This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa
File:                     3230302e35322e3131322e302f32302d3234203d3e2036353033.roa (raw, json)
Hash identifier:          ThHL5DwIxlPbqPaDBpdk69EQCUNoJcNXKKLSjHapoFA=
Subject key identifier:   98:E5:D4:11:95:D2:38:1F:EC:A8:4A:79:97:C0:54:56:89:9A:63:5A
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       15F90FA6BF9CF96F4B74E284B133F56BA6546C14
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:45:05 +0000
ROA not before:           Tue 06 Jan 2026 19:40:05 +0000
ROA not after:            Tue 05 Jan 2027 19:45:05 +0000
asID:                     6503
IP address blocks:        200.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:0f:a6:bf:9c:f9:6f:4b:74:e2:84:b1:33:f5:6b:a6:54:6c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:05 2026 GMT
            Not After : Jan  5 19:45:05 2027 GMT
        Subject: CN=98E5D41195D2381FECA84A7997C05456899A635A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:16:b1:2b:cd:f1:e2:0d:08:dc:0d:81:87:
                    48:f5:f3:16:c5:b9:da:c5:ae:ad:a5:fe:2a:a4:49:
                    ca:10:32:fd:52:4c:a0:0f:a3:14:03:b6:2b:ab:05:
                    46:3d:29:20:ae:c1:ab:97:f1:59:70:89:f3:16:d6:
                    0e:74:6e:af:a1:dc:bc:41:76:48:46:6a:45:d5:98:
                    0f:b0:c0:5d:b9:85:37:b0:1f:cb:ac:51:3a:62:0e:
                    8c:60:34:68:a1:53:87:0c:76:df:db:6a:5b:ee:14:
                    1c:24:9e:93:04:fd:9b:b0:d7:81:18:d3:f2:77:88:
                    1c:90:f6:82:1f:57:64:b2:8d:a6:88:f6:5a:99:55:
                    61:29:f9:70:10:c1:07:41:7d:12:d6:d6:5c:c6:7b:
                    ea:a6:6c:95:2e:ce:8f:2e:26:ff:42:6f:15:6c:e6:
                    85:eb:05:ad:6d:1a:ea:a6:4b:b5:9b:02:b1:59:a5:
                    84:1a:05:9b:52:53:a1:5c:58:ef:4e:2e:3b:45:99:
                    ac:8e:ed:44:ff:90:80:7b:3d:64:f3:8a:03:30:a6:
                    a4:8a:88:54:82:4e:85:28:7d:78:45:97:50:2d:7d:
                    e0:3c:61:e7:19:e3:53:d4:4c:56:e8:fb:74:1b:d6:
                    83:5d:45:70:8a:2c:26:89:5d:e8:32:22:3e:46:4d:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E5:D4:11:95:D2:38:1F:EC:A8:4A:79:97:C0:54:56:89:9A:63:5A
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35322e3131322e302f32302d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:37:9e:5a:3f:9c:03:27:7c:1f:d2:db:e8:d8:b4:2b:b7:29:
         7e:64:8d:25:72:ed:40:bf:0b:06:74:9a:67:f3:79:70:54:7e:
         d6:fb:55:1c:17:46:76:17:a5:3c:55:60:66:a7:e8:97:4f:07:
         b5:d6:ee:86:03:2c:8d:fe:b8:43:54:41:a4:64:0e:eb:5a:b5:
         86:be:43:7c:1b:01:eb:ce:70:a4:37:75:45:11:f4:9f:50:86:
         b3:61:66:8b:61:a5:f6:7f:b0:9a:03:7d:98:f8:4d:83:0f:6a:
         de:3f:08:8d:05:5a:13:39:98:8f:5f:3c:cf:1c:16:65:8d:b0:
         1e:cd:38:cb:38:9f:36:e0:07:f3:ff:c7:53:c1:6c:70:ab:a2:
         45:d3:c5:fc:81:54:ee:01:a5:f5:1e:83:10:23:c3:0f:03:5c:
         23:75:5e:fe:b1:78:8b:d5:45:b2:4e:c2:f0:9b:58:c6:61:1e:
         02:a1:3f:01:1e:b6:4d:9a:17:24:27:44:59:33:e9:f4:4b:22:
         94:92:75:73:aa:10:2b:57:5e:4d:6c:c8:77:bb:fe:dc:20:67:
         62:4f:90:1e:4b:df:35:15:a3:46:1f:bd:3f:23:aa:b0:56:15:
         47:06:ce:01:f4:2c:7e:6d:c8:9a:00:c2:6b:0c:6d:92:62:42:
         39:33:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:14 2026 by rpki-client