This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa
File:                     3230302e35302e3131322e302f32312d3234203d3e203136363239.roa (raw, json)
Hash identifier:          pcNtWuuL00aRP94HDlzTIRC4jl4pWxp+VIbEeTJhZE0=
Subject key identifier:   05:1B:77:2C:24:6E:07:A1:EA:D6:9D:35:27:D1:27:DB:7E:E1:67:F6
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       64501B7A57BD31A3768DDA98A25FDB4DC9D3626F
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:51:57 +0000
ROA not before:           Tue 06 Jan 2026 20:46:57 +0000
ROA not after:            Tue 05 Jan 2027 20:51:57 +0000
asID:                     16629
IP address blocks:        200.50.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:50:1b:7a:57:bd:31:a3:76:8d:da:98:a2:5f:db:4d:c9:d3:62:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:46:57 2026 GMT
            Not After : Jan  5 20:51:57 2027 GMT
        Subject: CN=051B772C246E07A1EAD69D3527D127DB7EE167F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:99:dd:1e:66:bb:9d:eb:63:ba:2b:03:db:
                    64:c9:f0:58:58:e7:63:97:88:0d:25:ba:2f:fa:02:
                    d0:a4:6f:02:49:04:ba:42:14:a4:85:35:c6:03:d2:
                    98:a1:c2:fa:89:63:01:d9:e7:25:a0:54:7e:f9:03:
                    e8:d4:e2:25:67:c4:0f:89:b0:86:30:ce:5e:05:18:
                    be:71:08:5d:93:f9:97:37:a5:96:ab:b5:64:f1:40:
                    7d:b1:31:2d:20:ff:51:57:d7:d1:f4:9c:ca:f5:f6:
                    73:48:d2:df:86:8f:81:f2:72:85:6a:d8:cc:95:bf:
                    b7:3e:43:15:6e:aa:bc:f9:14:de:58:bb:8c:bf:97:
                    1f:aa:a3:92:79:73:fa:90:01:57:d3:47:ca:55:46:
                    31:32:27:fe:c5:6b:d5:eb:85:28:4f:b0:1f:2b:43:
                    4d:9e:12:f8:27:d8:96:72:64:85:a2:81:d8:91:22:
                    ba:a2:e8:31:09:2f:45:bd:8d:2c:75:cf:56:f8:8b:
                    83:68:42:f4:92:4a:da:cc:63:97:6f:24:aa:e2:19:
                    4c:ac:04:d9:84:42:37:50:9a:47:b9:4c:46:4d:87:
                    2c:8b:ad:6b:a2:23:70:af:fc:b5:c2:0e:cf:ea:68:
                    85:5c:2d:bd:e4:d3:ef:48:e9:d3:2c:98:62:f7:87:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1B:77:2C:24:6E:07:A1:EA:D6:9D:35:27:D1:27:DB:7E:E1:67:F6
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:de:0f:b7:b1:de:a6:d6:5c:7b:d3:9f:6f:69:c0:40:6e:
         82:ce:39:71:10:a5:64:c1:4e:b3:c4:d0:2d:d9:6e:f8:cf:26:
         9f:56:36:a2:2e:76:5d:c3:52:8d:84:45:27:64:48:03:4d:1b:
         45:4a:bc:a7:82:c6:21:ae:32:a3:bc:02:8e:40:48:22:a8:e8:
         87:b2:7f:9a:42:ff:73:9f:d3:53:9c:f2:d9:d4:69:33:58:a0:
         34:64:6b:a8:98:c6:b9:12:d7:db:04:33:60:41:ad:24:06:01:
         90:4b:40:9f:8f:15:43:a4:09:de:69:14:ea:73:8a:ae:ca:91:
         d1:55:86:a7:e3:2b:f6:1e:28:2e:64:3b:1d:f3:ce:69:79:ee:
         b9:a8:a7:2e:85:d9:f9:c1:c0:f9:f7:3d:3b:92:b5:8d:cc:1c:
         80:5f:73:dc:75:a3:0d:46:2d:12:bd:59:9e:5e:95:2f:06:e8:
         49:6e:b6:5f:9b:91:c8:75:ad:4c:8a:e3:c8:31:98:ca:a9:5d:
         21:02:c6:65:9e:4d:ec:d5:e7:dc:b3:db:42:a8:8d:74:c0:0b:
         e0:c2:ac:51:e2:c1:c7:4e:c6:8b:12:7b:98:ff:a8:cd:d5:bc:
         8f:82:ba:83:ad:09:03:55:9a:e4:34:a0:8b:58:80:0f:86:3b:
         46:08:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:48 2026 by rpki-client