This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33362e302f32322d3234203d3e203136373332.roa
File:                     3230302e35392e33362e302f32322d3234203d3e203136373332.roa (raw, json)
Hash identifier:          zgs0H1DXpAHT6c8TAz907cgtzu+jK7AI5I2eGFchoWY=
Subject key identifier:   29:AF:B5:46:C5:03:25:41:06:73:47:5F:87:E7:48:85:F6:C8:DB:57
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       0B89B6DB1298DF5CE7A36C3DFD671C4044E8AB1A
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33362e302f32322d3234203d3e203136373332.roa
Signing time:             Tue 06 Jan 2026 19:45:40 +0000
ROA not before:           Tue 06 Jan 2026 19:40:40 +0000
ROA not after:            Tue 05 Jan 2027 19:45:40 +0000
asID:                     16732
IP address blocks:        200.59.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:b6:db:12:98:df:5c:e7:a3:6c:3d:fd:67:1c:40:44:e8:ab:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Jan  6 19:40:40 2026 GMT
            Not After : Jan  5 19:45:40 2027 GMT
        Subject: CN=29AFB546C50325410673475F87E74885F6C8DB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:f0:3a:f3:d1:b2:de:80:ea:7d:4e:32:0e:
                    13:f2:14:06:d8:5a:8b:b9:07:cf:f9:1a:ab:eb:e5:
                    c4:a9:91:b2:e8:69:2a:7a:4e:01:9e:20:c9:96:c7:
                    b2:f3:fb:a8:38:c4:34:1b:05:e2:5c:f0:85:52:e0:
                    9b:43:62:c9:94:8f:98:b7:ad:29:68:6a:e0:6b:0e:
                    ad:74:6b:e2:6a:4f:36:1a:d5:f2:05:7e:c2:ee:27:
                    eb:1d:9b:03:05:70:6c:b5:55:02:7c:fc:88:17:59:
                    d5:f0:74:59:be:28:11:eb:bf:e0:54:f3:62:1e:68:
                    72:7d:f7:18:ff:fb:3d:42:b6:b7:53:a9:96:5b:6b:
                    eb:5e:95:60:20:9d:cd:2e:d7:03:57:b3:b2:5f:4e:
                    95:60:b3:a6:39:fd:bf:e2:d2:3c:58:83:70:27:f1:
                    38:51:bb:5e:96:64:1e:30:c0:36:b6:6b:04:d6:6e:
                    e1:31:72:c2:22:b7:11:72:fc:95:cd:b7:91:c5:58:
                    8c:d4:f4:8a:84:c2:32:26:81:77:dc:6b:80:f1:eb:
                    a5:64:53:15:45:50:b2:fd:7b:95:e6:3d:05:e9:50:
                    34:68:01:64:45:72:37:22:81:44:65:98:39:79:ef:
                    08:cf:8b:04:3b:5e:04:82:6e:8b:39:2c:1a:f1:78:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:B5:46:C5:03:25:41:06:73:47:5F:87:E7:48:85:F6:C8:DB:57
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e33362e302f32322d3234203d3e203136373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:59:d3:98:fc:3a:96:af:56:87:4c:65:bc:3d:79:0d:ba:bf:
         8e:fc:ae:29:35:69:fd:9a:a9:bf:e7:e1:f6:71:27:ad:b1:a8:
         03:29:b7:96:a0:71:9a:54:ce:3a:a0:33:2f:14:c0:60:f1:0a:
         cc:82:d6:c4:d3:9a:aa:2b:5d:87:dd:d7:aa:a2:65:dc:cd:41:
         f2:c0:f3:0f:f3:35:95:ba:83:54:6d:4b:6e:0a:15:b5:40:ce:
         48:62:0c:34:78:50:4e:69:76:18:7a:90:09:f9:bd:e9:81:d9:
         07:41:38:20:fc:00:40:22:ca:65:eb:3b:20:d5:49:a6:55:2d:
         de:11:5b:09:8f:da:24:19:97:11:be:07:ad:c0:44:94:47:ff:
         cb:2e:28:ae:1c:68:97:09:3f:fa:a7:1d:9d:1a:d6:a4:16:09:
         6f:cf:bf:a4:f8:ab:fa:f9:fd:ab:1c:fa:09:9d:4e:60:c1:f6:
         24:09:c1:e7:08:da:21:e3:76:f4:46:8b:39:c4:49:6f:c6:ae:
         19:92:eb:7e:92:12:7d:dc:51:01:c1:13:cc:9d:60:26:b0:62:
         9a:66:7d:f8:dc:ec:79:4d:0e:fc:9e:ca:4c:1c:1c:38:73:e8:
         2f:24:5e:1a:9a:6c:cf:bb:93:7a:3b:7a:1e:bc:e3:90:d2:90:
         01:ea:07:41
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUC4m22xKY31zno2w9/WccQEToqxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZBQ0FDOEVGRjZERjg0MzI2MThDNjAwQjc0Q0RDNTQ0
RkVEOTRCNzAeFw0yNjAxMDYxOTQwNDBaFw0yNzAxMDUxOTQ1NDBaMDMxMTAvBgNV
BAMTKDI5QUZCNTQ2QzUwMzI1NDEwNjczNDc1Rjg3RTc0ODg1RjZDOERCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfvA689Gy3oDqfU4yDhPyFAbY
Wou5B8/5Gqvr5cSpkbLoaSp6TgGeIMmWx7Lz+6g4xDQbBeJc8IVS4JtDYsmUj5i3
rSloauBrDq10a+JqTzYa1fIFfsLuJ+sdmwMFcGy1VQJ8/IgXWdXwdFm+KBHrv+BU
82IeaHJ99xj/+z1CtrdTqZZba+telWAgnc0u1wNXs7JfTpVgs6Y5/b/i0jxYg3An
8ThRu16WZB4wwDa2awTWbuExcsIitxFy/JXNt5HFWIzU9IqEwjImgXfca4Dx66Vk
UxVFULL9e5XmPQXpUDRoAWRFcjcigURlmDl57wjPiwQ7XgSCbos5LBrxeKoRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKa+1RsUDJUEGc0dfh+dIhfbI21cwHwYDVR0j
BBgwFoAUpqysjv9t+EMmGMYAt0zcVE/tlLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzVGMkVFREMzQ0RDOEE0N0VDQkM2M0FFRUQ1MzdFNUNF
QTU0QzcyMUE5MEU3NjI1NEIyOUZGNERDM0Y3RjIzLzAvQTZBQ0FDOEVGRjZERjg0
MzI2MThDNjAwQjc0Q0RDNTQ0RkVEOTRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkFDQUM4RUZGNkRGODQzMjYx
OEM2MDBCNzRDREM1NDRGRUQ5NEI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTc1RjJFRURDM0NEQzhBNDdFQ0JDNjNBRUVENTM3RTVDRUE1NEM3MjFB
OTBFNzYyNTRCMjlGRjREQzNGN0YyMy8wLzMyMzAzMDJlMzUzOTJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzYzNzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALIOyQwDQYJ
KoZIhvcNAQELBQADggEBAHNZ05j8OpavVodMZbw9eQ26v478rik1af2aqb/n4fZx
J62xqAMpt5agcZpUzjqgMy8UwGDxCsyC1sTTmqorXYfd16qiZdzNQfLA8w/zNZW6
g1RtS24KFbVAzkhiDDR4UE5pdhh6kAn5vemB2QdBOCD8AEAiymXrOyDVSaZVLd4R
WwmP2iQZlxG+B63ARJRH/8suKK4caJcJP/qnHZ0a1qQWCW/Pv6T4q/r5/asc+gmd
TmDB9iQJwecI2iHjdvRGiznESW/GrhmS636SEn3cUQHBE8ydYCawYppmffjc7HlN
DvyeykwcHDhz6C8kXhqabM+7k3o7eh6845DSkAHqB0E=
-----END CERTIFICATE-----
Generated at Fri Jan 23 23:23:16 2026 by rpki-client