This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139392e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          uBT+l/5zeak58PtwzQWGxdh09P9LHT9Dkz1XrFbxtfo=
Subject key identifier:   A0:99:AB:D3:54:A5:D6:2D:8D:61:66:A0:57:C7:CF:7B:35:D2:DC:D0
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       41EEA479C5CF32D8898A94F2A98AE210B7B47C4C
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 06 Jan 2026 19:03:20 +0000
ROA not before:           Tue 06 Jan 2026 18:58:20 +0000
ROA not after:            Tue 05 Jan 2027 19:03:20 +0000
asID:                     52274
IP address blocks:        200.12.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ee:a4:79:c5:cf:32:d8:89:8a:94:f2:a9:8a:e2:10:b7:b4:7c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Jan  6 18:58:20 2026 GMT
            Not After : Jan  5 19:03:20 2027 GMT
        Subject: CN=A099ABD354A5D62D8D6166A057C7CF7B35D2DCD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:d0:02:04:49:c0:c9:df:0b:d1:74:cd:51:
                    40:c7:84:ae:6f:21:6a:93:20:8e:78:bf:96:ad:84:
                    cd:c7:a0:78:25:57:84:44:7b:48:be:f4:bb:b6:d0:
                    dd:35:4d:cc:b5:50:f4:92:af:43:df:f3:a0:1e:a7:
                    85:c6:2f:76:ce:03:46:54:4f:bb:4d:01:fc:0a:56:
                    ea:8f:0c:53:75:85:ab:7e:01:f1:a7:a3:90:39:1a:
                    86:21:c7:eb:18:ce:c8:1e:bf:cc:72:14:89:48:b1:
                    22:64:87:0b:36:3b:62:74:c5:c0:cc:8c:79:72:0e:
                    38:41:41:e1:42:be:ed:00:a7:81:d9:bd:f1:b2:e8:
                    43:de:47:58:97:9d:df:48:3a:bb:66:7a:31:7c:a8:
                    ff:42:3b:9c:c0:d8:9f:66:31:2d:7c:c3:ed:cc:13:
                    55:ac:30:9b:17:e5:43:49:2a:28:21:75:d3:64:b4:
                    43:53:a2:7a:8a:a8:df:8a:33:ae:fe:ad:8f:e5:80:
                    3b:18:5d:87:9f:54:d2:4f:36:53:e4:d5:13:32:ca:
                    86:f7:36:28:3f:bb:0a:d5:9b:90:db:c3:c3:d4:36:
                    7d:0f:75:ee:41:00:79:13:1f:b7:43:d1:95:02:a0:
                    57:1c:de:e3:2f:96:d6:06:be:a0:d0:cc:bc:ea:d8:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:AB:D3:54:A5:D6:2D:8D:61:66:A0:57:C7:CF:7B:35:D2:DC:D0
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139392e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:c0:a0:db:07:e6:c9:77:3c:bb:80:94:74:0e:de:be:9a:
         d9:41:25:17:44:47:92:dd:4f:fb:10:45:37:d1:ba:73:5d:8a:
         9c:d2:8c:1d:6c:10:37:dd:a8:0b:38:30:6d:5c:b6:4e:83:fd:
         f6:1f:9f:3c:f7:33:49:fc:7e:6f:1e:dd:08:66:2d:e5:84:9e:
