This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33352e302f32342d3234203d3e203631343532.roa
File:                     3139382e31322e33352e302f32342d3234203d3e203631343532.roa (raw, json)
Hash identifier:          gLgjUBD//YRhqd8MkIlivMt4xoXkDCn2fvOJ7u9lu8Y=
Subject key identifier:   19:C5:2C:51:A1:BE:41:0E:98:BA:30:BD:CD:12:61:DB:7D:16:4A:36
Certificate issuer:       /CN=1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5
Certificate serial:       1E43D569B43C49A20107DCE2DEFBA61907EDBC54
Authority key identifier: 1D:83:DD:44:AE:73:AE:85:DC:9D:93:DE:F2:2E:94:54:6C:DF:24:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33352e302f32342d3234203d3e203631343532.roa
Signing time:             Wed 14 Jan 2026 19:25:00 +0000
ROA not before:           Wed 14 Jan 2026 19:20:00 +0000
ROA not after:            Wed 13 Jan 2027 19:25:00 +0000
asID:                     61452
IP address blocks:        198.12.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:d5:69:b4:3c:49:a2:01:07:dc:e2:de:fb:a6:19:07:ed:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5
        Validity
            Not Before: Jan 14 19:20:00 2026 GMT
            Not After : Jan 13 19:25:00 2027 GMT
        Subject: CN=19C52C51A1BE410E98BA30BDCD1261DB7D164A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:af:ac:f2:46:5a:32:16:3d:3a:7a:99:5a:
                    08:61:77:fa:77:0a:4e:51:87:cd:7c:28:76:09:ba:
                    e1:8f:a2:e7:30:cb:32:ff:47:4a:33:5e:ba:88:39:
                    16:24:ed:98:34:af:89:22:ff:0a:17:34:75:71:00:
                    23:a8:8e:7b:9e:49:bf:3d:71:2d:45:89:a6:f8:ea:
                    3d:d1:bb:a3:43:99:79:00:f0:dc:87:a3:45:81:59:
                    eb:78:50:a0:46:1c:c6:f0:b6:ab:19:59:97:7a:69:
                    0e:7e:d5:05:bc:65:d5:de:bb:da:c5:25:0b:37:4c:
                    2d:3e:ac:22:d3:4a:4b:18:e4:32:84:a7:c5:bf:38:
                    d1:14:b9:6d:c0:23:75:2f:b2:9a:3e:8d:d8:a2:74:
                    e1:ed:b1:d4:ee:b2:07:4b:6b:0f:56:08:04:69:18:
                    4e:dd:22:71:0a:b4:fd:a0:7f:97:8b:d0:c0:d5:8f:
                    25:a1:6d:27:d9:72:2c:ea:9e:6e:d5:dc:ae:f8:a9:
                    c5:fe:63:cb:61:9d:1f:3f:65:78:41:70:53:bd:d2:
                    f1:1c:d3:67:39:31:26:31:ca:0b:33:d6:da:3b:4c:
                    3d:03:29:6a:63:6f:c6:bf:8d:b7:fc:54:1d:ab:d0:
                    5f:bb:64:c5:0a:0b:9b:2a:7c:cd:45:c1:f0:cc:73:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:2C:51:A1:BE:41:0E:98:BA:30:BD:CD:12:61:DB:7D:16:4A:36
            X509v3 Authority Key Identifier:
                keyid:1D:83:DD:44:AE:73:AE:85:DC:9D:93:DE:F2:2E:94:54:6C:DF:24:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33352e302f32342d3234203d3e203631343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:6f:41:1e:47:b1:90:62:80:2a:58:81:a3:2b:30:c7:e7:
