This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa
File:                     3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa (raw, json)
Hash identifier:          0MAQUcpVHCxi3LzN+Wiul8Mo3YmfXj2Qe+elZAMNiUg=
Subject key identifier:   9E:78:6B:BB:63:9A:87:71:EF:68:9B:F4:C2:1B:4F:C6:07:AE:F4:48
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       53DB4A7BB0B17DCBE70D3E6951F434B5125869A4
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa
Signing time:             Tue 06 Jan 2026 19:39:01 +0000
ROA not before:           Tue 06 Jan 2026 19:34:01 +0000
ROA not after:            Tue 05 Jan 2027 19:39:01 +0000
asID:                     264713
IP address blocks:        200.13.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:db:4a:7b:b0:b1:7d:cb:e7:0d:3e:69:51:f4:34:b5:12:58:69:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Jan  6 19:34:01 2026 GMT
            Not After : Jan  5 19:39:01 2027 GMT
        Subject: CN=9E786BBB639A8771EF689BF4C21B4FC607AEF448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:26:ca:2e:19:88:f6:29:63:6f:41:cf:24:
                    6d:82:b4:64:86:98:4f:a1:99:3f:ba:ef:e0:29:08:
                    3d:7d:2c:b7:5a:ff:50:17:cd:e8:33:13:7e:c1:42:
                    1f:00:bb:a4:eb:69:41:73:29:3c:9d:98:3e:5d:ee:
                    db:d3:19:9c:67:cc:bd:8d:3a:0a:8e:98:4d:aa:ff:
                    b3:7a:28:6e:92:1c:6b:30:9e:36:47:27:d7:57:bd:
                    e3:9d:7d:db:68:19:0e:5a:3a:66:d3:8f:30:f9:ef:
                    7f:a0:4c:44:44:ba:77:1b:4b:26:90:12:09:73:92:
                    54:89:bf:9d:43:12:a6:5d:64:0c:1c:63:a2:ac:ee:
                    60:f5:ee:d4:ef:e5:e2:73:d9:04:cb:10:25:4d:79:
                    21:be:33:e7:3a:7b:39:92:cb:0b:62:95:81:c4:15:
                    8f:1d:42:f8:db:51:de:dc:29:69:0f:be:2e:6c:52:
                    f7:69:f7:77:dd:1c:9e:3a:13:87:95:7b:99:d5:1f:
                    fb:3b:6d:af:f9:47:7a:4d:2b:a1:3a:d5:fd:4e:3c:
                    3c:3e:3e:3f:c1:ff:73:87:b7:66:ea:c9:31:9f:23:
                    e8:ef:8b:10:6d:c5:2f:fe:51:d1:6b:0f:3a:fe:ad:
                    b5:8c:cb:d3:b0:9e:a4:76:22:d0:10:34:d8:10:a0:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:78:6B:BB:63:9A:87:71:EF:68:9B:F4:C2:1B:4F:C6:07:AE:F4:48
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e31332e3134342e302f32312d3231203d3e20323634373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:98:c0:56:1b:26:06:04:dd:7c:89:1b:39:e3:68:05:50:
         eb:e5:84:df:bc:e9:a8:8b:0b:7c:30:ac:c3:33:73:24:da:d9:
         69:9a:74:65:98:8e:e8:83:99:30:bc:79:84:ff:d0:1a:4b:60:
         d2:b8:cb:8f:b4:52:64:f9:b0:89:ae:4a:b4:54:2f:68:cb:fc:
         0e:c5:d7:d7:7f:8e:a8:cd:f6:7a:1a:26:16:6f:ec:ef:7b:3b:
         4f:c6:b2:c1:5e:e1:db:02:f1:a9:55:97:2e:ce:14:fb:18:b5:
         58:41:55:22:98:b9:cb:a2:fc:03:26:e9:14:1d:3e:a1:12:43:
         c2:03:26:bd:45:b5:44:b2:5a:23:f2:e5:26:a7:fe:83:a8:4b:
         1d:c4:21:37:d8:73:a5:3c:dc:ac:85:82:4d:1d:fe:48:fe:c7:
         08:20:63:6b:57:ba:b4:ed:7b:b1:8c:2b:10:d7:24:a7:6d:67:
         3e:e6:32:75:f2:29:09:57:21:c7:92:1b:0f:00:b5:5d:ed:4c:
         6f:be:9b:c2:55:c2:14:a9:93:20:20:b2:d3:08:af:96:24:48:
         dd:36:53:1a:58:45:2a:59:8c:76:f0:0f:c3:60:b7:f1:f8:38:
         90:7a:66:bc:dd:e5:49:f9:08:28:a3:85:99:94:5c:79:39:9a:
         56:2b:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:00:27 2026 by rpki-client