:
         ed:3f:a6:55:09:3e:05:2a:a6:e8:1e:2e:39:19:62:70:64:1b:
         21:2c:c3:b4:c1:7e:b0:1b:20:e6:cd:20:d3:c6:7a:25:03:69:
         95:e1:35:87:21:08:95:6b:0b:5d:5a:f6:c2:22:a5:c6:5b:a2:
         43:1d:c5:c3:04:d8:f4:39:8c:fe:fa:ee:c5:1c:61:67:21:1b:
         28:e5:32:04:0e:f8:96:e6:32:27:de:cb:91:e8:d4:83:e6:85:
         9f:16:32:7f:72:a0:9b:7b:2c:09:87:bd:b4:43:ae:1e:07:09:
         3a:87:cf:80:07:3f:07:8b:b4:67:a7:56:e9:d5:a9:7a:2c:02:
         99:5e:1e:c7:b8:0a:8a:70:7b:af:b9:15:7e:8a:1b:fd:81:9f:
         a5:ad:fa:73:1c:1b:b6:a5:87:be:7c:ed:e7:21:28:e7:d8:0b:
         5c:ae:7e:67:ed:fe:cd:af:a2:fa:2a:bb:99:6f:8d:96:68:70:
         2d:d7:5d:72
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUb/pit+7V9qZ+UwWSCdOVDVmzh44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMzRDY0NUU2QTVDRjk2MDc3NUFCQzA2NURDRUM0MDNE
QkE5QUJFNDAeFw0yNjAxMTQxMjMwMDFaFw0yNzAxMTMxMjM1MDFaMDMxMTAvBgNV
BAMTKENCRDJGN0FGRTQ1NDE1RUM3MjM0NDJFNEFBODQ4NDM0MUI4Qzc1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnxfcrJaKqcZgS8YtkJJtmLzM
K6WZqGdWgbOaBnGdxs2vRPNyc50B5JDJuYgGDF9fdbXc0RExAalTfS0hd24xQxko
szxcP8V60kb9olEenxbakmo9Sw6mtphN4JJNKhscICp/d7u6GxF1zzfvrwE6WxzQ
xOfqG0jmaksjvSHDN63Llqq89hXRxv3dE+RdBV64uE18t1L3jjR45Rl9uhOrBWIo
Vu6yXy3rYt7gGsVhuMJrlEHJhbf86IwqFQdHiN+gWYdHrIEiPk8WVRW+kNeVZYzK
WFtLOsQN5rg6frWrpws19tFJVoqzljlPGuPAOPXajykyjzFe0vO/ihmCKA7XAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUy9L3r+RUFexyNELkqoSENBuMddAwHwYDVR0j
BBgwFoAUsz1kXmpc+WB3WrwGXc7EA9upq+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTk2RkU5REMyOUMyM0M0NTg5QkFGQ0Y1RDRGQjdBNjVB
OEUxNDJEODlCREMxREFEMTM4M0FBNzQzRDAyQjI2LzAvQjMzRDY0NUU2QTVDRjk2
MDc3NUFCQzA2NURDRUM0MDNEQkE5QUJFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzNENjQ1RTZBNUNGOTYwNzc1
QUJDMDY1RENFQzQwM0RCQTlBQkU0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkE5NkZFOURDMjlDMjNDNDU4OUJBRkNGNUQ0RkI3QTY1QThFMTQyRDg5
QkRDMURBRDEzODNBQTc0M0QwMkIyNi8wLzMyMzAzMDJlMzMzNDJlMzEzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIIocwDQYJ
KoZIhvcNAQELBQADggEBAKQ7iPsCm9VU3pSdPCO6yp97YIq2puq6mbX3ePxQcwgw
QcqDTNAhz460FT7TSr2j6QrXKMRzkbLS0A4+JeyoQaUXkNSKoh3Jz+0/plUJPgUq
pugeLjkZYnBkGyEsw7TBfrAbIObNINPGeiUDaZXhNYchCJVrC11a9sIipcZbokMd
xcME2PQ5jP767sUcYWchGyjlMgQO+JbmMifey5Ho1IPmhZ8WMn9yoJt7LAmHvbRD
rh4HCTqHz4AHPweLtGenVunVqXosApleHse4Copwe6+5FX6KG/2Bn6Wt+nMcG7al
h7587echKOfYC1yufmft/s2vovoqu5lvjZZocC3XXXI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:29 2026 by rpki-client