This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          cYjoMk9sU8csjT7NjUmPnw58XcukWZQ2gPhqVnrVcdw=
Subject key identifier:   F5:16:46:51:45:A7:F0:B9:B6:49:BD:53:2E:43:79:59:14:89:F9:49
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       369F617BDE37D98897FCBF1F3E71863E732A3A97
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:13 +0000
ROA not before:           Tue 06 Jan 2026 20:47:13 +0000
ROA not after:            Tue 05 Jan 2027 20:52:13 +0000
asID:                     7418
IP address blocks:        200.113.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9f:61:7b:de:37:d9:88:97:fc:bf:1f:3e:71:86:3e:73:2a:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:13 2026 GMT
            Not After : Jan  5 20:52:13 2027 GMT
        Subject: CN=F516465145A7F0B9B649BD532E4379591489F949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:51:2d:ad:c1:4e:8a:50:fe:6b:02:b6:3d:
                    c4:fc:81:8a:1b:b4:e4:df:63:05:50:14:c4:8d:4d:
                    34:85:01:9c:f4:10:1d:23:06:96:fa:d1:e2:59:46:
                    92:98:6c:b2:23:57:5a:0a:cf:b1:ec:95:6b:1a:8e:
                    28:10:7d:14:f9:f9:2e:04:57:f1:62:44:43:9f:f8:
                    96:6f:f4:d6:7a:c7:5b:e3:2d:cb:a1:3b:98:f7:4b:
                    f7:01:bb:99:c1:dc:7d:ed:83:25:39:4a:6b:8c:a7:
                    ff:29:c8:35:8b:7c:f0:65:b0:91:ef:9f:a0:5b:fe:
                    08:5f:d8:ce:09:79:c5:ea:0d:34:de:e8:7e:3b:58:
                    a5:e9:33:ce:3c:68:5b:c1:6a:d7:56:8e:82:6f:6c:
                    85:1c:57:1d:5d:d7:95:69:31:b3:31:9e:5b:1a:bf:
                    98:34:ec:d4:96:09:70:c0:48:27:2d:e7:6e:57:07:
                    39:5f:bb:0e:c5:97:14:08:5c:5f:37:d1:2c:5b:63:
                    c9:11:39:34:99:c8:28:ca:cb:6a:26:44:46:51:bd:
                    a3:41:65:69:8e:b6:8f:65:31:b5:68:9c:3b:5a:6d:
                    0c:95:3e:bc:79:48:ec:06:39:36:52:f1:f7:43:bf:
                    b5:ce:50:54:70:73:8b:ee:de:41:7e:19:f5:ff:ed:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:46:51:45:A7:F0:B9:B6:49:BD:53:2E:43:79:59:14:89:F9:49
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:50:96:8e:f3:d6:01:7c:6e:af:63:8c:a9:ab:4f:95:ce:e3:
         3d:6b:bb:f2:fa:6d:d3:6d:47:30:54:91:9c:f6:96:96:06:aa:
         76:6e:53:59:74:26:a3:18:15:c6:7a:be:01:b3:18:52:2a:38:
         51:df:48:1a:5c:79:eb:c2:5a:a1:aa:6f:e9:b6:83:97:12:ea:
         6c:88:9b:72:f4:49:3f:db:b5:72:03:10:84:87:f7:4c:7e:48:
         c4:a6:d7:c3:0c:8d:96:ef:51:26:ea:fb:2d:2c:bf:3f:d0:bf:
         c7:db:36:47:33:e4:dd:c4:f3:d7:41:65:54:4f:57:42:e0:81:
         f0:df:79:a1:b0:85:5d:f3:7c:fc:23:a5:a4:02:e3:5c:e7:69:
         bb:3f:3f:0b:0e:99:ad:7d:10:e2:07:6b:87:2c:a1:b9:58:e4:
         eb:36:d7:34:91:5f:d2:ae:bf:bc:57:9e:0b:04:ac:bf:03:11:
         b6:af:a9:17:ae:9e:d4:76:fe:01:64:33:d6:02:d2:35:e7:2a:
         b6:a4:ff:f4:f4:14:5a:6b:02:7b:70:6d:0b:05:05:9c:c8:c2:
         82:49:5d:55:0d:bf:d7:2f:1e:b7:88:3c:f4:76:a9:b8:47:23:
         d7:45:5c:f2:06:03:ef:a0:4b:60:82:f1:1f:3d:da:46:a4:e6:
         c9:a8:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:07 2026 by rpki-client