This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa
File:                     3230302e3131332e34382e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          AQ4Khc60LaYc2Pb01EgHCHwYGGgPfQuBkopd2fhQG88=
Subject key identifier:   C7:A1:91:EC:6C:01:78:19:7B:E1:D5:CC:DE:7C:BF:34:32:1E:18:FF
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       62AEDC2943EF19390CD07FBDD62200B4DF065648
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:06 +0000
ROA not before:           Tue 06 Jan 2026 20:47:06 +0000
ROA not after:            Tue 05 Jan 2027 20:52:06 +0000
asID:                     7418
IP address blocks:        200.113.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ae:dc:29:43:ef:19:39:0c:d0:7f:bd:d6:22:00:b4:df:06:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:06 2026 GMT
            Not After : Jan  5 20:52:06 2027 GMT
        Subject: CN=C7A191EC6C0178197BE1D5CCDE7CBF34321E18FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:fe:c2:19:cf:f0:c5:dd:f2:b6:f3:d2:32:
                    81:f8:16:64:f6:83:bd:82:14:af:c7:e4:a5:f0:02:
                    17:e6:d1:9c:37:e5:1c:98:2d:08:bb:71:f8:5a:f1:
                    dd:72:3f:6e:a7:6d:ac:05:ef:36:4f:87:58:ff:2c:
                    33:81:96:34:b9:53:17:de:27:6e:e0:f7:d5:ad:de:
                    41:d1:9b:e8:c6:dd:60:07:1e:00:43:e3:7d:71:d2:
                    37:b8:ae:ad:96:9e:07:c5:cb:73:a9:7b:91:f2:0e:
                    92:e9:81:71:32:b1:c1:9d:f9:0f:20:1a:d2:53:89:
                    66:5e:f7:75:47:cf:05:84:4e:d5:56:c0:84:f2:20:
                    7b:4f:b5:89:1a:fb:1e:23:6b:09:08:38:4e:64:02:
                    83:5b:17:86:e8:64:58:43:35:96:16:8c:82:f8:da:
                    f3:d6:1e:5c:63:92:fa:da:fd:eb:9d:84:df:1b:e3:
                    23:5a:b1:5b:ba:70:ec:85:0c:ae:a2:d1:bb:01:69:
                    d1:52:d2:4e:9b:1a:45:f9:1c:b4:d1:74:6a:82:c1:
                    68:bf:e9:c4:0e:40:c6:74:91:7b:0f:bc:98:e6:3c:
                    ed:a9:88:5b:8d:f3:77:57:1b:08:a8:c0:fd:27:6e:
                    80:89:c1:50:9f:ef:b5:19:25:af:c5:75:ae:0d:15:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A1:91:EC:6C:01:78:19:7B:E1:D5:CC:DE:7C:BF:34:32:1E:18:FF
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e34382e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:82:78:4c:b6:94:ed:cb:47:18:95:19:8b:20:f5:6f:18:25:
         6d:6d:ae:2c:23:a6:dc:4a:da:96:33:bf:85:b2:c7:1a:ca:b6:
         c9:7d:09:e6:3f:51:ab:75:0c:f8:55:2e:0b:9d:cc:b4:33:34:
         e7:b0:77:59:b9:72:7a:83:bd:a3:14:99:83:76:d4:7b:b5:54:
         c5:52:21:78:4c:85:b7:c6:27:28:d0:9f:54:eb:bf:ba:d6:3b:
         1f:88:83:40:f6:cf:ff:16:36:65:3b:48:06:64:04:3b:95:d4:
         f7:d8:90:02:e0:fa:4e:e0:eb:2d:c5:1f:32:10:d3:eb:2b:8f:
         c7:bd:e7:ca:b9:03:63:33:dd:bf:85:8d:ae:f6:62:70:fa:a7:
         f0:ab:9d:3e:48:88:30:32:26:67:71:f5:0a:22:ea:58:1b:15:
         48:00:94:bc:f3:97:ae:96:69:09:55:18:89:24:23:65:e2:6f:
         d3:b8:61:07:8d:b4:e9:a1:53:e1:c3:d9:bf:60:c6:8b:d8:c0:
         23:c8:13:e1:7a:5f:35:5c:92:a2:9a:49:94:44:13:ad:ee:b8:
         b8:af:4b:a0:14:4e:8e:98:14:1a:6f:e4:78:03:67:91:2e:f7:
         22:fb:0d:c1:83:04:17:1f:77:cf:ca:ff:23:bc:54:6d:e3:fb:
         7d:5e:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:19 2026 by rpki-client