This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33352e302f32342d3234203d3e2037343138.roa
File:                     3230302e32392e33352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          zlJdf7AbM8CTfb7ZiF5mc8qv+/X+SJdw645vhk/ZNMo=
Subject key identifier:   1E:C6:9E:D1:11:6C:FF:F2:74:10:48:2F:BE:FE:43:2A:B6:78:22:7F
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       5F378C2D812361AA8A4E5412F6F25304463E16F7
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:40 +0000
ROA not before:           Tue 06 Jan 2026 19:19:40 +0000
ROA not after:            Tue 05 Jan 2027 19:24:40 +0000
asID:                     7418
IP address blocks:        200.29.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:37:8c:2d:81:23:61:aa:8a:4e:54:12:f6:f2:53:04:46:3e:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:40 2026 GMT
            Not After : Jan  5 19:24:40 2027 GMT
        Subject: CN=1EC69ED1116CFFF27410482FBEFE432AB678227F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:80:b0:ec:9a:f3:27:16:7b:44:a7:e4:ab:
                    05:a2:bf:33:66:ba:1e:53:51:c9:20:a0:76:ab:01:
                    16:12:2d:0e:e3:6b:8d:67:73:0e:c0:09:64:dc:ee:
                    e4:08:49:4f:7d:1e:45:2c:f9:ed:aa:d3:a5:84:b6:
                    65:46:97:12:ea:3c:69:6d:c5:1b:ce:85:b2:92:af:
                    f4:c5:4f:78:be:a3:61:ce:c9:6f:9f:51:df:31:c1:
                    6a:62:14:e5:a4:32:62:3d:ed:9f:c9:22:a9:85:d9:
                    99:81:c3:e8:4f:2f:4e:b3:84:8b:51:34:bb:a9:93:
                    44:73:c7:a3:d9:b3:eb:6d:d7:0b:09:14:c9:88:8f:
                    95:6e:66:81:dd:14:6e:a6:55:d8:b4:26:48:bf:cc:
                    3d:e3:33:07:ba:ea:78:90:4f:27:fe:25:e2:50:dd:
                    11:bb:a4:41:ff:69:8b:ae:81:4d:7c:73:f1:de:37:
                    d6:0a:0b:6f:4a:e7:07:0c:57:48:46:f6:5d:73:f8:
                    8a:f5:b0:5b:59:e0:2d:5f:a8:41:dd:be:0a:6e:b1:
                    9f:df:53:63:a5:f3:6b:c0:f9:b5:bc:87:d6:85:be:
                    e0:19:c9:28:cb:14:f0:20:b2:4f:c3:4c:f9:87:15:
                    ae:92:60:46:fc:e3:0f:5d:6b:7d:62:dd:1c:94:b0:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:9E:D1:11:6C:FF:F2:74:10:48:2F:BE:FE:43:2A:B6:78:22:7F
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32392e33352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:25:6c:d6:08:ac:66:42:7e:94:aa:8f:6a:43:9d:b4:be:c9:
         04:7e:c9:90:86:a6:63:dc:87:29:a4:72:c7:87:24:ec:3f:9c:
         92:17:03:0f:29:35:b5:10:6e:a8:67:2a:99:1a:e0:8d:d3:b9:
         95:20:aa:66:c1:ec:92:ca:5b:51:c3:13:ad:a2:7d:04:da:e4:
         2e:a6:e6:ff:b8:a0:7e:07:b0:99:0a:fe:a4:12:87:f2:94:79:
         f2:f8:cb:5e:6a:84:b4:03:36:d9:2b:e7:57:b0:47:fd:d2:17:
         ec:05:a0:4b:41:6b:41:50:c7:1d:04:65:42:ec:47:b8:2a:73:
         44:4e:15:e6:e2:50:aa:a3:96:1d:97:82:a6:f8:45:88:56:85:
         57:20:af:2e:64:13:16:5b:59:31:81:34:c5:99:b9:70:a1:48:
         7c:44:b2:29:fb:43:1b:87:c8:01:78:0c:05:6b:ee:e5:b6:cf:
         e4:ae:25:8f:a3:70:a3:69:23:a8:cb:30:0b:40:e4:8a:53:a2:
         c7:56:3c:2c:b9:0b:1d:d7:d2:1e:7c:b3:10:81:7d:fd:38:14:
         d3:3e:7d:14:21:6e:d2:be:21:4c:c0:18:eb:82:ef:e4:fb:0b:
         2c:eb:43:67:15:cd:60:85:af:d2:ad:65:e9:13:2a:f1:5c:f6:
         60:12:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:35:56 2026 by rpki-client