         ed:b8:dc:d4:86:aa:73:78:35:bf:62:44:bd:8a:fc:c2:8b:ca:
         3a:ec:34:67:f6:1b:5e:38:2e:65:5f:39:1d:68:6e:80:f0:89:
         60:09:ba:c7:1c:46:6d:8d:87:1b:9a:a7:da:67:60:ae:f8:29:
         60:38:b0:cd:54:93:ab:9b:89:fd:ad:1c:f8:ce:91:46:ab:f3:
         68:54:99:a4:b5:94:4e:d6:e7:b8:b7:2d:8c:e8:37:b1:27:f2:
         ff:aa:c3:fb:e8:7a:0a:20:c2:8f:75:13:54:26:9d:f0:49:eb:
         35:a5:42:4f:49:ba:be:fe:44:a7:30:34:83:88:49:0b:a3:41:
         3d:81:b2:4b:d1:b1:d7:11:06:69:06:4a:13:aa:41:78:cd:84:
         06:37:59:ff:ef:8a:0f:d0:4d:3a:c0:e7:c1:70:3f:ac:1c:58:
         b6:ca:90:47:4d:35:f3:99:ea:58:64:bd:20:a4:a8:0d:52:6f:
         c7:f3:11:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQe6kecXPMtiJipTyqYriELe0fEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MDk4OUEwMjQwNDIxQjlFNjJGOTNCNTk4QkUzOTBG
RDZDRENDNjAeFw0yNjAxMDYxODU4MjBaFw0yNzAxMDUxOTAzMjBaMDMxMTAvBgNV
BAMTKEEwOTlBQkQzNTRBNUQ2MkQ4RDYxNjZBMDU3QzdDRjdCMzVEMkRDRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJNACBEnAyd8L0XTNUUDHhK5v
IWqTII54v5athM3HoHglV4REe0i+9Lu20N01Tcy1UPSSr0Pf86Aep4XGL3bOA0ZU
T7tNAfwKVuqPDFN1hat+AfGno5A5GoYhx+sYzsgev8xyFIlIsSJkhws2O2J0xcDM
jHlyDjhBQeFCvu0Ap4HZvfGy6EPeR1iXnd9IOrtmejF8qP9CO5zA2J9mMS18w+3M
E1WsMJsX5UNJKighddNktENTonqKqN+KM67+rY/lgDsYXYefVNJPNlPk1RMyyob3
Nig/uwrVm5Dbw8PUNn0Pde5BAHkTH7dD0ZUCoFcc3uMvltYGvqDQzLzq2AUxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUoJmr01Sl1i2NYWagV8fPezXS3NAwHwYDVR0j
BBgwFoAUP2CYmgJAQhueYvk7WYvjkP1s3MYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMUZDRjAwNkRFMjMxQzFFOEY5QUY0MzMwNkREQTVGN0ZB
MUQyRDhENEU2RjhEQjJGMEIwOEM2M0QyRkZCREZELzAvM0Y2MDk4OUEwMjQwNDIx
QjlFNjJGOTNCNTk4QkUzOTBGRDZDRENDNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRjYwOTg5QTAyNDA0MjFCOUU2
MkY5M0I1OThCRTM5MEZENkNEQ0M2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTFGQ0YwMDZERTIzMUMxRThGOUFGNDMzMDZEREE1RjdGQTFEMkQ4RDRF
NkY4REIyRjBCMDhDNjNEMkZGQkRGRC8wLzMyMzAzMDJlMzEzMjJlMzEzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgMxzAN
BgkqhkiG9w0BAQsFAAOCAQEAe7/AoNsH5sl3PLuAlHQO3r6a2UElF0RHkt1P+xBF
N9G6c12KnNKMHWwQN92oCzgwbVy2ToP99h+fPPczSfx+bx7dCGYt5YSe7bjc1Iaq
c3g1v2JEvYr8wovKOuw0Z/YbXjguZV85HWhugPCJYAm6xxxGbY2HG5qn2mdgrvgp
YDiwzVSTq5uJ/a0c+M6RRqvzaFSZpLWUTtbnuLctjOg3sSfy/6rD++h6CiDCj3UT
VCad8EnrNaVCT0m6vv5EpzA0g4hJC6NBPYGyS9Gx1xEGaQZKE6pBeM2EBjdZ/++K
D9BNOsDnwXA/rBxYtsqQR00185nqWGS9IKSoDVJvx/MRIQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 17:36:13 2026 by rpki-client