This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e203131393630.roa
File:                     3230302e31332e3134342e302f32312d3231203d3e203131393630.roa (raw, json)
Hash identifier:          vpbEic8Vpu06s291AGQK9DpeU+f9BHtyyJBM+mb2dp0=
Subject key identifier:   BD:F4:5F:B1:C5:7B:20:E7:D1:99:C4:75:75:B2:C0:CE:50:5E:80:DE
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       6724FBC21E2BAC2FDC2227469F20F591FB8CF81F
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e203131393630.roa
Signing time:             Tue 06 Jan 2026 19:38:59 +0000
ROA not before:           Tue 06 Jan 2026 19:33:59 +0000
ROA not after:            Tue 05 Jan 2027 19:38:59 +0000
asID:                     11960
IP address blocks:        200.13.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:24:fb:c2:1e:2b:ac:2f:dc:22:27:46:9f:20:f5:91:fb:8c:f8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Jan  6 19:33:59 2026 GMT
            Not After : Jan  5 19:38:59 2027 GMT
        Subject: CN=BDF45FB1C57B20E7D199C47575B2C0CE505E80DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:2b:26:c1:f6:b0:bc:6f:b8:4b:6b:09:ad:
                    56:25:b7:4f:6e:7e:84:27:46:79:d7:db:55:31:61:
                    5b:7b:d2:35:45:69:54:10:c2:3a:e8:2b:27:b5:4e:
                    c7:03:97:f9:43:bf:b3:43:c2:89:8d:c1:45:82:b1:
                    1f:11:32:42:cc:98:11:1f:db:7b:34:47:67:db:b2:
                    6e:fd:f4:a5:8e:92:f8:f9:e1:65:3e:73:81:94:2c:
                    c5:3d:ce:8e:93:9f:22:c2:77:8d:a0:3a:95:71:4c:
                    27:7e:56:d1:ca:62:a7:bf:17:4d:7d:7e:3f:4f:e8:
                    63:bc:3d:74:8d:5e:38:bb:6b:38:88:d9:1b:4f:8a:
                    ef:67:6e:bf:54:c3:33:a9:52:cd:38:ce:28:18:ad:
                    5a:21:40:1d:0e:be:ad:ac:9f:91:d5:d9:5d:4f:ac:
                    d6:a0:03:b9:78:9f:08:2e:11:6b:b6:b9:73:a9:c7:
                    e1:9c:33:d7:b8:e7:7b:b0:ae:2c:1f:06:1d:09:eb:
                    8a:ec:c7:ff:cb:17:aa:96:60:59:3b:01:75:f1:bb:
                    1e:ca:e9:ce:e6:f1:dc:e1:58:e5:97:ba:df:fa:69:
                    b2:d5:b0:b5:11:59:4e:35:e2:f3:8d:d5:c9:3d:08:
                    ed:84:ab:90:7d:ca:55:dd:d8:4e:28:58:46:86:a7:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:5F:B1:C5:7B:20:E7:D1:99:C4:75:75:B2:C0:CE:50:5E:80:DE
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e203131393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:f2:46:a5:76:24:fc:8e:6e:e4:e3:80:6a:02:3a:e1:80:ef:
         ee:45:eb:68:f6:bd:0a:da:35:f9:c6:6a:35:a3:13:94:d4:78:
         b4:2e:dc:de:4c:85:13:e3:6a:53:9f:b3:e1:11:a6:7f:e7:11:
         02:3b:63:7e:73:b0:9e:4e:ff:1d:e3:bd:58:dc:21:5e:d1:57:
         24:e2:2e:81:2d:57:fc:b3:6a:4a:83:74:9e:a2:93:4e:b9:9e:
         16:02:7a:fd:a1:9c:cc:43:82:e5:92:44:5b:99:2e:9a:73:fd:
         c1:37:f2:80:dd:0c:de:3a:39:75:b5:00:cd:2c:4b:ac:62:36:
         b6:a6:78:19:b7:f6:f5:08:83:05:ca:a7:71:c7:2c:87:36:16:
         e3:15:21:05:53:0a:d5:bd:f7:35:e4:f3:dd:55:52:c7:0c:1d:
         93:2f:fa:ee:99:65:13:e6:77:f2:7a:4c:9f:27:56:f8:d4:f3:
         76:66:ef:7f:0f:c9:ad:b4:fc:57:c1:5c:6c:68:1e:67:fe:67:
         d0:83:8e:e5:e9:45:6d:55:b3:7b:bd:72:a4:7f:e6:7b:97:0e:
         f1:6b:a6:b6:08:50:90:55:5f:35:39:4e:57:14:2f:ef:bd:3a:
         3a:5d:ac:20:eb:fe:09:ab:62:c3:a7:ae:6c:3a:e4:4d:da:77:
         48:44:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:00:18 2026 by rpki-client