This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3137362e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          vGJryg4EiES0IhO4lUDE1P1MGaL7Chg08zj0VZleZys=
Subject key identifier:   11:E6:4E:36:54:7A:98:5D:A3:49:E4:E4:74:2C:EF:CE:2D:53:DB:E3
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       11411220B910ED98F363D62E73252772A26CB661
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 20:52:08 +0000
ROA not before:           Tue 06 Jan 2026 20:47:08 +0000
ROA not after:            Tue 05 Jan 2027 20:52:08 +0000
asID:                     7418
IP address blocks:        200.90.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 13:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:41:12:20:b9:10:ed:98:f3:63:d6:2e:73:25:27:72:a2:6c:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:08 2026 GMT
            Not After : Jan  5 20:52:08 2027 GMT
        Subject: CN=11E64E36547A985DA349E4E4742CEFCE2D53DBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:2e:55:ee:e0:e7:88:56:ae:61:9a:31:4c:
                    dc:3e:48:da:8e:e4:b2:c6:5b:bf:06:58:54:0e:04:
                    2d:02:03:36:dc:9e:17:dc:30:1f:f7:b1:0d:df:48:
                    43:8c:04:f6:a9:af:96:ce:7e:5f:0e:f9:ea:b0:17:
                    75:63:a8:16:c9:88:69:4e:73:2e:ce:65:08:c3:64:
                    74:70:e0:7d:95:6f:5a:39:c3:b8:8d:70:ad:7c:40:
                    13:55:82:59:05:1c:c5:83:4f:e3:47:71:34:6f:f0:
                    54:e0:b5:03:19:2b:5b:cd:5f:73:f2:84:ef:fb:11:
                    36:37:84:b3:fb:e1:50:30:e9:d4:11:b3:da:d1:d6:
                    1b:8e:bd:c9:fb:36:b8:cf:e0:f1:c4:b4:6e:16:dc:
                    6a:9e:fc:a7:ba:e6:a2:46:38:93:a5:d7:25:d2:a7:
                    74:5b:2c:8f:07:c7:b8:2f:92:a8:80:b2:52:3f:6d:
                    4a:a0:26:58:0e:68:0d:52:40:ad:ce:69:7f:fb:a8:
                    fb:93:a0:96:9c:b8:98:fe:4f:8d:e5:81:e1:96:4c:
                    29:9a:5a:ff:60:a7:bc:d8:a0:27:ed:19:f9:73:62:
                    1c:ec:ce:6d:1b:aa:a0:3a:96:cd:f4:98:b1:ae:e0:
                    3b:25:26:3d:8e:4d:32:3a:dc:55:de:a0:d0:41:1d:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:4E:36:54:7A:98:5D:A3:49:E4:E4:74:2C:EF:CE:2D:53:DB:E3
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3137362e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:56:5a:7a:ce:83:68:61:84:87:01:ac:ec:34:f9:ca:fe:bb:
         2e:83:0c:2b:3a:d4:41:2b:3a:bf:24:fe:34:6f:c2:82:c2:b0:
         59:99:31:32:10:1d:61:77:36:3b:9d:44:8c:58:14:42:d1:2f:
         86:fb:71:81:59:c4:f6:ca:f8:e9:3a:a3:28:d7:9c:d5:aa:24:
         e3:e7:fa:5b:b7:4d:c5:12:d1:e5:ad:96:8a:04:78:37:41:8c:
         02:a5:c3:ff:0e:10:dc:6f:ac:79:28:88:68:f2:28:b9:2c:1f:
         dd:f7:61:1a:b1:89:79:b6:e7:46:1d:06:8c:4b:6c:88:11:35:
         e0:ab:85:46:02:db:61:0c:69:8a:3e:93:2e:8e:f8:33:4b:06:
         e0:e4:08:64:76:f0:fe:e8:3a:53:1d:be:5e:00:ea:90:0b:f8:
         35:f0:f8:fd:b0:5d:0d:8e:c5:5d:66:70:32:84:c0:61:18:36:
         9f:85:ab:6e:3a:11:1d:4b:01:24:d0:41:03:15:ca:2d:a6:e8:
         e5:dc:75:0b:34:dd:ed:a9:95:30:b7:ab:f6:db:52:85:94:a1:
         2d:b1:69:b1:95:ae:57:b2:14:7f:8d:80:c1:55:11:c6:f7:f1:
         ad:0b:f6:c8:79:44:ad:84:94:eb:ba:b6:f0:3f:4a:a3:a5:f5:
         ec:02:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:48 2026 by rpki-client