This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa
File:                     3230302e37312e3136302e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          tk87OuEcexKmhwO9Qy7aV3UXEQ8TZiGTO0G7Jftp3/k=
Subject key identifier:   39:3A:A8:6A:B0:A5:68:29:B4:0A:87:F5:A7:CB:B4:11:0C:B0:2E:DB
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       1D10D124703D20DBA816374E00E2FB51A7457363
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:35 +0000
ROA not before:           Tue 06 Jan 2026 19:22:35 +0000
ROA not after:            Tue 05 Jan 2027 19:27:35 +0000
asID:                     6306
IP address blocks:        200.71.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:10:d1:24:70:3d:20:db:a8:16:37:4e:00:e2:fb:51:a7:45:73:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:35 2026 GMT
            Not After : Jan  5 19:27:35 2027 GMT
        Subject: CN=393AA86AB0A56829B40A87F5A7CBB4110CB02EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:c4:e2:f6:a2:bc:d9:52:0b:0e:9a:2a:12:
                    76:7c:85:a0:bb:5e:7f:c7:8f:6c:f0:c3:cc:67:c0:
                    d9:6e:de:78:7a:bc:5a:a4:a2:99:ef:33:34:24:88:
                    19:90:3e:8c:23:4d:94:58:6e:94:a0:b5:a3:be:8a:
                    17:b7:ae:65:6d:50:91:c4:e2:56:77:ac:6a:d8:b1:
                    37:bc:1e:05:cb:33:0a:2e:e9:98:e5:ab:47:b5:71:
                    d2:e0:a5:f5:70:e9:56:c6:47:52:e1:59:dc:93:b7:
                    9e:6c:a2:bd:a9:99:d9:ae:ee:8a:9f:fa:77:80:dc:
                    96:55:ee:e2:b1:02:f3:56:ea:e8:91:87:1b:d1:ce:
                    2a:ce:bc:5c:10:ef:5c:46:69:d7:be:af:b0:30:07:
                    34:bc:74:71:9d:64:06:70:87:34:dc:5e:c9:59:28:
                    d5:bd:b5:d0:2a:89:ea:f7:e3:ec:74:c8:6d:44:4f:
                    67:f6:cb:49:d7:44:18:02:ec:3d:f8:99:ce:49:8d:
                    f7:6c:cc:fe:15:75:c7:ac:da:12:b3:ea:28:34:1d:
                    01:38:48:72:63:15:8d:a1:c4:71:45:c5:74:a9:4e:
                    3e:d5:43:bb:e6:46:20:24:ba:6b:b8:1c:78:42:aa:
                    89:39:ad:27:e5:4f:ba:50:a0:c9:57:6e:25:ca:e8:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:A8:6A:B0:A5:68:29:B4:0A:87:F5:A7:CB:B4:11:0C:B0:2E:DB
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3136302e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:d9:61:df:14:7e:d1:ca:78:9e:98:bb:99:f3:47:4e:43:ab:
         38:84:b1:c0:8f:4e:4b:5f:0e:98:6d:7a:c9:ba:84:92:ad:98:
         b7:cc:e2:4e:ed:72:d6:da:dc:ed:9b:43:fa:73:f9:62:e3:9f:
         62:4c:a0:d7:24:c5:de:9f:0f:d7:2c:0d:81:e4:d7:76:83:55:
         f0:15:e0:90:03:23:f5:aa:76:e2:ea:49:03:57:a0:85:96:11:
         a9:12:f3:8e:d5:55:4c:09:a7:b5:48:d8:2c:86:8d:3e:d1:17:
         03:42:dd:c4:65:e2:fa:51:08:2a:a0:95:f9:3a:c4:a3:4d:4f:
         c7:ee:55:ca:e5:8b:b2:c9:f7:62:e2:b7:1b:a3:85:de:37:00:
         13:e9:e0:e3:fb:b2:cf:83:9f:43:68:ff:32:18:c7:98:bf:c4:
         91:85:93:f7:7b:6f:bd:74:99:a5:06:b0:b9:5e:9d:f8:87:76:
         51:f4:cd:ed:57:9d:47:5f:39:9c:85:e5:50:94:55:1a:61:8a:
         80:01:63:62:aa:bf:7a:b8:fe:54:90:94:59:d1:3d:99:7c:07:
         f2:3c:aa:29:27:75:63:3a:84:4a:96:17:7c:09:13:de:26:27:
         8f:87:c9:bf:ce:b2:a5:a4:75:03:3b:0f:5e:34:ae:86:ad:2a:
         77:0e:4f:aa
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHRDRJHA9INuoFjdOAOL7UadFc2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNjAxMDYxOTIyMzVaFw0yNzAxMDUxOTI3MzVaMDMxMTAvBgNV
BAMTKDM5M0FBODZBQjBBNTY4MjlCNDBBODdGNUE3Q0JCNDExMENCMDJFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMV8Ti9qK82VILDpoqEnZ8haC7
Xn/Hj2zww8xnwNlu3nh6vFqkopnvMzQkiBmQPowjTZRYbpSgtaO+ihe3rmVtUJHE
4lZ3rGrYsTe8HgXLMwou6Zjlq0e1cdLgpfVw6VbGR1LhWdyTt55sor2pmdmu7oqf
+neA3JZV7uKxAvNW6uiRhxvRzirOvFwQ71xGade+r7AwBzS8dHGdZAZwhzTcXslZ
KNW9tdAqier34+x0yG1ET2f2y0nXRBgC7D34mc5JjfdszP4Vdces2hKz6ig0HQE4
SHJjFY2hxHFFxXSpTj7VQ7vmRiAkumu4HHhCqok5rSflT7pQoMlXbiXK6AQNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOTqoarClaCm0Cof1p8u0EQywLtswHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMyMzAzMDJlMzczMTJlMzEzNjMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIR6AwDQYJ
KoZIhvcNAQELBQADggEBALfZYd8UftHKeJ6Yu5nzR05DqziEscCPTktfDphtesm6
hJKtmLfM4k7tctba3O2bQ/pz+WLjn2JMoNckxd6fD9csDYHk13aDVfAV4JADI/Wq
duLqSQNXoIWWEakS847VVUwJp7VI2CyGjT7RFwNC3cRl4vpRCCqglfk6xKNNT8fu
Vcrli7LJ92Litxujhd43ABPp4OP7ss+Dn0No/zIYx5i/xJGFk/d7b710maUGsLle
nfiHdlH0ze1XnUdfOZyF5VCUVRphioABY2Kqv3q4/lSQlFnRPZl8B/I8qikndWM6
hEqWF3wJE94mJ4+Hyb/OsqWkdQM7D140roatKncOT6o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:21 2026 by rpki-client