This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa
File:                     3230302e35302e3130302e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          9g3eHIR/OBnmUQ0AURvSSjLSm0ZA2kmjexvd2m6rHaI=
Subject key identifier:   92:E6:9A:5C:32:DA:97:CE:71:47:24:C7:6E:93:A6:E7:56:6A:D9:79
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6A6DD7C58A92216DF5F010DC71AB52FBCEAF89F1
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:17 +0000
ROA not before:           Tue 06 Jan 2026 20:47:17 +0000
ROA not after:            Tue 05 Jan 2027 20:52:17 +0000
asID:                     16629
IP address blocks:        200.50.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:d7:c5:8a:92:21:6d:f5:f0:10:dc:71:ab:52:fb:ce:af:89:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:17 2026 GMT
            Not After : Jan  5 20:52:17 2027 GMT
        Subject: CN=92E69A5C32DA97CE714724C76E93A6E7566AD979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:92:08:61:59:93:90:31:cf:fa:d2:84:78:
                    4f:61:66:66:af:b9:df:c4:00:22:41:89:cb:52:5a:
                    54:05:b6:08:0f:f1:77:b4:d1:dd:0b:0c:1a:b0:08:
                    df:d7:8a:71:f6:23:07:b1:05:fd:bb:4b:a4:77:36:
                    e7:49:20:68:88:9f:db:e5:7d:5a:93:fb:05:f0:86:
                    04:3b:f5:f8:f1:85:d7:6e:92:2a:1a:c5:b6:12:c7:
                    2a:88:4c:b0:cd:25:5d:20:a4:5e:51:c6:fa:21:a5:
                    83:ff:91:6d:37:bb:59:4e:e7:ce:6f:f5:d5:5f:6b:
                    40:23:e1:dd:a7:6a:ff:b6:d1:c9:b7:ff:18:83:96:
                    24:9f:03:a6:20:ef:0d:53:ad:82:a2:eb:33:ef:b6:
                    8e:f8:ba:8c:a4:e5:c9:98:4e:0d:84:15:b3:90:a9:
                    38:f4:d7:d9:b3:c2:0e:eb:8a:97:55:32:87:cf:95:
                    17:14:5b:ad:bf:40:26:0a:aa:fe:aa:f0:f0:34:7e:
                    5d:d1:33:42:e4:41:9e:4c:f2:51:16:4f:58:34:5f:
                    ce:41:52:45:d1:1e:e1:45:d2:51:52:e9:41:56:e1:
                    60:57:a9:27:06:b4:23:58:ac:b0:b9:f7:2d:c1:ee:
                    07:a8:a7:78:1e:60:17:6e:3e:ae:b2:79:98:8a:8c:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:9A:5C:32:DA:97:CE:71:47:24:C7:6E:93:A6:E7:56:6A:D9:79
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3130302e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:23:2a:c7:4e:92:af:10:79:71:d2:0d:d3:3e:2d:39:2a:e6:
         17:a8:15:e6:40:ba:57:8c:a1:71:a6:a6:63:3c:f4:d2:57:c0:
         ae:1a:7c:71:14:82:12:94:12:66:71:11:d7:98:e2:9e:44:94:
         5e:d2:07:e3:42:0c:da:f1:a5:b8:51:0b:50:a4:07:ca:29:a9:
         83:67:b9:f5:cd:95:f7:0c:b2:6c:56:de:2b:8f:63:39:70:02:
         92:a6:4c:4a:04:68:38:a9:ba:6b:99:b9:44:49:62:c6:93:19:
         87:46:44:e4:f6:b5:ec:de:79:be:52:2c:c9:ca:49:1a:1b:0f:
         ac:37:98:85:aa:64:a6:40:a6:37:8b:0b:6b:b7:da:d3:05:c3:
         03:67:db:68:58:4f:47:5a:ae:8d:97:e1:9a:c9:2a:09:bd:c1:
         62:f8:67:50:bd:14:13:ab:ed:9b:9f:ff:a8:3d:39:26:c6:18:
         c2:4b:d2:b3:7a:93:4b:9b:b3:64:a6:6d:03:20:52:c4:98:f8:
         e9:e5:19:fc:61:71:73:c5:41:60:57:ef:38:e5:5e:2f:17:1b:
         d4:ad:44:13:77:6b:c3:fb:ed:8d:0d:0c:a4:95:e9:55:e6:ac:
         9b:f9:7e:d2:52:ff:0a:04:15:10:cf:f3:84:c5:bf:61:e4:5b:
         ab:b6:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:17 2026 by rpki-client