This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e302e302f31362d3136203d3e2036333036.roa
File:                     3136312e3231322e302e302f31362d3136203d3e2036333036.roa (raw, json)
Hash identifier:          zGL6mAHti9rAs+5dpiQYDA3fBnmYfTfaejb/L7Tss/M=
Subject key identifier:   87:CC:CE:45:EF:63:FC:E8:00:37:2A:2C:BB:31:BF:4A:66:A0:B3:DC
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       02624B7EFC0FBFC3C39E10420E36A55B4B26AD09
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e302e302f31362d3136203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:32 +0000
ROA not before:           Tue 06 Jan 2026 19:22:32 +0000
ROA not after:            Tue 05 Jan 2027 19:27:32 +0000
asID:                     6306
IP address blocks:        161.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:62:4b:7e:fc:0f:bf:c3:c3:9e:10:42:0e:36:a5:5b:4b:26:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:32 2026 GMT
            Not After : Jan  5 19:27:32 2027 GMT
        Subject: CN=87CCCE45EF63FCE800372A2CBB31BF4A66A0B3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:7b:c2:92:33:3f:70:96:09:27:c4:1c:68:
                    ca:76:5b:bb:93:1f:21:5a:b5:17:89:80:70:4e:9d:
                    cf:e7:ba:97:ff:b5:29:6b:83:f3:b8:c3:d2:74:39:
                    ec:98:83:26:ef:f5:53:0f:97:98:b0:b5:1e:f2:e5:
                    ae:94:b1:15:8f:d7:fe:7c:20:fe:ed:be:60:0a:c7:
                    73:80:49:c7:0c:09:ba:75:d6:bf:73:6f:e5:48:50:
                    a3:16:35:4d:78:40:9b:98:eb:5b:10:2f:d6:52:88:
                    d0:71:52:6c:4c:02:89:b0:da:bd:d5:ad:3a:7d:f7:
                    e6:fc:77:e0:cf:e2:60:3a:0d:50:95:fb:3e:49:21:
                    7e:cd:25:90:c5:0d:62:d4:ea:ef:e8:04:b3:2a:8a:
                    a9:8e:4d:c7:c7:0e:78:28:3a:02:3d:da:b0:15:ec:
                    d9:99:49:9d:e2:bd:65:98:ba:e5:cc:2c:83:1a:7d:
                    1a:4e:0a:27:1e:27:99:e6:e4:4d:92:0e:ea:4f:34:
                    df:16:be:a0:c9:bf:7e:27:c9:79:1f:11:7f:c5:77:
                    e6:96:be:54:d9:cf:2f:69:74:ea:25:c3:c1:3d:e8:
                    ff:50:79:50:47:47:51:10:6b:4d:9d:6f:67:14:30:
                    7a:6d:b0:a5:4a:4f:88:71:47:04:14:75:dd:c9:9b:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CC:CE:45:EF:63:FC:E8:00:37:2A:2C:BB:31:BF:4A:66:A0:B3:DC
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3231322e302e302f31362d3136203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:43:c6:c4:a3:80:32:12:c5:64:ca:0a:0e:f7:4d:c2:86:
         12:e8:8e:a0:66:0b:4f:eb:86:3a:95:fc:52:96:49:c3:6f:3f:
         e4:0c:f2:0e:e8:6b:04:40:d8:92:bf:07:68:cd:88:44:56:6e:
         7e:4b:d5:d7:31:d7:4c:fe:aa:50:0e:84:7f:7d:d8:09:7d:d9:
         f3:da:75:3e:aa:85:c0:6a:a8:53:ec:a6:ad:95:26:b9:35:94:
         a3:52:64:1d:3c:d1:9a:02:c7:95:41:98:38:7f:5d:96:a0:fe:
         69:19:48:6c:24:48:1c:f5:65:de:fd:e7:6d:73:d9:8f:cf:dd:
         fd:4d:d3:8f:ca:30:3e:cd:16:ee:cf:8a:07:e9:33:af:55:7a:
         fb:74:00:e5:56:c0:6f:39:e6:16:7a:19:b0:2d:69:29:f4:5d:
         62:1c:af:23:a5:b3:8a:69:c5:2a:c1:2f:0b:5a:99:ef:44:5a:
         e1:e3:57:8f:fc:3f:b5:30:20:94:31:14:7c:bf:df:d2:18:02:
         9d:c9:55:dd:59:6f:ce:f8:ed:a9:cb:f3:1d:e2:61:a9:46:d1:
         08:83:cf:e9:17:29:aa:7d:f0:8a:48:0a:c8:1a:7d:ff:3b:4e:
         3e:f2:c2:5f:a9:3e:ba:e3:a5:de:21:3c:53:d7:24:71:71:d6:
         1e:60:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:04 2026 by rpki-client