This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3139322e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          NUE7F2yE1q8iGSn1b/pb5jGExrQOETgfahIi9B8Tht8=
Subject key identifier:   EE:F9:88:E0:50:96:35:9A:AA:9B:AA:A9:3C:F6:01:6C:1D:E5:DD:AD
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       1C43546A5128986B911D650FCD29F711AC51DB61
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:01 +0000
ROA not before:           Tue 06 Jan 2026 20:47:01 +0000
ROA not after:            Tue 05 Jan 2027 20:52:01 +0000
asID:                     7418
IP address blocks:        200.90.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:43:54:6a:51:28:98:6b:91:1d:65:0f:cd:29:f7:11:ac:51:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:01 2026 GMT
            Not After : Jan  5 20:52:01 2027 GMT
        Subject: CN=EEF988E05096359AAA9BAAA93CF6016C1DE5DDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:6c:2e:ca:9a:00:c3:8d:c1:89:ba:c4:e9:
                    fd:ba:da:44:02:5b:05:98:6f:c9:5e:fc:0c:d4:3d:
                    ff:bd:d0:15:3f:11:97:48:97:f2:a7:d4:16:30:bb:
                    b7:ce:e9:80:c6:89:d3:c5:2a:61:38:78:b2:25:66:
                    fd:54:2e:e8:97:39:c8:7f:ce:8a:2b:06:33:4f:de:
                    9d:0b:d4:7f:b4:7d:24:b5:fb:14:cc:22:1f:e7:ce:
                    18:e3:18:a7:55:e9:e5:15:68:ce:ae:80:6e:49:c9:
                    72:57:11:58:56:3c:59:aa:54:c8:9b:cd:f2:e1:20:
                    a1:7f:47:ab:74:bf:e3:f3:c6:2d:4c:c3:35:c6:c5:
                    03:ba:7a:58:53:6d:84:4c:9f:19:ed:90:59:44:1d:
                    56:92:90:94:d8:1c:9e:04:84:12:66:04:31:d4:aa:
                    81:30:d1:aa:1e:93:1f:f6:16:f6:17:04:f0:3e:91:
                    85:c0:f2:b6:fa:f1:a7:29:12:75:37:19:ac:e7:15:
                    0d:ff:23:a6:fe:74:14:18:f9:41:65:2a:76:02:49:
                    3b:fc:67:e0:8d:cc:bb:3a:49:17:1c:f4:82:44:6f:
                    1a:4f:7f:37:46:58:8d:df:9a:ce:4b:f5:e8:74:31:
                    47:bc:f4:c8:1f:bf:ef:9f:a0:36:26:f2:1e:e3:a8:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:88:E0:50:96:35:9A:AA:9B:AA:A9:3C:F6:01:6C:1D:E5:DD:AD
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3139322e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:08:5b:61:91:15:62:ee:e3:5b:9b:e8:38:ca:86:08:6b:da:
         c2:50:55:55:70:58:54:02:9e:d0:0c:ca:7f:85:78:c5:b8:30:
         d0:c0:5c:2e:a4:44:3e:71:74:07:83:b8:89:5c:e2:80:8b:61:
         58:95:68:84:41:f4:1a:1b:2c:91:7c:e3:27:ec:dd:80:d5:f2:
         58:a0:ab:01:cb:6e:c5:ad:7c:7c:8b:00:74:0a:3f:d4:32:03:
         3f:d3:8f:f1:f6:b1:b9:02:52:7f:c9:98:e6:c1:45:cf:76:5f:
         5e:e3:be:cd:8e:9a:6e:27:7f:5b:d8:c6:8e:f6:f3:96:74:7b:
         02:45:fb:a0:b4:ea:1b:8f:ea:06:f2:22:eb:de:b4:a9:2c:48:
         a7:92:02:a8:2e:46:8e:ca:ed:b2:65:0b:51:9c:a0:10:8d:15:
         92:15:1b:c4:98:99:84:40:e4:5c:3f:1e:48:46:85:81:fd:c4:
         24:38:59:00:8b:ce:08:db:6a:2f:4c:ba:3c:5b:3c:f9:ac:af:
         b9:34:ae:41:4a:f7:75:d4:11:d8:02:7d:42:7e:15:fa:f6:b9:
         10:99:e3:63:e7:37:7e:8e:1d:f9:af:a0:b3:a5:b3:7e:46:28:
         96:ea:54:fe:ca:9a:4c:79:1c:e5:a3:49:09:70:7b:65:73:16:
         b8:ca:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:16 2026 by rpki-client