This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa
File:                     3230302e37362e3132382e302f31382d3234203d3e2036353033.roa (raw, json)
Hash identifier:          Mhstb74l4SjMlLECehDuu2guDjChcas94jWK3oNR8Ao=
Subject key identifier:   DF:A8:69:8E:88:3E:49:47:B8:59:67:9E:FD:7E:2B:35:A8:CE:ED:B1
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       4BE58518B236DD17F1C10D951AED75EDC445D7C0
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:45:04 +0000
ROA not before:           Tue 06 Jan 2026 19:40:04 +0000
ROA not after:            Tue 05 Jan 2027 19:45:04 +0000
asID:                     6503
IP address blocks:        200.76.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e5:85:18:b2:36:dd:17:f1:c1:0d:95:1a:ed:75:ed:c4:45:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:04 2026 GMT
            Not After : Jan  5 19:45:04 2027 GMT
        Subject: CN=DFA8698E883E4947B859679EFD7E2B35A8CEEDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:17:dc:3e:30:3c:e6:09:2a:6c:b4:b2:72:
                    c1:4c:4d:1d:9a:e9:7b:cc:0b:b6:55:5c:6a:f8:ae:
                    47:09:7b:6e:e3:18:72:08:a9:ff:ca:eb:8f:09:c9:
                    42:36:d2:7b:c5:6a:b0:27:a9:dd:9b:9a:c4:ed:db:
                    80:4a:1e:8b:6d:56:dd:b7:8f:5b:20:1d:e0:46:4d:
                    34:2d:37:de:59:2c:cc:7d:dc:46:4b:00:95:4a:dc:
                    c9:44:57:a1:42:af:0f:ac:86:94:53:d8:a1:3b:3a:
                    53:2e:3b:63:ad:b1:94:bb:1e:bd:1b:26:a3:14:81:
                    98:a2:cf:1a:04:bf:74:d3:cd:ba:db:2c:a2:ac:64:
                    e0:13:a0:2b:d5:3b:c0:06:64:37:57:b1:33:21:5c:
                    20:89:e2:00:8d:31:74:0f:72:01:59:e6:5e:11:b2:
                    df:20:bc:e4:1d:19:1c:ce:1b:a4:2f:be:ab:0a:93:
                    3a:98:fa:be:e5:83:f5:85:0f:74:06:42:30:bd:84:
                    46:d5:a7:5f:d9:89:3d:df:32:e0:0d:32:94:4b:21:
                    7b:08:36:76:5d:64:c7:2d:0a:56:ef:20:e5:c3:2e:
                    7e:b0:56:0b:34:c9:77:9d:63:7f:e9:b2:f1:d1:a3:
                    27:1d:84:25:af:8e:bf:3e:25:ba:0b:d1:41:a7:08:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:69:8E:88:3E:49:47:B8:59:67:9E:FD:7E:2B:35:A8:CE:ED:B1
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e37362e3132382e302f31382d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.76.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:c7:6f:2b:c6:ff:f5:b6:04:91:9f:96:27:46:c2:54:bc:
         2f:48:fd:aa:6d:1f:52:b1:d8:f1:42:19:5b:f3:aa:24:cf:99:
         5c:4a:3d:9a:7c:a9:08:0c:00:9b:85:48:79:c2:7a:10:90:e6:
         24:3d:e4:aa:36:b5:23:75:53:34:ac:40:db:2f:83:59:46:80:
         dc:05:67:eb:f7:d8:50:24:45:a3:dd:69:f7:0f:e8:c7:3f:fe:
         e8:2c:ed:ef:42:cd:f7:a0:f0:c6:a0:38:84:e2:7e:fd:f4:f0:
         a6:42:31:c7:31:c9:7f:d6:99:56:d3:0a:6b:e4:1c:d2:d0:ef:
         93:d5:20:3e:8d:f2:8d:9c:9f:44:0e:ff:f5:21:ba:ed:66:0f:
         8c:6b:2e:71:27:33:3a:f1:2d:90:c2:d5:24:5c:86:c7:6d:15:
         0b:45:05:08:7f:11:e6:3d:7d:80:68:93:cd:2e:38:01:6a:e0:
         49:ed:05:4f:81:cf:46:38:06:cb:40:6b:a4:95:0c:2b:8d:14:
         8f:71:d8:57:dc:d0:8e:8f:e2:96:09:bd:a3:83:d2:e1:b8:56:
         a7:34:3b:91:62:07:95:f5:21:7a:e8:b9:ca:fd:a7:73:54:04:
         86:a4:d5:e2:e0:95:ef:1e:87:e3:8b:62:68:88:40:c7:b9:b2:
         1d:fe:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:23 2026 by rpki-client