This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e2037343138.roa
File:                     3230302e35302e3131322e302f32312d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Mv3EAum487/AmtnR/Hun8/tIPQbF8DWIXmZA3SwUB2Y=
Subject key identifier:   25:3E:2D:4C:E9:42:71:59:DA:9F:97:F5:27:16:FC:62:AD:56:73:F7
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4C4CB240C0F393C8284054A1B7AAE43CE1A7EBC3
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:06 +0000
ROA not before:           Tue 06 Jan 2026 20:47:06 +0000
ROA not after:            Tue 05 Jan 2027 20:52:06 +0000
asID:                     7418
IP address blocks:        200.50.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4c:b2:40:c0:f3:93:c8:28:40:54:a1:b7:aa:e4:3c:e1:a7:eb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:06 2026 GMT
            Not After : Jan  5 20:52:06 2027 GMT
        Subject: CN=253E2D4CE9427159DA9F97F52716FC62AD5673F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:66:9a:5d:65:c6:63:d2:47:38:2f:67:26:
                    e1:f4:9c:a0:ec:ec:e6:18:67:bd:2e:25:01:cf:d4:
                    d4:3d:93:f4:41:dd:c7:3a:7e:5b:95:f3:6b:06:2f:
                    92:a6:a2:40:67:87:a2:62:d1:13:0b:0f:74:ee:2e:
                    0a:f8:c6:c3:88:35:19:e0:7e:ec:7a:74:22:8c:1e:
                    a8:be:4d:b5:9c:11:ab:42:1f:a0:d6:1c:f9:5e:9e:
                    62:84:ea:1f:f2:2e:5d:56:c0:6c:22:a1:7f:04:ce:
                    3c:a6:a9:c0:c3:a2:37:43:67:2a:7f:6c:a1:fc:cb:
                    e9:7a:07:f1:2a:9f:c5:92:01:97:8d:1b:20:6b:1f:
                    cd:d7:d1:83:68:ba:ce:86:b6:fa:45:75:d1:a5:cf:
                    87:4d:2d:93:0c:31:32:44:00:7b:f5:30:05:94:46:
                    9f:e2:7f:a9:14:67:c1:3c:09:1b:65:ea:ee:e7:9b:
                    2f:cf:2c:2c:be:cf:cb:d5:ea:a1:b3:2d:d9:8d:50:
                    15:06:b8:a8:c1:22:88:af:b9:b9:9a:34:b3:6c:d6:
                    bd:42:d0:5a:b6:73:ad:c3:3f:f3:05:97:55:59:29:
                    3a:80:14:fa:48:b6:a5:ca:80:f0:af:43:95:f5:2f:
                    91:e8:f1:dc:f3:7f:49:4f:f9:0e:d8:da:54:c3:38:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3E:2D:4C:E9:42:71:59:DA:9F:97:F5:27:16:FC:62:AD:56:73:F7
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3131322e302f32312d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:81:82:41:f7:5d:67:cb:46:05:41:73:29:cf:52:cd:7c:da:
         98:68:d8:4e:94:d6:23:95:5b:0e:6a:0c:23:c2:11:b5:9e:55:
         44:e4:d7:0f:ce:24:54:56:66:67:76:b4:d6:b8:ad:85:af:e6:
         1c:d4:95:72:ac:96:a6:56:a0:96:8a:b5:ae:9e:7c:9a:8d:ef:
         7b:e7:47:02:b5:91:94:1d:82:f2:58:bd:21:e3:3b:2b:7d:9c:
         c2:a5:67:d0:94:7f:a6:97:b8:0d:22:92:00:31:55:00:43:1b:
         60:f2:b9:53:19:ff:4f:90:c1:3a:75:33:13:2b:9b:17:3a:34:
         40:b0:0b:6e:0f:67:df:7a:5f:76:52:08:df:05:0c:6b:95:9a:
         1a:31:8f:a8:00:4c:cd:fc:f8:c7:9a:45:b4:2e:2a:52:fc:a8:
         52:f0:4c:21:75:b9:b1:3c:81:f3:d4:08:e3:9e:b8:14:4c:1e:
         de:e5:d7:74:be:d9:38:c2:18:cb:c9:11:e8:c9:81:1b:70:48:
         32:72:23:83:d7:85:48:7f:97:c5:a4:a6:15:b6:92:72:3a:17:
         e8:b8:55:ee:23:ed:27:ab:3e:79:dd:b3:1d:49:f5:a8:7b:30:
         9e:c4:1d:c0:3d:97:fd:fa:6b:1c:85:76:d6:8a:6d:e0:ee:2b:
         f3:e9:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:11 2026 by rpki-client