This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa
File:                     3230302e31322e3139372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          eSlq1N+2yB/PkpGTJWz59zHmLTICAy/xQ64KDnrZwZ8=
Subject key identifier:   CC:C3:2A:4D:F1:6D:D2:FA:1D:6A:D9:5D:09:3A:A1:5D:A1:0C:E7:CD
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       722DC66E5EF3B51346C92DBC93A1EC289F65FB3E
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 06 Jan 2026 19:03:21 +0000
ROA not before:           Tue 06 Jan 2026 18:58:21 +0000
ROA not after:            Tue 05 Jan 2027 19:03:21 +0000
asID:                     16509
IP address blocks:        200.12.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2d:c6:6e:5e:f3:b5:13:46:c9:2d:bc:93:a1:ec:28:9f:65:fb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jan  6 18:58:21 2026 GMT
            Not After : Jan  5 19:03:21 2027 GMT
        Subject: CN=CCC32A4DF16DD2FA1D6AD95D093AA15DA10CE7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:3c:4d:b6:02:94:a5:34:ce:92:4d:60:fe:
                    ac:8a:ad:6e:05:c9:c7:36:08:92:bb:a7:14:7f:3b:
                    f6:3e:33:f7:b4:d5:76:2e:af:cf:ce:6d:e6:f7:3a:
                    d6:53:b4:d2:b9:12:dc:f2:11:f9:1d:e9:aa:6d:f0:
                    f1:9a:70:d2:eb:2b:3f:50:94:ec:e2:86:ed:3c:41:
                    64:4f:b4:04:a3:ef:c5:ba:46:ba:b6:82:d1:02:34:
                    f3:7e:14:bf:25:8a:35:ba:ff:3c:56:9f:44:a1:40:
                    77:d9:31:8f:f9:7f:36:76:04:51:d2:02:c1:61:b5:
                    64:2a:c7:84:23:bc:ee:9d:67:ad:49:f8:e7:ab:38:
                    46:b8:7a:94:15:d6:55:a0:6e:6a:38:d6:da:00:0b:
                    60:7a:a7:bd:8a:81:e3:52:0c:f0:43:d2:53:c6:f7:
                    41:88:f7:15:97:07:ca:70:6f:93:49:71:e5:90:8a:
                    34:dd:7a:4b:5b:cc:22:7a:79:bd:39:7c:1f:41:e2:
                    6f:ac:ef:e6:26:e1:6d:b8:f8:ec:39:da:38:78:f7:
                    3e:7f:38:69:29:cc:de:5b:df:81:36:48:f3:ed:d0:
                    4d:53:ee:94:72:f1:c0:c2:00:c7:ea:69:55:4d:04:
                    0c:a1:d3:5a:f8:ec:c0:b9:0c:b9:e7:c0:fd:d4:65:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:2A:4D:F1:6D:D2:FA:1D:6A:D9:5D:09:3A:A1:5D:A1:0C:E7:CD
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:73:14:5a:9e:e4:48:f9:8a:49:f1:a0:e5:e5:b6:af:76:5f:
         07:f5:3c:ca:cb:7e:f3:65:1a:be:ac:04:a3:c5:7d:91:ff:c0:
         19:2f:59:f9:64:0e:02:d2:d5:6b:d5:ce:c3:9e:14:69:f1:10:
         33:0e:f0:7d:05:71:50:7c:7f:85:4f:86:d5:84:a4:0a:bb:8b:
         96:06:ec:a5:78:f4:da:2d:0c:dc:da:9f:f7:fe:c3:9f:87:38:
         8b:04:72:43:a9:be:87:11:09:c3:77:2b:bd:9e:f4:38:56:20:
         a3:2c:40:14:33:5d:4f:3c:c9:28:a8:c8:ea:cc:86:6c:f8:45:
         69:48:80:94:ff:03:46:a1:dd:df:3a:bc:38:3a:f9:5a:6c:76:
         64:c8:7f:33:5d:c3:09:07:0c:18:bf:f6:f7:4a:23:f6:30:81:
         f3:a1:e9:62:73:14:cd:bd:64:f1:eb:00:cd:19:0b:c1:28:ff:
         dd:48:01:0e:14:a9:96:b9:53:ae:30:74:c1:b4:55:50:8b:25:
         66:b2:6b:98:a7:6a:8d:27:ba:bc:ac:cb:e1:2c:7f:d9:87:1e:
         3e:2c:5a:6e:c2:92:6b:03:59:f6:62:ab:04:91:36:5c:24:3f:
         3e:7d:39:57:24:e8:48:8d:c0:d6:6c:26:1d:c5:8b:d4:ab:c2:
         54:52:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:51:07 2026 by rpki-client