This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa
File:                     3230302e35302e3132302e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          /nRJVSkVLj9SrjPBqgnsYLyRwSHy4t0F55EkdSxgjVs=
Subject key identifier:   A2:C6:F4:34:74:66:7E:F7:A5:85:18:92:6D:AC:8C:FA:C2:C0:36:BB
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       36F5805011275E073955D5A9E4F9AFF8F4FF7167
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:02 +0000
ROA not before:           Tue 06 Jan 2026 20:47:02 +0000
ROA not after:            Tue 05 Jan 2027 20:52:02 +0000
asID:                     16629
IP address blocks:        200.50.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f5:80:50:11:27:5e:07:39:55:d5:a9:e4:f9:af:f8:f4:ff:71:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:02 2026 GMT
            Not After : Jan  5 20:52:02 2027 GMT
        Subject: CN=A2C6F43474667EF7A58518926DAC8CFAC2C036BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:ea:0b:ec:9f:d1:e3:51:42:44:c2:45:82:
                    15:4a:21:cb:e1:aa:62:45:93:95:65:b5:fc:3f:ab:
                    ed:da:12:69:d0:ea:f5:45:3e:d1:db:eb:39:88:c0:
                    7f:db:2d:ea:63:31:2c:ea:9e:b9:33:ba:ef:b5:78:
                    30:3f:4f:2d:b6:5b:31:4f:ef:ba:b1:ce:37:c8:1b:
                    33:6b:ce:ab:05:26:b2:de:f7:8d:97:a7:fc:cf:68:
                    10:8f:ef:a9:19:0d:9c:10:ad:bf:d8:e8:90:ae:e7:
                    c0:fa:27:bc:60:62:21:fa:44:91:bf:56:27:fc:69:
                    32:87:a0:bc:5d:16:fe:85:6a:23:b6:26:5f:66:1c:
                    d7:76:7a:d3:16:17:cb:ea:9d:7b:a1:87:8e:be:50:
                    cc:3f:93:f0:2d:4a:e1:74:33:0d:80:59:0f:1f:72:
                    fe:9d:b9:7c:67:1f:32:3c:b8:9d:54:b0:99:0c:49:
                    fe:85:d3:41:00:a8:24:66:02:2e:5f:a7:14:9b:b6:
                    37:e0:77:29:e7:cb:51:96:23:2a:ea:89:da:74:be:
                    35:a7:48:f2:fb:8f:42:f8:6d:e9:2a:49:34:2c:0c:
                    4e:d9:6d:c8:57:29:34:50:78:7e:e2:52:ed:24:2c:
                    05:85:2a:c2:42:8b:e5:ea:04:a6:71:00:15:f2:ca:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:F4:34:74:66:7E:F7:A5:85:18:92:6D:AC:8C:FA:C2:C0:36:BB
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e7:2a:c1:00:1e:4c:5d:71:8f:c8:e3:4d:f0:9b:e7:df:d5:6b:
         33:a4:df:2a:90:33:45:fa:f4:d9:1d:1a:7c:3f:24:49:3d:89:
         88:91:c3:fa:c1:63:02:1a:54:cc:c7:ca:17:29:cd:78:6d:19:
         f5:0b:98:e3:ca:3e:ee:68:dd:10:0e:01:da:7d:fd:91:95:82:
         6e:50:c4:07:a6:e0:3c:48:77:a2:dd:4b:85:35:69:b4:ee:46:
         c3:54:ab:e9:85:5c:2b:23:ba:9d:3d:29:be:0c:86:ce:0a:4f:
         e2:21:ce:93:da:80:b7:f6:e0:6f:67:e0:30:60:b1:37:9b:af:
         64:65:a6:6e:21:86:24:de:08:8e:06:63:d1:fa:f9:8f:9e:35:
         ac:2c:e1:b3:a8:66:a9:eb:3d:b0:a2:dc:3a:90:3c:30:94:a5:
         27:88:f2:b4:9d:2f:3b:e5:53:d4:66:bb:2b:02:bd:fc:e1:78:
         4d:56:45:99:08:fb:d8:75:94:fe:25:d5:de:1d:05:e8:7b:75:
         19:ce:6a:ef:0a:ca:d4:82:78:b3:86:b4:48:96:39:63:7e:b1:
         61:3e:b9:c7:ae:25:69:fe:2e:e2:0b:78:ba:fe:50:00:fa:de:
         ea:02:af:7f:5f:7d:a0:dc:66:ae:58:b8:f1:6b:d6:d6:bb:84:
         8b:e9:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:10 2026 by rpki-client