This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203136353039.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203136353039.roa (raw, json)
Hash identifier:          KwP9jUTxfEypprXogUR8Rp1eFCnOsZq0XXOPZh+4U78=
Subject key identifier:   5A:DB:FB:C0:07:D0:CF:4E:55:17:75:CE:62:EB:E5:46:CF:14:45:41
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       21815E62F3162EDF9D0FA1F57326D5E80BAA2D19
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203136353039.roa
Signing time:             Tue 06 Jan 2026 19:31:14 +0000
ROA not before:           Tue 06 Jan 2026 19:26:14 +0000
ROA not after:            Tue 05 Jan 2027 19:31:14 +0000
asID:                     16509
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:5e:62:f3:16:2e:df:9d:0f:a1:f5:73:26:d5:e8:0b:aa:2d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  6 19:26:14 2026 GMT
            Not After : Jan  5 19:31:14 2027 GMT
        Subject: CN=5ADBFBC007D0CF4E551775CE62EBE546CF144541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:de:47:be:dc:75:19:0d:49:dc:96:fb:cf:
                    6b:af:02:38:5e:af:19:e7:4e:ad:6c:4d:d6:90:36:
                    04:02:66:c5:cc:dc:c2:7b:60:7c:8f:b3:3d:4f:84:
                    c2:a9:b1:da:78:3e:c8:e2:fb:46:ec:3a:16:5b:48:
                    f0:a9:c0:21:c9:0c:f7:f9:04:b8:87:e9:a7:76:6b:
                    98:b3:44:0f:e4:74:77:88:dd:73:b3:30:40:e0:2a:
                    b1:a8:05:1b:d3:19:76:29:ce:a0:f9:b4:38:cc:8a:
                    99:33:f4:b9:65:be:3e:3f:64:84:01:11:d8:93:af:
                    be:76:40:3a:d0:25:d4:00:55:f4:02:56:d8:24:89:
                    9c:29:fb:0c:7e:0c:f3:2d:77:a7:46:bf:21:bf:61:
                    e9:01:0d:20:7c:b6:68:3d:37:43:00:72:74:aa:7b:
                    a2:c0:9e:5e:0d:72:b4:06:36:a5:17:1d:6a:0c:cb:
                    fc:55:0e:9e:9c:c4:2e:7d:16:d1:44:25:c5:06:84:
                    b7:ff:6b:de:b6:43:05:d1:84:15:80:6c:54:c8:63:
                    d9:65:1f:d1:52:f0:cf:3b:0c:09:f1:9e:fd:6b:cf:
                    cc:c8:89:2a:03:0a:a5:68:8c:a9:46:61:7c:8a:89:
                    6b:65:98:ba:b0:c5:10:74:87:b6:65:25:5e:f3:63:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DB:FB:C0:07:D0:CF:4E:55:17:75:CE:62:EB:E5:46:CF:14:45:41
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:24:31:62:34:06:aa:66:cc:ba:5e:2c:5c:c6:78:ba:d2:
         7d:75:7a:40:3c:a1:e1:b0:68:9d:c6:6e:b9:99:be:09:1f:e8:
         34:65:d1:14:11:38:09:bd:20:df:45:b9:78:6a:03:31:ff:e3:
         f7:71:c0:7e:df:c9:f6:34:a4:f9:3d:da:dc:2b:40:b1:64:37:
         fd:47:e6:91:d8:35:9d:44:c6:9c:1b:77:c7:0f:85:6b:ed:a8:
         6f:7c:09:51:91:f6:5b:3b:b4:a1:c0:35:47:a5:3f:d2:a2:fd:
         02:75:1b:f6:04:c3:c2:dc:0e:b1:50:4f:42:f2:21:03:a4:9b:
         d5:6b:63:8d:96:ae:93:ed:06:13:5d:33:7c:66:ff:6e:6f:df:
         ba:31:b9:e6:3c:84:38:85:45:db:bd:e7:80:98:ee:cc:0e:57:
         59:d7:69:fa:99:4a:6c:26:77:a3:7e:3a:54:17:84:42:c3:ac:
         cf:8f:14:56:69:23:5a:29:63:e6:ec:2b:08:d2:13:4e:1f:b8:
         c4:b4:66:13:33:9b:a9:42:c7:21:34:1c:8b:82:0a:98:02:19:
         ab:a3:d3:69:2f:ed:a9:9e:8d:e8:20:c9:a5:8e:51:2a:b0:f2:
         64:78:5d:f7:1b:0d:48:a4:0c:e3:b8:90:5f:45:0c:54:90:f1:
         66:9b:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:40 2026 by rpki-client