This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa
File:                     3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          J0hH7i2/YvN5UIR5DtSOUj8gi/Bx2GeR+ZVjYZdHGeA=
Subject key identifier:   9B:73:8E:77:DB:46:88:CB:EA:ED:57:5E:C8:C5:03:E2:A3:AE:4B:98
Certificate issuer:       /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
Certificate serial:       63979AA5B9876350BE81C77D4A477F4903AE34BC
Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:28:02 +0000
ROA not before:           Tue 06 Jan 2026 19:23:02 +0000
ROA not after:            Tue 05 Jan 2027 19:28:02 +0000
asID:                     52468
IP address blocks:        200.229.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:97:9a:a5:b9:87:63:50:be:81:c7:7d:4a:47:7f:49:03:ae:34:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC
        Validity
            Not Before: Jan  6 19:23:02 2026 GMT
            Not After : Jan  5 19:28:02 2027 GMT
        Subject: CN=9B738E77DB4688CBEAED575EC8C503E2A3AE4B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:17:25:74:ad:7c:0b:3e:1e:34:59:30:1d:
                    6c:46:7d:64:92:7f:f7:dc:89:a1:1d:51:80:33:9b:
                    fe:a3:e5:dc:9a:11:4d:a1:eb:8d:9d:0f:de:39:7d:
                    47:b6:7d:eb:cc:ca:9d:ba:05:ad:da:d9:de:94:c6:
                    52:53:96:db:89:b4:ec:92:4a:17:83:74:0e:d7:6f:
                    41:eb:e9:d7:6f:cc:1b:cc:1f:a4:b1:d7:33:c4:18:
                    6f:ef:f9:dc:e0:d4:56:f6:96:53:24:09:3f:bb:dd:
                    8a:f3:2c:d6:89:97:7c:20:13:4d:8e:3e:26:4e:34:
                    71:fd:a2:89:f5:74:84:70:83:1b:40:e8:11:f1:37:
                    2b:24:ba:8f:10:c1:02:98:1a:6d:0d:12:a1:11:ef:
                    78:aa:6d:f0:88:e1:41:62:53:01:cb:d4:8f:e2:b2:
                    43:7f:6d:60:47:9d:7e:ad:75:93:1e:cc:12:e2:1c:
                    1a:92:4f:5e:ff:6b:5a:14:2c:01:68:ce:fb:a4:61:
                    c6:f6:0f:f5:03:83:bd:33:33:9c:94:f0:5c:ae:ab:
                    eb:99:73:fd:c7:e3:3f:b3:29:bb:55:02:c0:d7:50:
                    9f:60:ba:1f:7b:6b:9a:ce:1e:b7:9c:1d:7e:7e:56:
                    91:ea:be:aa:26:7a:73:a3:08:71:bb:c1:19:75:33:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:73:8E:77:DB:46:88:CB:EA:ED:57:5E:C8:C5:03:E2:A3:AE:4B:98
            X509v3 Authority Key Identifier:
                keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:54:36:5a:8c:de:b8:f0:a6:30:1c:16:a2:b4:03:33:8f:7e:
         2d:f5:22:60:6a:bd:5a:0d:86:8d:d4:ff:11:af:6c:c0:58:ee:
         26:af:a1:6e:d6:3f:47:a6:e7:2e:29:5e:5b:0a:ed:6d:46:99:
         14:51:49:e6:83:0d:86:5e:40:05:db:e3:2f:c7:79:5a:8d:3e:
         e6:f0:13:cd:da:a5:b2:17:cc:0b:0c:56:b8:d4:1b:a3:fd:a0:
         cb:90:bc:46:db:90:25:62:97:65:e7:04:49:98:d2:46:40:b5:
         2f:cb:dc:70:08:c3:9a:98:2f:55:9d:b1:a5:e8:8d:e9:03:34:
         06:93:ec:e7:19:11:3e:88:81:f8:ef:ee:eb:a3:09:f4:bf:86:
         7e:82:d8:2b:d4:d6:99:b1:54:d9:d4:9f:38:48:73:05:60:0a:
         e2:2a:87:51:32:a1:7f:82:b5:42:91:53:25:b4:55:4b:18:69:
         44:5b:89:75:38:0d:84:85:c7:80:f7:7a:cf:f4:4d:df:9f:cb:
         c1:13:dc:fc:c0:2e:92:4c:57:dc:9d:7e:c7:cf:ba:9c:be:ab:
         c2:24:a4:20:00:a9:2c:b9:1f:1b:d3:b4:a9:59:c1:43:a8:d6:
         ba:62:c6:96:a5:3e:69:d5:27:78:cd:a0:dd:8d:39:a7:2f:49:
         f7:11:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:43 2026 by rpki-client