This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3136382e302f32322d3234203d3e203237373733.roa
File:                     3230302e31332e3136382e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier:          MfXG0BVri2n8phU4MGOEHUOshXl3zAV/DRGHTs9dAMo=
Subject key identifier:   DF:CA:B9:C9:D2:2E:8C:6E:D1:6B:1A:63:55:FD:D0:9C:90:34:B7:D2
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       0C9C6D430E5B9175A33DA034FE229967AB24311A
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3136382e302f32322d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:22 +0000
ROA not before:           Tue 06 Jan 2026 20:48:22 +0000
ROA not after:            Tue 05 Jan 2027 20:53:22 +0000
asID:                     27773
IP address blocks:        200.13.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9c:6d:43:0e:5b:91:75:a3:3d:a0:34:fe:22:99:67:ab:24:31:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:22 2026 GMT
            Not After : Jan  5 20:53:22 2027 GMT
        Subject: CN=DFCAB9C9D22E8C6ED16B1A6355FDD09C9034B7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:7e:4e:2f:5f:87:69:7a:d9:85:3d:d1:eb:
                    a5:eb:e4:e6:7a:42:b6:77:70:7f:99:c7:87:cc:04:
                    dd:4d:01:6f:af:f5:79:fe:c1:8f:de:12:cf:d5:a4:
                    0a:0c:68:7d:1c:c2:82:e7:e1:69:b3:10:d7:63:26:
                    1b:6c:b6:16:4a:31:3b:a4:18:7c:cd:ee:af:a1:73:
                    9b:10:93:83:93:46:ca:e5:10:bc:9c:13:ca:af:22:
                    7d:b9:85:a7:bf:2b:22:d3:ad:4d:fa:c3:d4:fb:b3:
                    a8:e0:64:dc:55:dd:6c:a1:4f:5e:a5:e6:57:5d:6e:
                    74:5c:5e:6d:05:f5:3f:ed:6c:d2:86:a9:fd:b3:ee:
                    75:21:ea:62:3d:be:11:ef:58:62:fa:74:c5:21:66:
                    f3:37:6f:15:8e:f8:5e:c8:a5:c8:5f:44:af:14:ce:
                    0c:5b:81:bd:1e:dc:27:c9:42:21:30:da:f6:7a:2b:
                    f6:17:04:89:48:11:53:f5:c7:dd:96:c4:0c:87:6b:
                    ad:4e:ef:0b:e4:b1:13:0b:82:43:45:de:35:7b:cd:
                    bc:d7:14:00:7e:3f:b8:cb:a6:73:c5:19:af:2d:96:
                    df:2a:80:99:c5:1e:92:f9:ff:7d:60:d0:18:90:1d:
                    b3:4b:0c:d7:a6:e7:84:68:63:63:13:60:91:4e:1d:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CA:B9:C9:D2:2E:8C:6E:D1:6B:1A:63:55:FD:D0:9C:90:34:B7:D2
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3136382e302f32322d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:22:14:c8:b4:67:c4:5f:b8:0d:91:5b:20:31:17:20:a5:
         2e:3d:1a:86:cb:98:5f:1d:63:be:1e:76:17:20:20:de:f3:87:
         37:24:10:bf:dc:a6:0c:82:48:a5:e3:d5:ea:ba:05:e5:e0:47:
         33:91:e6:86:fe:88:22:28:f6:99:bd:c2:86:38:19:c6:c9:44:
         20:18:15:b3:e2:bf:95:47:02:c2:43:c1:e2:e9:fd:ff:52:bc:
         a9:c1:0d:b9:52:50:80:5c:eb:f6:cc:96:29:d6:2d:60:5a:28:
         45:07:81:0a:46:be:6b:52:24:94:29:77:60:4f:72:a1:6b:3d:
         1f:d2:db:37:aa:81:9b:f3:12:59:39:75:b0:c9:e5:ca:70:27:
         e7:20:6b:14:e0:9a:71:d0:60:9e:56:0e:da:3c:5f:2b:32:a5:
         6a:a1:69:45:59:52:e8:1d:1d:e1:03:43:3e:c1:cd:55:39:4a:
         9e:ed:9f:a7:ba:7e:7b:68:f6:66:07:7b:b0:df:ec:36:02:44:
         4b:d4:0a:02:68:9c:2e:ab:be:a5:da:01:21:f0:27:ad:11:13:
         4a:2e:73:12:df:5f:fa:4e:70:8a:32:02:43:10:df:f1:cc:04:
         34:c2:1c:32:33:25:17:b4:1e:03:5d:9b:dd:f3:80:10:c2:33:
         ec:8f:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:19 2026 by rpki-client