This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa
File:                     3230302e362e31332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          LY79+EA0ApGAFYOsZ9KSTAO3dJ7/vRuNGyOGVgMtMXs=
Subject key identifier:   13:11:D3:ED:61:E8:EF:EC:F6:24:CD:22:1C:95:B4:23:3D:A8:82:35
Certificate issuer:       /CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1
Certificate serial:       7E19E39B9B55D1F0CE887B3CE678EC2163A4B667
Authority key identifier: 22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:07:49 +0000
ROA not before:           Tue 06 Jan 2026 19:02:49 +0000
ROA not after:            Tue 05 Jan 2027 19:07:49 +0000
asID:                     27947
IP address blocks:        200.6.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:e3:9b:9b:55:d1:f0:ce:88:7b:3c:e6:78:ec:21:63:a4:b6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1
        Validity
            Not Before: Jan  6 19:02:49 2026 GMT
            Not After : Jan  5 19:07:49 2027 GMT
        Subject: CN=1311D3ED61E8EFECF624CD221C95B4233DA88235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:20:0e:9a:b1:60:b3:14:ca:aa:cf:36:84:
                    c4:9b:1f:1a:c9:1d:e4:c7:e7:ec:fd:d3:d7:47:74:
                    6c:6d:28:30:74:64:f1:4d:fb:1b:a0:b5:c0:5b:42:
                    f4:45:b6:d6:e6:f0:4a:80:ce:01:c9:d3:dc:81:bc:
                    e9:b4:b4:24:bb:2e:b5:67:a2:a8:49:aa:de:d8:fe:
                    07:3b:82:18:eb:31:25:09:4c:e1:0e:21:0a:c1:20:
                    cb:ea:46:23:d7:bc:8d:96:44:e2:1e:33:8b:f4:04:
                    ff:48:79:76:c6:72:7d:b6:79:71:22:d3:9e:e2:eb:
                    0f:d4:c6:20:b8:56:9a:cc:50:4e:e8:8a:43:66:61:
                    5d:75:5a:8c:d4:62:6b:0c:72:19:9a:6c:91:a7:b9:
                    b5:f1:0b:18:aa:27:8d:8e:d1:5f:64:c0:05:93:e6:
                    c2:52:46:22:b6:19:ad:83:d3:95:2e:98:d9:88:9b:
                    45:dd:af:58:1c:92:d4:9b:33:32:61:29:7b:01:b3:
                    a0:5c:3e:70:02:84:ce:86:e9:e2:10:bd:6d:fd:f8:
                    15:09:46:a2:c8:a1:ae:a1:ed:80:f6:1d:73:fe:66:
                    68:24:c2:ab:ce:d0:31:11:3e:0c:c2:44:1d:ff:38:
                    b3:95:d5:e4:09:61:26:b9:b9:ef:b0:9c:90:eb:d4:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:11:D3:ED:61:E8:EF:EC:F6:24:CD:22:1C:95:B4:23:3D:A8:82:35
            X509v3 Authority Key Identifier:
                keyid:22:E4:E9:A2:FB:F4:98:BE:B9:A1:B8:A1:F3:5B:91:15:0D:CA:03:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E4E9A2FBF498BEB9A1B8A1F35B91150DCA03D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D06C642C91C757E6CFBC84264401BE169255431934C09EEAFDF89C2360B6B93/0/3230302e362e31332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:be:83:8c:81:e5:05:01:6d:67:32:78:02:75:52:0a:08:
         1d:c6:ad:e6:fd:0e:5d:55:9e:4f:bc:c0:ce:9e:19:5e:63:5c:
         74:96:2d:be:8e:ba:f5:60:78:fc:7a:1a:b7:f6:ca:d4:f0:ae:
         f5:4a:39:cd:18:9f:c4:50:5e:22:b7:42:ea:7b:91:af:ae:fa:
         7a:4c:19:08:f8:ab:a9:6d:74:f3:4e:78:7b:5b:17:55:71:b6:
         7c:b7:49:fa:29:72:8b:8c:53:80:e7:30:44:15:b1:f0:0b:da:
         06:c1:6c:db:ab:43:93:9d:dd:6a:80:2e:d8:40:36:82:31:6f:
         3c:2f:0b:a0:8e:70:f9:fd:7b:cb:0c:7b:e4:87:bf:c8:2a:96:
         e6:d9:70:1f:88:a5:25:90:8e:5e:59:2a:c1:b3:6d:1c:c9:86:
         07:24:e2:85:7c:30:f5:9b:fe:a0:b4:51:30:f1:be:53:68:d5:
         b8:e7:ce:f0:78:6a:66:d6:6f:cd:a5:85:b6:0f:9c:29:80:f3:
         4f:5c:15:2c:ce:27:2d:a6:c6:fa:88:5c:01:f1:80:b8:8f:b9:
         52:76:c4:b5:68:69:83:eb:09:a0:ca:a1:43:d3:34:4f:0f:33:
         ef:35:87:c5:31:1b:6d:f3:5a:f1:0e:44:78:0e:a7:d3:da:4a:
         e6:a8:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:42:09 2026 by rpki-client