This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e203136363239.roa
File:                     3230302e34322e3136382e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          aN+6iHUsjxeEIPeym8G3iMwpZHo7dm6pV9eKYhYWjsE=
Subject key identifier:   0C:38:52:5A:BB:DE:35:26:02:B2:5B:31:BF:AA:65:D1:28:F6:FB:59
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7C4EAF85179380A35DD53762F62E8822FB5F8810
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:51:57 +0000
ROA not before:           Tue 06 Jan 2026 20:46:57 +0000
ROA not after:            Tue 05 Jan 2027 20:51:57 +0000
asID:                     16629
IP address blocks:        200.42.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4e:af:85:17:93:80:a3:5d:d5:37:62:f6:2e:88:22:fb:5f:88:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:46:57 2026 GMT
            Not After : Jan  5 20:51:57 2027 GMT
        Subject: CN=0C38525ABBDE352602B25B31BFAA65D128F6FB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:cc:d2:89:c2:02:ea:d1:de:51:76:7d:78:
                    90:91:2f:ed:c4:a8:d7:33:42:d2:81:f5:7c:cf:e3:
                    32:d2:26:70:41:c0:03:5c:8c:aa:0a:ec:e4:3b:e4:
                    88:fb:5f:7f:67:a1:78:f4:dc:81:a5:fb:2b:a6:3d:
                    fe:0e:9a:be:07:c0:cf:1e:85:18:69:1f:fd:4d:d3:
                    be:bc:2a:a3:8e:db:01:76:3e:f1:67:4a:71:f7:89:
                    92:49:47:ed:6c:18:87:87:ba:e2:ca:82:23:c0:46:
                    06:a7:c8:9a:19:36:60:90:f6:56:1b:aa:98:1f:6a:
                    e4:24:95:ea:cd:69:9c:9a:a0:4b:55:fa:06:e4:ec:
                    c1:1a:5b:c6:2e:b8:ca:6b:07:67:1a:f3:27:35:dd:
                    51:29:01:bb:1a:13:d8:8c:9c:ad:65:b0:f4:56:08:
                    3f:36:d2:8f:6d:4f:4b:cd:2c:88:ab:f9:ac:f1:52:
                    c6:5c:51:af:1b:48:86:ea:fa:a0:63:fc:2e:81:df:
                    15:30:28:a3:91:34:aa:1b:70:95:65:1a:08:78:72:
                    58:1f:ef:48:a3:9f:54:19:97:36:9c:cd:81:8f:c0:
                    6f:ca:26:df:12:15:fd:eb:99:28:48:39:5d:d7:77:
                    93:42:31:66:ee:15:ae:ec:18:f7:85:dc:57:dc:ed:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:52:5A:BB:DE:35:26:02:B2:5B:31:BF:AA:65:D1:28:F6:FB:59
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:21:ea:2e:04:7c:6e:a9:ce:5a:05:75:00:af:ed:3f:98:01:
         df:92:e5:4d:80:07:d8:41:7a:bb:dc:1e:46:a5:3b:be:07:ce:
         ac:64:8d:23:dc:14:dc:06:a5:39:eb:a0:51:9a:78:ef:34:1f:
         22:2c:31:c8:f0:f2:39:9b:90:a7:3e:f4:5e:56:a5:ce:64:2f:
         3d:e9:6c:cd:55:30:11:41:41:44:6a:6a:9a:df:bc:5c:42:56:
         94:c7:16:46:21:51:b0:6a:e2:4a:bb:94:45:9e:0b:2c:47:d9:
         69:69:f0:f3:05:52:c7:ae:06:0d:f5:95:4d:fa:65:2e:43:c7:
         63:3a:b1:35:92:db:98:53:64:ec:17:d4:66:f7:f0:39:4f:04:
         53:a3:72:25:81:42:ca:42:d7:9f:7c:d5:31:56:ca:bf:21:6e:
         c7:61:e2:02:e4:3d:99:b1:8c:37:3b:d8:52:3b:76:cb:44:a6:
         2f:8b:f8:8e:c5:5f:66:13:6e:1a:59:4d:48:2d:ae:3b:44:f2:
         af:7a:8d:25:35:93:65:4a:f7:0a:12:46:7d:a9:18:80:34:a0:
         6f:cd:76:58:79:04:77:a9:67:57:02:f4:36:0c:d8:4e:0c:49:
         48:9e:4c:a1:f3:c5:1b:73:91:12:72:e1:a2:e4:1b:f9:13:b9:
         b2:c3:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:43 2026 by rpki-client