This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa
File:                     3230302e37312e3138342e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          r0iRHiDr0NqQeYDPvoY3JwUV5Uir63MtZyphjLb1bYg=
Subject key identifier:   DA:16:43:F8:EF:53:90:C4:BE:EB:D1:CE:7F:35:D2:BE:6D:93:4F:BD
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       57C7D057E5EA097F6D2F01B4883E6CE723EDAD9E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:26 +0000
ROA not before:           Tue 06 Jan 2026 19:22:26 +0000
ROA not after:            Tue 05 Jan 2027 19:27:26 +0000
asID:                     6306
IP address blocks:        200.71.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c7:d0:57:e5:ea:09:7f:6d:2f:01:b4:88:3e:6c:e7:23:ed:ad:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:26 2026 GMT
            Not After : Jan  5 19:27:26 2027 GMT
        Subject: CN=DA1643F8EF5390C4BEEBD1CE7F35D2BE6D934FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:2c:af:21:81:18:27:09:f6:9f:37:4d:00:
                    07:0b:9c:2c:23:c5:a0:41:3c:f6:6d:21:39:27:f7:
                    86:50:2e:35:0a:18:a9:2d:ef:f7:cf:ff:da:cc:12:
                    26:d6:a6:89:3d:64:ff:02:4c:30:cd:66:56:55:e3:
                    4f:59:92:66:45:5d:98:50:42:50:c5:57:bf:14:f8:
                    24:1a:00:ae:7e:a1:41:4c:17:36:84:66:a7:05:f9:
                    22:f2:a3:0f:bc:8f:57:76:94:45:98:4a:df:7a:0b:
                    ec:5f:01:6d:ed:4f:dd:64:7e:c6:1f:58:14:66:93:
                    86:5c:89:93:c7:1e:d8:0d:6b:df:b9:78:b2:49:dd:
                    e6:86:c0:2d:cc:1d:c5:d6:25:6e:ad:54:45:40:a5:
                    76:77:14:83:97:31:ae:d6:f7:35:98:da:42:2c:cf:
                    8d:7a:5f:67:ef:af:60:98:8a:a7:a1:21:81:5a:cc:
                    b1:9a:30:13:6f:06:74:c2:d6:dd:1c:74:d3:7d:b3:
                    55:1d:69:fc:5d:c6:c1:4d:b7:b9:aa:80:1a:7a:aa:
                    dc:30:92:35:a8:fe:b6:75:ae:26:47:56:59:1e:6d:
                    ba:6b:ef:d7:83:84:db:62:ce:65:bf:54:e7:d2:a0:
                    af:a1:97:86:bb:5a:3c:af:af:51:19:bc:0c:12:33:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:43:F8:EF:53:90:C4:BE:EB:D1:CE:7F:35:D2:BE:6D:93:4F:BD
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3230302e37312e3138342e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:ff:81:45:94:17:9f:70:58:78:0b:54:97:25:57:59:c2:
         a8:07:2a:96:f3:ad:27:b2:7c:3d:70:bb:da:61:a7:0d:d3:c5:
         73:f5:0d:3f:34:c6:8b:7b:6d:c6:b0:d0:97:fb:74:cd:26:5c:
         bf:6b:e5:f7:26:7a:ad:08:64:c3:1a:7f:8e:4b:eb:4e:7c:a4:
         92:57:2d:e2:b8:2e:83:85:5a:13:a2:2b:5b:bf:ef:d3:44:24:
         5b:c3:57:05:0f:e1:fb:93:a3:23:74:30:9a:51:24:3d:74:a8:
         fa:87:12:bb:48:7b:55:3a:fd:e8:80:c7:28:61:41:44:25:d8:
         e1:a8:71:ec:ea:cc:b2:fb:46:92:6f:2c:30:f9:e3:75:56:66:
         77:09:89:ca:2d:37:0e:82:2f:fa:af:76:2d:70:2c:3d:3e:4e:
         4c:ca:8c:84:c2:7d:6a:1e:03:a4:72:1e:37:78:3c:db:c2:c6:
         8a:d6:a3:04:f7:e3:4f:5a:5a:8a:92:4c:c8:73:b3:e0:73:a9:
         ef:e9:1b:b4:62:55:c7:b2:8a:5f:41:38:a3:52:dd:61:b8:15:
         9c:f9:cc:c1:fe:12:dc:5a:63:a4:04:10:69:e1:f0:a9:30:93:
         37:44:b9:16:6a:02:d0:ac:a1:7e:1e:d4:c9:9d:bf:00:70:a1:
         fb:24:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:01:50 2026 by rpki-client