This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e203131313732.roa
File:                     3230302e39342e3132382e302f31392d3234203d3e203131313732.roa (raw, json)
Hash identifier:          lJ9ym78QuufIqTilf814kQfc8v3XNV1KGdx3YJWKVm8=
Subject key identifier:   02:6D:F5:79:48:89:57:02:95:96:C2:B1:4F:2D:14:DB:29:B7:38:D9
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       17CE98A0C962568A966F107D83EDFBBFF79DFE44
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:44:57 +0000
ROA not before:           Tue 06 Jan 2026 19:39:57 +0000
ROA not after:            Tue 05 Jan 2027 19:44:57 +0000
asID:                     11172
IP address blocks:        200.94.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:98:a0:c9:62:56:8a:96:6f:10:7d:83:ed:fb:bf:f7:9d:fe:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:39:57 2026 GMT
            Not After : Jan  5 19:44:57 2027 GMT
        Subject: CN=026DF579488957029596C2B14F2D14DB29B738D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:be:07:75:65:73:16:58:e8:c3:3c:4e:7d:
                    97:01:fc:c9:3a:2e:77:88:b6:d3:61:5a:63:23:1e:
                    eb:0a:b8:62:c7:e4:ad:02:f3:da:78:fe:da:a7:5e:
                    62:6c:3d:61:ec:a2:dc:35:2e:01:5b:03:47:ef:0f:
                    83:c7:c8:6d:f6:e4:7c:9f:f8:bf:5c:94:51:00:e6:
                    97:f9:b0:ee:30:86:9c:64:48:ba:a9:35:0c:d4:55:
                    ac:2d:ad:3a:3d:e0:8b:11:d9:32:4b:08:08:1c:13:
                    34:2d:7a:f1:63:f4:7c:37:b6:53:fd:11:c8:1a:dd:
                    e4:d1:8e:e9:b1:43:b7:4b:52:49:91:eb:8e:2c:3e:
                    ca:38:a7:16:74:aa:2a:54:5b:fb:52:59:5d:91:0f:
                    8e:fd:f4:f8:0f:b7:49:d2:c6:1d:31:6c:f3:13:a2:
                    b7:12:95:f7:3a:20:fe:fc:aa:32:a4:01:9e:41:9a:
                    3f:8e:c8:b0:a6:1a:3f:15:e0:41:f1:9e:57:95:6d:
                    e0:48:b9:0d:55:78:a2:29:0f:9d:52:5b:e6:99:df:
                    31:4c:e3:e4:2a:c0:73:c7:ad:8b:b8:de:62:9f:b6:
                    3d:8a:cf:27:83:4e:59:f3:ed:d4:b1:9f:31:39:4c:
                    9d:cb:29:2d:17:a2:3e:88:c8:0c:f2:a2:a4:37:68:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:F5:79:48:89:57:02:95:96:C2:B1:4F:2D:14:DB:29:B7:38:D9
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e39342e3132382e302f31392d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:a3:76:b1:7c:22:f5:a8:f1:4d:36:7c:b4:7f:19:74:df:
         52:b1:9c:dd:09:af:6d:1d:1a:b3:9f:4e:f9:b6:ee:41:a3:46:
         32:f7:1c:84:d7:77:b3:5a:6e:9f:4f:4f:9a:e2:d1:d6:11:49:
         2c:90:e9:2b:6e:6c:c3:20:ce:56:35:df:c0:d2:b5:bf:ce:c4:
         18:13:e4:ce:9a:09:08:a3:01:b7:94:8b:c6:9d:f7:1b:57:39:
         c9:01:08:b6:af:46:93:71:24:7f:18:27:40:1c:6e:90:de:0b:
         d0:dc:7d:a9:b8:00:c5:5d:60:71:5b:db:86:1c:eb:91:8d:be:
         48:cc:47:a1:f7:35:97:10:85:bc:5b:3e:2a:3b:6b:8f:27:40:
         21:cd:5f:3f:c5:02:8b:5d:ec:6f:53:e6:ae:81:5d:75:65:46:
         84:e9:fb:9a:5d:7e:70:48:59:56:91:02:83:38:28:1b:9a:3b:
         6d:79:68:39:0e:da:db:cf:e1:18:18:55:0a:53:96:5d:1d:30:
         90:8e:52:98:12:0b:70:96:fa:4e:fc:b9:8a:a9:ca:68:dc:f7:
         24:14:96:d8:00:46:85:80:ba:11:ce:a5:dc:87:13:2a:92:8e:
         00:23:b6:c5:14:d9:db:ac:04:5c:2c:90:ad:0a:4f:2c:22:b9:
         31:8c:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:01 2026 by rpki-client