This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa
File:                     3230302e35382e3136302e302f31392d3234203d3e203235363230.roa (raw, json)
Hash identifier:          T6eGzpL8MC8kElHdR9KMygtctRR8L+21R7s65vhKA2o=
Subject key identifier:   C4:A3:8A:07:AB:F5:0B:D3:10:98:FC:1E:08:50:C8:20:B8:39:75:C9
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       17ADCC40EE3E0BFF8746150FE887C06A808DD1AF
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa
Signing time:             Tue 06 Jan 2026 19:23:05 +0000
ROA not before:           Tue 06 Jan 2026 19:18:05 +0000
ROA not after:            Tue 05 Jan 2027 19:23:05 +0000
asID:                     25620
IP address blocks:        200.58.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:cc:40:ee:3e:0b:ff:87:46:15:0f:e8:87:c0:6a:80:8d:d1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan  6 19:18:05 2026 GMT
            Not After : Jan  5 19:23:05 2027 GMT
        Subject: CN=C4A38A07ABF50BD31098FC1E0850C820B83975C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:70:89:01:65:66:0b:3d:5a:f8:8c:53:76:
                    4a:83:88:e5:9e:bc:1d:4b:11:19:d8:6c:bd:f3:55:
                    f5:64:04:5e:49:6d:b1:fa:94:ce:a9:80:50:53:e1:
                    30:07:62:70:4d:e4:ad:59:89:a4:82:26:7d:3e:03:
                    dc:7b:b8:f0:92:22:dc:15:6e:db:b3:57:03:ee:e6:
                    58:d5:c4:7b:f8:dc:82:88:9a:48:c3:83:e4:f8:4a:
                    b0:f7:29:80:e6:bf:56:2a:e2:e7:ba:0b:b0:a5:4e:
                    44:d3:01:f7:80:24:63:65:41:cb:1d:d8:47:6d:87:
                    fd:bf:e3:34:63:6a:62:59:b0:e3:36:83:f4:bc:8f:
                    fa:11:7e:49:68:22:51:e0:0c:8f:b0:b7:57:6a:a5:
                    96:b4:42:cf:f8:7f:bb:a3:87:0e:ec:9e:06:40:dd:
                    46:77:99:10:04:4e:63:2c:dd:f0:ae:9a:1b:fe:65:
                    f7:82:ed:e0:79:c2:e3:f9:2b:73:e2:f4:68:cf:7a:
                    91:f0:98:6a:0c:74:37:9b:a4:16:51:7d:81:a1:e5:
                    af:a6:4c:e1:08:c1:48:df:15:7a:d1:de:57:ba:ee:
                    ec:0a:ca:e6:a0:ed:97:91:dd:39:94:b8:ae:5b:67:
                    42:5f:a6:19:c3:34:04:2f:60:e0:59:1d:4d:96:4b:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:8A:07:AB:F5:0B:D3:10:98:FC:1E:08:50:C8:20:B8:39:75:C9
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e35382e3136302e302f31392d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:b2:e9:d9:d2:1b:71:75:2c:48:29:05:0b:e6:52:2a:e5:
         66:61:ea:47:e7:5a:3f:02:c7:ca:83:23:3c:3b:f2:9a:cf:84:
         c3:3f:3b:85:32:9b:10:bc:f0:d8:c6:5c:5b:8c:07:96:0c:fe:
         eb:d2:0c:b9:e1:c3:94:1e:97:d0:68:22:86:be:ca:34:3d:72:
         f1:2f:8f:bd:c9:ef:a7:77:60:b5:80:4b:02:d1:c2:09:02:62:
         c7:cb:ee:48:d4:d0:12:6a:92:e6:c7:52:bd:3c:e8:c3:c7:da:
         ff:30:ad:8d:00:e5:f9:b5:17:e4:47:a1:55:58:f0:5b:d4:4d:
         32:6b:20:d8:17:a5:84:55:58:0e:fc:99:08:6b:f9:62:85:0d:
         0f:14:47:d3:6e:ca:6e:c1:30:39:13:83:be:f4:50:5d:3f:a5:
         39:a8:d7:5b:e8:8b:48:ca:d4:e2:d9:54:62:09:f9:12:03:40:
         00:35:a0:4f:28:a3:dd:00:50:a3:6e:3b:eb:04:78:8f:11:08:
         56:0e:bf:c9:1e:ca:7c:22:da:98:a8:fa:ac:90:65:85:d8:ae:
         dd:51:01:f8:a5:b8:11:a4:fc:39:4e:51:f1:38:30:aa:7a:6d:
         ee:7d:fb:64:45:9d:1b:c2:69:e3:4e:7e:19:e1:55:e2:99:f5:
         ac:45:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:08:12 2026 by rpki-client