         d3:72:9c:4f:98:f6:ee:0c:96:b0:ce:c2:19:ba:4b:bd:30:8f:
         c9:f1:c0:61:0d:6a:4a:ba:09:c0:6c:1c:c9:c9:38:fd:d2:9a:
         5b:9a:b9:3e:36:2f:83:8e:4a:0c:8f:75:94:81:b0:df:95:31:
         b8:b1:f3:78:20:35:69:da:6b:94:18:7e:c5:cf:4a:4a:a6:b5:
         51:7a:d4:32:4d:b9:dc:cd:cb:59:69:c5:03:79:3f:16:6b:4e:
         75:34:0e:c0:22:a1:98:c5:1f:b8:81:20:90:c8:23:7b:c6:9b:
         4a:55:05:ab:a9:33:5d:df:02:65:bd:10:6c:24:db:de:57:86:
         31:1d:f7:ba:38:50:eb:6c:20:05:83:9b:a9:bc:9f:fa:5b:40:
         1c:5e:6e:76:2b:ec:85:8a:d5:1f:fd:59:71:e6:08:4c:e9:61:
         e1:58:31:9b:d2:7a:72:2d:97:ae:c5:50:87:9f:48:9c:2a:61:
         6f:d0:16:de:e0:cb:a0:8c:ad:27:b5:9f:99:6d:da:4e:93:00:
         71:2d:58:21:0d:63:80:49:6a:b7:bb:6c:63:1a:ff:2b:24:3c:
         32:be:5e:ad:6c:81:fd:0e:16:ec:1c:4b:2a:cb:8e:c6:e1:cf:
         d5:10:75:f2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHkPVabQ8SaIBB9zi3vumGQftvFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ4M0RENDRBRTczQUU4NURDOUQ5M0RFRjIyRTk0NTQ2
Q0RGMjRCNTAeFw0yNjAxMTQxOTIwMDBaFw0yNzAxMTMxOTI1MDBaMDMxMTAvBgNV
BAMTKDE5QzUyQzUxQTFCRTQxMEU5OEJBMzBCRENEMTI2MURCN0QxNjRBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xq+s8kZaMhY9OnqZWghhd/p3
Ck5Rh818KHYJuuGPoucwyzL/R0ozXrqIORYk7Zg0r4ki/woXNHVxACOojnueSb89
cS1Fiab46j3Ru6NDmXkA8NyHo0WBWet4UKBGHMbwtqsZWZd6aQ5+1QW8ZdXeu9rF
JQs3TC0+rCLTSksY5DKEp8W/ONEUuW3AI3Uvspo+jdiidOHtsdTusgdLaw9WCARp
GE7dInEKtP2gf5eL0MDVjyWhbSfZcizqnm7V3K74qcX+Y8thnR8/ZXhBcFO90vEc
02c5MSYxygsz1to7TD0DKWpjb8a/jbf8VB2r0F+7ZMUKC5sqfM1FwfDMc4fNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGcUsUaG+QQ6YujC9zRJh230WSjYwHwYDVR0j
BBgwFoAUHYPdRK5zroXcnZPe8i6UVGzfJLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQzE3Njk2OEZFMjc1MDRFN0FDMjQ3N0RBNjE1RjU5ODZB
RkE5NThFOTlFNEY4NDkxRTg3NzAyMzhCOThEQzM3LzAvMUQ4M0RENDRBRTczQUU4
NURDOUQ5M0RFRjIyRTk0NTQ2Q0RGMjRCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDgzREQ0NEFFNzNBRTg1REM5
RDkzREVGMjJFOTQ1NDZDREYyNEI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkMxNzY5NjhGRTI3NTA0RTdBQzI0NzdEQTYxNUY1OTg2QUZBOTU4RTk5
RTRGODQ5MUU4NzcwMjM4Qjk4REMzNy8wLzMxMzkzODJlMzEzMjJlMzMzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGDCMwDQYJ
KoZIhvcNAQELBQADggEBAB0fb0EeR7GQYoAqWIGjKzDH59NynE+Y9u4MlrDOwhm6
S70wj8nxwGENakq6CcBsHMnJOP3SmluauT42L4OOSgyPdZSBsN+VMbix83ggNWna
a5QYfsXPSkqmtVF61DJNudzNy1lpxQN5PxZrTnU0DsAioZjFH7iBIJDII3vGm0pV
BaupM13fAmW9EGwk295XhjEd97o4UOtsIAWDm6m8n/pbQBxebnYr7IWK1R/9WXHm
CEzpYeFYMZvSenItl67FUIefSJwqYW/QFt7gy6CMrSe1n5lt2k6TAHEtWCENY4BJ
are7bGMa/yskPDK+Xq1sgf0OFuwcSyrLjsbhz9UQdfI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:00 2026 by rpki-client