This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3139322e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          srlT8zGrfC1TqDGU06e1Gh7bmxSuUXA0EBGc/Nh7VZ0=
Subject key identifier:   78:D6:AF:E8:3B:3A:D2:07:C8:27:8B:72:6C:6C:EF:32:04:7D:61:09
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7FF7BDC8C0925790083BBCFAA009AA5F8F953956
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:11 +0000
ROA not before:           Tue 06 Jan 2026 20:47:11 +0000
ROA not after:            Tue 05 Jan 2027 20:52:11 +0000
asID:                     16629
IP address blocks:        200.90.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f7:bd:c8:c0:92:57:90:08:3b:bc:fa:a0:09:aa:5f:8f:95:39:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:11 2026 GMT
            Not After : Jan  5 20:52:11 2027 GMT
        Subject: CN=78D6AFE83B3AD207C8278B726C6CEF32047D6109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:6f:2f:4d:e4:72:9c:88:13:7a:46:c1:62:
                    1b:d3:9e:a2:e0:b3:5c:c8:ce:1a:82:04:4d:58:40:
                    f7:ef:50:1e:4e:0e:8c:b8:a4:5c:bd:4e:9f:01:5c:
                    45:44:d3:ca:37:a5:34:53:a8:c4:f3:46:4c:b1:05:
                    12:26:fe:d5:9d:70:d3:39:23:c0:68:8a:45:8f:e0:
                    f4:f3:a5:58:c4:ef:72:34:4e:5b:ca:79:e2:9c:9e:
                    ca:21:11:b6:fa:43:13:a7:ef:41:af:59:23:92:f4:
                    9e:95:51:8c:8f:10:80:16:d8:a4:bd:be:6d:49:76:
                    84:32:a0:0d:3f:5a:83:09:ac:fb:65:8a:97:53:5d:
                    05:82:a9:e3:79:97:1c:be:de:08:af:a9:07:5a:06:
                    c0:3c:dc:f0:30:51:6b:7d:cb:73:b4:f1:d3:1a:70:
                    f6:16:f0:42:43:83:ea:7b:13:59:71:e0:a5:c2:7d:
                    74:00:11:f4:31:07:e4:25:0e:89:db:15:1e:2b:10:
                    f9:85:e2:d3:f9:48:dd:11:ad:9d:cc:ef:93:85:c1:
                    5e:d7:24:c6:17:fe:c8:5e:5e:d5:9f:d1:5c:d4:af:
                    a3:d6:5e:40:ea:30:c7:19:13:37:4c:2d:69:41:1b:
                    d8:64:fb:2c:5d:86:1e:ca:9e:cf:da:9c:00:5c:50:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:AF:E8:3B:3A:D2:07:C8:27:8B:72:6C:6C:EF:32:04:7D:61:09
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:17:2d:77:6f:f7:db:2c:65:25:f6:be:97:56:d8:06:00:
         ee:09:36:b0:a7:1a:22:13:74:0c:39:f0:8e:21:6e:da:ae:7a:
         7b:ec:03:ee:53:28:38:57:47:4b:3a:20:b4:1c:10:bc:8b:74:
         0d:82:1d:7f:60:c0:a4:cb:c3:11:e8:c3:38:93:e8:69:ac:f4:
         46:58:c9:5d:a3:b4:3a:b3:80:6d:d3:5b:47:8c:b4:c0:5d:eb:
         cd:a5:32:ab:ee:12:ce:1f:bc:4f:03:ef:65:d8:2e:af:14:07:
         7e:1c:00:14:1d:16:c7:ec:00:9b:49:fb:50:e7:ec:6c:07:ca:
         1d:11:08:7f:d5:c1:e8:8f:1f:b0:10:df:1a:be:aa:eb:05:60:
         98:81:49:e9:f2:01:c4:1b:a0:39:f4:54:71:46:5c:4c:e8:7d:
         99:64:91:2c:9e:08:7a:d5:ff:ac:be:d1:5d:9a:82:cc:7a:37:
         a2:f5:38:8a:07:b1:40:84:16:79:34:a5:6a:7e:9f:a6:9a:ad:
         a9:25:3e:46:43:12:eb:29:42:fa:ca:18:5b:f3:3a:68:8a:fb:
         50:5e:52:8a:70:eb:ab:c5:95:6f:b7:e1:ca:63:31:ae:f2:39:
         aa:3c:ca:82:49:94:7e:30:c6:25:58:5f:e0:b2:8e:95:a9:45:
         30:d8:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:13 2026 by rpki-client