This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa
File:                     AS28052.roa (raw, json)
Hash identifier:          mqvMWMJyHcePJ+WZfm9kZpcWZR0VMtEAhowHiMZ1Z3o=
Subject key identifier:   2E:6B:80:AC:10:79:7D:EC:0E:59:85:D4:C2:95:73:10:E7:3B:0A:3A
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       3B5E4D8ACDD27E80FE80E5DFFD652D98159F89E5
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa
Signing time:             Tue 06 Jan 2026 20:57:27 +0000
ROA not before:           Tue 06 Jan 2026 20:52:27 +0000
ROA not after:            Tue 05 Jan 2027 20:57:27 +0000
asID:                     28052
IP address blocks:        200.42.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5e:4d:8a:cd:d2:7e:80:fe:80:e5:df:fd:65:2d:98:15:9f:89:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Jan  6 20:52:27 2026 GMT
            Not After : Jan  5 20:57:27 2027 GMT
        Subject: CN=2E6B80AC10797DEC0E5985D4C2957310E73B0A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:d7:7d:b2:6c:32:c8:55:ce:03:c9:7c:fb:
                    2e:6e:1e:03:5b:ec:9b:b1:39:a7:48:8f:80:b3:a8:
                    96:89:71:14:d3:78:eb:33:cf:a0:c8:61:90:61:27:
                    6b:74:6d:a5:ae:04:71:78:ec:e0:b8:cf:8d:6d:8c:
                    ae:35:1f:e0:ee:d9:c3:8b:46:d9:17:5c:01:4b:28:
                    60:ee:b5:93:9e:93:db:dd:0f:c8:d1:d3:ac:6f:ad:
                    76:1d:80:61:c7:00:0f:58:45:92:36:f1:bc:06:be:
                    e2:a3:22:d5:49:ae:a0:e7:e1:83:39:94:c2:32:9d:
                    c7:a5:46:a2:41:9a:d0:ba:7d:60:4d:76:1b:a3:c7:
                    24:43:c9:05:0b:a5:a3:ae:ca:a5:bb:49:81:4d:29:
                    73:d1:09:e3:8e:a8:8c:83:4e:a8:53:cd:1c:13:3a:
                    c9:99:75:70:f8:8f:7d:3e:8d:42:2c:3d:b5:8d:59:
                    f1:70:ff:83:29:68:95:62:46:df:b7:63:f8:fd:e4:
                    61:b6:95:05:cd:0f:99:7b:2b:7f:ad:4c:5d:04:8a:
                    e6:f1:b4:66:9a:06:c4:93:00:81:0b:0b:b0:59:71:
                    b9:47:e9:fa:29:52:e7:3f:32:51:04:8e:a5:34:be:
                    4e:ef:6d:31:2d:f5:00:79:be:d8:87:25:12:17:0f:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:80:AC:10:79:7D:EC:0E:59:85:D4:C2:95:73:10:E7:3B:0A:3A
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0a:fe:43:05:5f:79:d6:d1:fb:c5:a6:e0:6a:2f:2f:80:74:
         48:ad:ac:f6:75:b6:d6:c7:3a:24:82:c0:93:ea:03:bf:20:23:
         cc:d9:77:fb:11:50:09:26:b4:f0:0b:af:24:b3:83:a9:0b:6b:
         7d:c6:ae:9a:13:b8:0b:c4:b7:81:45:11:43:15:f9:1f:3b:33:
         e9:1c:3e:fe:cd:af:cd:e1:a3:1d:dc:e0:25:86:05:d5:f9:91:
         44:1e:96:1d:23:c6:49:58:22:27:e4:a8:dc:7d:9b:dc:ce:8f:
         a2:d7:74:d1:f9:82:40:95:03:5f:f4:ec:7d:ed:73:4c:54:2e:
         e3:3c:80:0c:03:31:da:6f:f0:6f:46:54:3c:66:43:b7:40:e1:
         a0:74:0d:af:25:ca:48:b8:61:69:50:a0:86:bb:74:7a:c9:4c:
         14:bf:82:24:bc:31:5e:50:17:65:ce:04:da:21:36:54:d6:33:
         92:32:55:cd:80:8b:d5:88:b3:1a:d6:54:5c:c3:51:2e:5d:5b:
         46:9c:ae:4b:ba:70:00:49:98:44:dc:0c:ed:ac:ca:2d:47:d2:
         53:0a:91:90:03:46:11:83:b4:df:17:b5:af:51:5b:6b:1a:ad:
         83:ff:f1:08:09:c4:ad:12:fd:c3:c6:da:5e:bc:3d:3d:d8:e4:
         07:9d:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:47:19 2026 by rpki-client