This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136362e302f32342d3234203d3e2037303034.roa
File:                     3230302e3131332e3136362e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          4PTDyz1SWfA/juWBRmEZkxkbMO2STGEkca+cSzetzgY=
Subject key identifier:   0D:0A:7C:AF:EB:90:25:5C:BF:AF:25:04:D7:AA:10:A7:9B:02:92:FC
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       3AA9E2A2D82F89E69852C00670BF754AA474BF8E
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136362e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 20:52:15 +0000
ROA not before:           Tue 06 Jan 2026 20:47:15 +0000
ROA not after:            Tue 05 Jan 2027 20:52:15 +0000
asID:                     7004
IP address blocks:        200.113.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a9:e2:a2:d8:2f:89:e6:98:52:c0:06:70:bf:75:4a:a4:74:bf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:15 2026 GMT
            Not After : Jan  5 20:52:15 2027 GMT
        Subject: CN=0D0A7CAFEB90255CBFAF2504D7AA10A79B0292FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:2e:87:0b:39:28:a9:bd:e6:ce:2e:c3:b0:
                    5c:fb:60:b4:44:08:17:b1:88:83:e5:4c:7e:07:22:
                    cf:e0:5e:6c:93:4a:e1:1b:df:59:0b:53:3f:4f:de:
                    0d:4a:db:9f:78:4a:ea:0e:4d:41:6a:06:31:d2:20:
                    7b:55:da:15:ad:33:3f:2e:8b:3c:a3:36:12:04:73:
                    56:2f:03:23:bf:8b:91:32:12:85:71:87:58:ec:09:
                    fb:06:06:85:58:e5:17:0f:4d:83:62:7c:82:8d:51:
                    0d:f3:93:68:7a:db:a8:ee:64:a7:f9:8f:28:0d:8b:
                    a8:84:60:e3:ca:8c:43:c5:5a:43:66:90:f6:70:aa:
                    7f:bb:5a:5b:e7:7a:69:7e:08:3d:f3:3b:b2:6a:e5:
                    87:8c:af:b9:b6:df:1c:77:3f:36:91:60:cf:52:30:
                    e4:2e:48:ad:0c:10:0a:d4:22:29:a7:1a:08:c6:53:
                    ce:a9:fa:4c:b9:7a:f4:a0:9b:2f:cb:54:33:5e:a5:
                    84:cd:3e:73:b6:c1:1c:c9:e7:60:04:49:9e:e1:69:
                    68:55:7d:84:12:4c:78:a4:48:5f:c5:1e:31:bf:fb:
                    4f:7b:67:69:24:9a:04:4c:dd:98:d7:fe:b9:be:9c:
                    37:69:7e:ce:fb:fd:14:cb:3c:d3:f3:bd:f7:da:d6:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:7C:AF:EB:90:25:5C:BF:AF:25:04:D7:AA:10:A7:9B:02:92:FC
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3136362e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:fe:8a:01:61:e3:3c:2d:0e:55:e4:6f:2b:b0:db:0b:9b:
         1a:17:62:fe:cf:51:19:7a:6a:c2:fc:2a:50:06:ed:30:2c:e9:
         80:4b:d6:29:9a:d1:83:6c:12:d5:d7:66:0d:46:21:67:bc:0d:
         23:a7:97:45:25:1d:15:aa:22:1b:7b:cb:65:76:ae:56:cc:08:
         5c:6b:20:c8:b9:80:26:61:cf:dd:b8:e7:77:1f:98:2d:c5:4d:
         40:36:d9:98:91:82:6c:37:67:8d:5c:e0:29:6a:e4:62:d4:a4:
         74:5a:a2:99:3d:50:72:3c:68:1d:ed:00:f1:5a:0c:97:30:bb:
         17:8e:c0:f0:d5:83:5e:a4:23:a2:51:8e:c4:fe:37:35:52:fd:
         ba:16:64:d1:46:83:1e:0a:5c:06:06:34:a1:72:77:91:af:e7:
         e7:64:52:a1:ab:3b:83:57:ba:f5:67:60:e0:4e:db:56:b0:ac:
         b8:d0:a1:be:01:15:2d:15:d0:df:93:39:50:c0:9b:3a:91:4d:
         a6:79:fb:3d:05:e5:14:4c:cc:97:85:0f:b9:11:2a:3b:d4:ed:
         d2:74:cd:ab:3f:ee:1e:ba:49:4e:7f:a1:aa:f5:c9:7a:a4:73:
         52:8b:98:8e:bb:b0:8d:d7:29:70:8c:62:5c:85:ad:0b:90:5c:
         d3:87:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:21 2026 by rpki-client