This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e2037343138.roa
File:                     3230302e34322e3136382e302f32322d3234203d3e2037343138.roa (raw, json)
Hash identifier:          HsQfVtBrll1Jmvt0uE/Ioqr2+LokGN4zLUo2Di7APr0=
Subject key identifier:   33:A4:E1:48:82:34:B2:A3:38:24:D1:87:6E:80:1F:42:45:5F:97:1A
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6E92466A28A2BD162B13A2A02CF4F7D22E8FB2BA
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:16 +0000
ROA not before:           Tue 06 Jan 2026 20:47:16 +0000
ROA not after:            Tue 05 Jan 2027 20:52:16 +0000
asID:                     7418
IP address blocks:        200.42.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:46:6a:28:a2:bd:16:2b:13:a2:a0:2c:f4:f7:d2:2e:8f:b2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:16 2026 GMT
            Not After : Jan  5 20:52:16 2027 GMT
        Subject: CN=33A4E1488234B2A33824D1876E801F42455F971A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:2b:54:ac:a6:5c:97:59:57:90:21:c2:52:
                    a7:be:b4:d4:2e:0d:75:2a:a4:c3:58:e4:34:6b:af:
                    a7:e8:7a:81:d7:c8:79:c7:2a:f6:fe:18:24:c1:3e:
                    d1:e6:67:05:63:95:96:13:fa:d2:d9:3a:10:e7:f3:
                    ee:f3:e1:3f:73:7d:20:59:dd:2a:ef:0a:d6:ca:9c:
                    64:3d:30:93:4f:2d:7f:79:60:d7:cd:37:53:39:01:
                    c9:69:ed:92:09:27:ab:df:88:37:89:0b:93:30:69:
                    b3:87:dc:e2:e6:ed:99:87:b1:41:95:d9:93:a3:06:
                    90:b6:46:f7:49:88:84:cd:00:cd:0f:51:f8:56:38:
                    17:a1:ae:1d:c9:1a:86:07:54:c7:84:b7:95:31:ec:
                    15:99:f1:2c:c5:0f:3d:5d:65:9c:37:0c:7a:60:35:
                    6c:8a:2d:fa:0b:67:92:d6:84:5f:98:a5:00:47:5f:
                    ba:3f:37:3b:0a:86:b8:f3:9f:71:72:04:cd:3b:dc:
                    0f:1d:9e:1e:dd:ac:73:96:65:ed:76:19:01:7e:33:
                    84:b8:9d:38:d7:0b:8b:c4:be:4f:37:25:19:5b:bb:
                    76:5b:d4:bb:8b:29:fb:0b:59:c9:1e:31:25:05:02:
                    86:7e:f9:ac:90:5e:48:9f:9d:78:11:33:e1:13:72:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A4:E1:48:82:34:B2:A3:38:24:D1:87:6E:80:1F:42:45:5F:97:1A
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136382e302f32322d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c6:61:bd:5e:25:21:65:30:23:44:71:ad:46:85:36:e6:13:
         87:70:29:7f:46:d9:84:35:67:81:29:29:25:e2:25:69:1c:3b:
         d6:ff:ea:1a:a2:06:ae:bd:f3:b5:1c:10:ac:3b:12:74:90:79:
         7a:ec:20:47:2d:4c:c4:1e:4d:6f:e1:dc:57:3b:bd:b4:6a:fd:
         48:2a:c2:6d:d7:3a:2c:bf:33:46:10:1e:39:5c:0a:42:f1:0e:
         9f:2a:ae:00:d8:a2:b1:09:1d:2b:90:27:88:35:b1:fe:3e:77:
         60:e0:fc:70:7d:54:be:75:df:e3:84:c4:a2:7c:35:3a:e3:58:
         a1:17:4e:b3:f4:fa:3a:2a:91:02:f1:b7:5e:8d:8c:7f:9c:83:
         83:16:eb:58:83:6c:e8:20:0e:6e:df:af:22:de:49:42:c8:0f:
         73:28:55:7b:91:57:3a:1b:f0:05:49:80:f2:01:20:0a:c6:11:
         96:74:ad:60:eb:6e:cc:01:01:75:b3:d1:23:5d:f1:c5:55:db:
         ca:ea:4a:52:d3:93:79:a0:0e:de:9e:57:ad:0f:0c:fb:72:f2:
         4c:79:44:b1:2a:b0:2f:2a:00:8f:07:a7:81:81:3b:0a:00:d2:
         73:bb:88:d0:ed:be:34:90:4a:fc:83:9b:27:6e:6e:f1:db:24:
         a3:91:74:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:17 2026 by rpki-client