This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa
File:                     3230302e34322e3138392e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          m5y/RhwI/sf/JSnu43eLgHVNla/W11aG6ZRcfd6BwTE=
Subject key identifier:   C3:A8:69:AC:4A:E2:AA:9D:CF:5F:3C:EE:D0:97:96:F6:AA:30:D6:0B
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5706123B1BD9DB0ECA64368384ADE36EC0BC8719
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:12 +0000
ROA not before:           Tue 06 Jan 2026 20:47:12 +0000
ROA not after:            Tue 05 Jan 2027 20:52:12 +0000
asID:                     7418
IP address blocks:        200.42.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:12:3b:1b:d9:db:0e:ca:64:36:83:84:ad:e3:6e:c0:bc:87:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:12 2026 GMT
            Not After : Jan  5 20:52:12 2027 GMT
        Subject: CN=C3A869AC4AE2AA9DCF5F3CEED09796F6AA30D60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:9c:df:a6:ee:2d:8b:48:06:ad:17:36:43:
                    6e:9e:0b:c8:59:23:63:84:eb:e1:c9:0a:1e:50:57:
                    cf:4b:46:f5:f0:77:14:1d:91:f5:c9:46:3a:e9:30:
                    2a:6f:55:da:8d:4d:da:f5:c0:a5:bb:b1:69:be:aa:
                    25:ab:96:a7:31:50:8f:c6:09:03:3d:1b:ab:83:c7:
                    1f:42:55:ff:17:1b:c5:72:56:3f:fd:d0:32:7d:e9:
                    4c:48:b5:37:3d:2d:af:16:d0:61:15:95:1c:4b:62:
                    42:3d:a9:93:51:7b:76:98:d9:22:bb:ff:a7:ce:3c:
                    04:ce:9b:88:cf:39:f1:2e:9d:c0:29:f1:0b:e4:2b:
                    d8:db:30:de:4e:e4:e7:1c:d6:6b:2e:b9:fa:73:2d:
                    1d:b4:eb:16:bb:72:df:6a:fe:a9:f4:5d:0f:64:c1:
                    48:00:11:35:a8:16:a0:47:a2:85:bd:a5:65:ef:e6:
                    4e:59:7d:71:8a:6e:bf:fd:36:81:e1:55:8a:ea:ad:
                    67:c0:59:bb:10:39:78:85:a3:b9:dd:0e:1c:fd:59:
                    71:b6:38:43:81:3f:27:2c:c7:31:a3:e0:f9:4b:bf:
                    f4:7a:7e:87:fc:22:52:c3:63:d0:3a:ba:a5:bc:19:
                    f7:12:a8:24:81:8e:fd:4b:04:85:da:37:5c:d5:22:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:69:AC:4A:E2:AA:9D:CF:5F:3C:EE:D0:97:96:F6:AA:30:D6:0B
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138392e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:0c:8e:94:d6:d8:2d:3f:8d:66:f9:82:5e:57:95:72:e5:
         5d:19:06:cf:28:ad:5e:24:fb:7d:a5:91:4c:3a:c6:3e:27:4c:
         49:8d:6f:d4:ff:1c:34:dd:7d:99:e4:47:99:b1:cb:2c:6d:57:
         12:db:00:c5:c8:fc:f3:5b:f8:ce:27:f3:9f:7e:59:8c:d9:f0:
         ad:72:f1:1f:7c:fc:91:5f:c8:c2:cd:07:a5:3a:a5:72:0a:1c:
         37:21:07:df:46:87:5d:0e:b4:40:4a:0b:78:d9:53:61:cf:cd:
         9e:5f:b9:25:46:f6:6a:8a:26:2d:aa:11:93:1f:48:4c:35:cc:
         ed:3e:4e:54:2f:17:0c:d4:2b:65:63:f6:35:02:be:08:e6:0a:
         80:6f:d4:c8:eb:e9:4a:b5:3e:58:df:bf:e0:98:0f:cd:b9:70:
         04:55:66:32:0d:1b:1a:fb:91:fb:50:0a:72:5d:59:26:01:7c:
         7a:8d:68:74:50:fd:0c:c9:a5:75:f5:48:01:2e:e2:02:82:4a:
         52:a3:9d:84:86:f7:03:1b:6a:93:bb:f4:72:a8:4a:e4:98:6a:
         f6:f2:9c:0a:38:b6:fd:c3:38:08:6e:2a:3f:9e:4e:cf:04:91:
         bc:1a:24:68:f1:c3:b9:b9:a4:97:42:77:26:01:38:f7:ab:59:
         ec:72:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:00 2026 by rpki-client