This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa
File:                     3230302e31322e3139372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          fQV/PMc+2pe93l68bR7PuLcRezYFCeYiFgZJBRd3STg=
Subject key identifier:   0F:7B:C2:19:AE:F7:22:A0:E8:7F:D0:C4:E7:5E:00:BC:1D:44:DE:7C
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       11291594B5887FDDE67DABF4ACEED26371970CB6
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 06 Jan 2026 19:03:23 +0000
ROA not before:           Tue 06 Jan 2026 18:58:23 +0000
ROA not after:            Tue 05 Jan 2027 19:03:23 +0000
asID:                     14618
IP address blocks:        200.12.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:15:94:b5:88:7f:dd:e6:7d:ab:f4:ac:ee:d2:63:71:97:0c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jan  6 18:58:23 2026 GMT
            Not After : Jan  5 19:03:23 2027 GMT
        Subject: CN=0F7BC219AEF722A0E87FD0C4E75E00BC1D44DE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:9b:3a:f9:9f:0c:21:c3:16:1b:d4:c2:a0:
                    20:89:ca:b0:4b:f0:e4:2f:77:27:55:52:80:83:e3:
                    ef:ff:ca:3f:64:7a:e7:28:72:25:d4:16:b4:82:0a:
                    14:cb:6e:c9:da:fa:15:bd:bf:37:5e:24:0c:05:d5:
                    1f:c8:07:38:5f:ba:70:02:e6:02:02:0b:f2:0c:16:
                    6d:69:6c:d1:3b:bc:b3:c4:5f:cc:a4:da:50:f8:b7:
                    64:d7:fb:f0:12:b2:35:6c:25:b6:dc:7a:34:8d:e9:
                    66:ff:17:01:97:17:b1:a6:2e:3e:ae:20:7e:75:c5:
                    a9:3e:17:93:59:a7:26:6f:c2:3a:3b:60:8e:38:1d:
                    c2:10:e6:03:2b:75:9a:61:87:a4:fb:5a:9c:56:9f:
                    37:5c:a8:b6:7b:19:48:e4:a4:72:b6:b8:1d:d1:36:
                    c1:03:09:75:42:ec:36:11:0c:6a:74:1a:0f:60:96:
                    85:f2:73:a5:6d:3b:b0:da:a5:04:fb:c0:82:9f:65:
                    86:2a:ec:db:75:f3:4a:77:69:17:22:c3:8f:c0:c1:
                    54:56:e2:e9:7e:13:66:b2:34:61:bb:8f:26:82:f1:
                    0a:f8:66:2e:c8:c4:e1:b2:2c:e7:cf:40:8a:33:b9:
                    7e:b4:dc:7e:5a:01:39:23:6b:46:75:c4:8b:38:ef:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7B:C2:19:AE:F7:22:A0:E8:7F:D0:C4:E7:5E:00:BC:1D:44:DE:7C
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:05:24:79:ec:da:3e:95:d8:06:9b:1c:77:96:a5:46:16:
         58:44:0a:e0:bd:9e:89:7f:d3:38:29:2a:71:50:8f:50:48:25:
         17:0f:22:9f:c2:9a:e3:9d:1b:f3:c6:1f:6c:8a:17:47:3f:c1:
         eb:3c:1d:f4:29:3f:b6:33:af:bd:fe:f0:ee:4a:f1:4f:27:0f:
         93:6c:59:16:29:e2:20:ed:9c:b3:44:94:85:dd:5f:5f:6d:d5:
         58:97:0e:17:72:6e:52:54:28:db:10:c8:55:47:e1:da:3f:18:
         cf:9a:cf:52:76:ca:0d:d9:62:18:f8:07:07:bb:c6:3d:19:f8:
         db:9c:b2:af:03:03:96:3c:0c:d8:23:f2:a3:65:6c:f4:06:a9:
         89:95:e9:c1:59:b2:22:a7:d5:37:76:07:56:af:4a:9b:64:6f:
         1a:c0:4c:77:50:e5:f9:77:6e:34:6b:77:b7:4c:09:42:e0:ca:
         38:44:83:6d:5b:c8:4f:0a:38:ea:52:99:be:63:cb:7b:bf:76:
         54:05:96:59:c1:bf:d1:08:f3:b9:48:b6:11:17:cf:e0:a5:95:
         94:93:ac:c1:81:24:37:f8:5f:50:9c:27:ce:9c:5c:2c:ed:f6:
         17:ec:e6:e2:18:0b:a2:3d:08:d2:c3:7f:7f:42:ce:d0:23:cb:
         ab:89:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:06 2026 by rpki-client