This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e2037343138.roa
File:                     3230302e35302e3132302e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          zfGpT5C8rng07tNDg79u7dCjEBM7Gh4QVJ2N5inM9c8=
Subject key identifier:   50:20:47:C0:EC:DB:53:96:7C:E5:81:77:09:7B:EB:3E:4C:97:0A:6B
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       0562AD63D5AD51E16CCD2B603F225F966443AB83
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:51:58 +0000
ROA not before:           Tue 06 Jan 2026 20:46:58 +0000
ROA not after:            Tue 05 Jan 2027 20:51:58 +0000
asID:                     7418
IP address blocks:        200.50.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:62:ad:63:d5:ad:51:e1:6c:cd:2b:60:3f:22:5f:96:64:43:ab:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:46:58 2026 GMT
            Not After : Jan  5 20:51:58 2027 GMT
        Subject: CN=502047C0ECDB53967CE58177097BEB3E4C970A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:2e:65:17:89:94:94:20:e6:37:df:27:00:
                    e0:4e:5a:21:c1:76:b6:bf:7c:2d:4b:f3:23:a3:cc:
                    24:20:64:15:92:fa:6e:82:b4:38:0a:98:2d:8d:86:
                    d0:bd:08:11:46:7e:48:46:14:1d:5b:71:c7:60:a7:
                    c1:f4:80:48:bf:f5:8f:f9:ae:a0:28:d7:a9:30:67:
                    45:a7:e6:65:fd:e6:29:aa:ff:f0:7e:b7:12:6f:67:
                    96:84:40:31:8b:2e:99:6f:b6:9e:99:d4:c3:46:6d:
                    1e:33:14:85:a2:a9:e3:87:88:3a:b4:a2:79:f0:98:
                    11:ca:a2:2c:81:3b:a4:94:c2:22:0a:e2:d9:56:d2:
                    fc:57:0c:f4:52:65:17:7d:9e:e2:77:32:39:9f:03:
                    ad:10:cc:cc:0a:5e:1e:3d:fd:d6:39:35:0d:aa:5d:
                    8e:3a:28:d1:6f:f9:a2:e7:a7:d7:6d:ef:3d:43:2f:
                    1e:75:8c:5d:dc:b5:95:d7:43:6e:52:0b:ac:31:92:
                    54:05:65:da:ce:e9:41:90:4e:a7:91:5a:09:5f:a4:
                    5a:17:f1:77:db:71:28:3a:c0:9c:a9:a2:db:84:92:
                    d3:f8:cb:45:7e:2d:dd:7f:ee:ca:74:09:2b:1c:c9:
                    2c:32:6c:76:a4:09:d3:4f:4a:60:3e:89:0f:b2:0a:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:47:C0:EC:DB:53:96:7C:E5:81:77:09:7B:EB:3E:4C:97:0A:6B
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e35302e3132302e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:e6:5f:2a:07:c3:ab:6f:0d:72:f6:1f:25:18:86:fe:85:
         de:b7:71:0f:4d:f3:ba:bb:d3:a1:12:fc:60:72:c4:77:f3:61:
         42:90:7c:5e:09:a3:97:ee:95:a9:b5:32:a2:77:43:13:51:35:
         08:65:44:ac:0d:ba:96:bf:29:a1:62:35:6f:11:97:9d:a2:40:
         a4:94:49:cb:d7:fd:64:a5:c6:6d:3d:ac:ee:7e:7f:d5:7d:78:
         c1:1f:25:29:e5:a3:2c:8a:81:6f:e7:38:5b:97:64:0d:eb:5b:
         a4:44:60:f6:41:59:ee:9a:fd:42:0d:ed:4e:30:93:98:93:5b:
         30:57:74:0f:39:61:ed:32:37:c2:a9:57:3a:3d:4f:be:c4:ad:
         fe:90:ce:45:3f:61:4e:31:d8:72:85:37:c3:8a:d0:7b:ef:d8:
         e2:ea:92:03:dd:3c:a2:03:87:de:24:f4:c3:d6:15:39:25:ca:
         af:f2:8c:f8:4b:93:8e:53:ef:43:5f:01:0d:0e:93:d1:ae:3e:
         46:97:bf:70:66:46:31:51:cc:f9:f9:74:54:97:b1:37:f4:25:
         df:e3:11:fd:4a:b0:60:55:78:12:63:ea:c3:bd:cc:aa:c2:d4:
         36:2f:71:2d:21:32:cb:8f:fe:79:42:de:8e:d8:23:00:30:5b:
         9e:19:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:44 2026 by rpki-client