This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e203131313732.roa
File:                     3230302e39342e302e302f31372d3234203d3e203131313732.roa (raw, json)
Hash identifier:          92vckyUD596PPKe5q6ovYbgBpcI0kUF/NsizGkCzMo0=
Subject key identifier:   1C:1C:A1:A6:D7:31:6B:D2:F7:B6:F1:49:29:66:B2:8B:4E:04:48:33
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       7A34D3686A7D3CCE3B63581DB08D0625726EF4FB
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:45:07 +0000
ROA not before:           Tue 06 Jan 2026 19:40:07 +0000
ROA not after:            Tue 05 Jan 2027 19:45:07 +0000
asID:                     11172
IP address blocks:        200.94.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:34:d3:68:6a:7d:3c:ce:3b:63:58:1d:b0:8d:06:25:72:6e:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:07 2026 GMT
            Not After : Jan  5 19:45:07 2027 GMT
        Subject: CN=1C1CA1A6D7316BD2F7B6F1492966B28B4E044833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:62:64:77:8f:87:d2:33:b2:96:c6:5f:69:
                    92:55:88:21:18:4b:77:a6:d0:7d:9b:56:0b:06:c7:
                    a2:4f:16:84:18:31:15:3f:cd:18:cc:7c:43:a7:47:
                    99:bd:97:2e:f6:da:78:6e:51:58:b0:ba:85:64:5a:
                    3d:cd:d0:06:48:ae:b0:e0:4e:ff:ef:90:11:24:f6:
                    c7:bf:4e:52:c6:91:89:2f:a0:0a:71:a6:b2:75:b6:
                    ca:d8:86:9f:e0:23:54:4d:32:19:9a:12:04:39:25:
                    31:10:00:bb:02:02:35:8e:c8:30:3d:e1:1f:17:75:
                    ac:d5:04:aa:d2:8e:22:76:df:2f:1d:d5:da:14:3f:
                    52:ae:d7:50:6d:19:4a:af:d9:ca:47:3f:85:2c:0d:
                    7d:6e:da:bd:ab:b6:5d:8c:86:9b:da:4b:76:61:73:
                    f1:09:94:b0:28:a7:3e:05:91:e5:b6:67:cb:e1:2d:
                    04:da:24:0d:08:cc:f7:30:5c:c7:78:d7:bf:4e:bc:
                    03:dd:4e:48:ba:bc:24:04:32:1c:40:61:ef:f1:ce:
                    fe:ae:7c:7f:f8:73:2c:df:1c:c8:d2:19:98:01:f0:
                    b1:6d:ff:0d:b3:a3:41:f5:fb:1b:14:6e:e0:12:8d:
                    09:e1:f8:52:c7:ff:75:da:a3:54:4c:8e:0f:2b:53:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1C:A1:A6:D7:31:6B:D2:F7:B6:F1:49:29:66:B2:8B:4E:04:48:33
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e302e302f31372d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:48:6a:81:68:e9:08:d5:93:2f:18:18:6a:66:6e:65:af:a8:
         bf:d1:d7:37:32:c1:27:ee:f1:c4:09:aa:6c:31:24:a2:fb:65:
         3a:e2:f9:9d:40:42:70:9a:a0:ea:5c:18:fa:89:34:3d:e1:06:
         3e:e1:2c:85:59:43:57:ed:60:92:09:9c:61:40:8e:1c:c2:21:
         cd:e6:f4:fa:9d:82:90:be:8e:c4:99:fe:9d:ab:a0:0d:b3:78:
         d5:9d:0c:a1:ad:46:f0:4f:ce:a8:cb:ce:91:4b:6e:1e:bc:3d:
         04:11:a4:ef:55:5c:8a:2f:4a:56:48:85:62:8d:4f:c1:47:12:
         25:85:cc:9f:74:84:03:d0:82:be:4c:5f:9f:bf:62:67:ac:16:
         e6:1a:d6:48:61:29:98:4a:27:12:3d:05:16:e3:9a:7d:c6:49:
         3d:70:2b:dc:9f:f0:14:20:6a:13:ab:d1:2d:43:48:49:4d:2e:
         76:7c:d0:8c:17:d7:0c:b4:a2:2d:3d:1d:99:45:37:02:54:9d:
         bf:24:ed:b8:f9:5e:d0:d0:55:36:c5:fe:77:2c:71:ff:79:d5:
         f7:24:32:4e:0d:15:ee:8c:53:84:4c:94:b6:bb:3e:60:1d:68:
         0e:73:3b:a3:46:aa:ce:37:52:9b:9e:47:a3:00:77:59:df:ff:
         47:22:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:30 2026 by rpki-client