This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa
File:                     3230302e31332e34342e302f32322d3234203d3e203532323936.roa (raw, json)
Hash identifier:          znC2xeSG8iShnsqL4c8CDENOGQhmb5H1I1ag2vLiWow=
Subject key identifier:   B5:18:E0:2E:54:65:CB:8F:2F:E9:F7:9B:E6:02:0C:E4:D3:50:48:C6
Certificate issuer:       /CN=7D5AB6A5FFF2037A75F7B80ACAB831F23545E080
Certificate serial:       704A57544DF53005F3C222B777113C232DDC3FD7
Authority key identifier: 7D:5A:B6:A5:FF:F2:03:7A:75:F7:B8:0A:CA:B8:31:F2:35:45:E0:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa
Signing time:             Tue 06 Jan 2026 19:17:08 +0000
ROA not before:           Tue 06 Jan 2026 19:12:08 +0000
ROA not after:            Tue 05 Jan 2027 19:17:08 +0000
asID:                     52296
IP address blocks:        200.13.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:57:54:4d:f5:30:05:f3:c2:22:b7:77:11:3c:23:2d:dc:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AB6A5FFF2037A75F7B80ACAB831F23545E080
        Validity
            Not Before: Jan  6 19:12:08 2026 GMT
            Not After : Jan  5 19:17:08 2027 GMT
        Subject: CN=B518E02E5465CB8F2FE9F79BE6020CE4D35048C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:af:ee:77:ef:93:9f:c3:7c:b1:40:b2:c5:
                    a6:b8:2c:91:da:79:4f:94:d8:ac:07:d0:17:55:fa:
                    61:be:4b:c1:a8:5b:ce:58:41:af:0f:7f:b7:ff:7c:
                    1c:7d:01:b5:1f:58:12:c3:59:2c:cf:a6:9c:0c:3f:
                    bb:a8:38:4b:24:04:6a:da:7b:d3:9a:87:53:a4:fc:
                    90:4a:da:f6:c7:82:79:ac:0b:22:f5:69:a8:99:a2:
                    2b:2c:7c:95:c3:11:ce:ea:da:c0:2d:23:d1:1f:d9:
                    c6:4d:f0:06:02:25:7d:75:6a:58:3a:d9:de:1e:2f:
                    63:79:51:7a:76:c4:d6:4b:ae:96:00:c7:45:51:66:
                    06:6f:92:7a:bb:6c:a8:18:b7:50:fc:fd:38:98:f2:
                    16:76:c9:03:34:ae:eb:74:9e:50:d1:60:77:8f:5d:
                    d0:72:15:a0:ae:6c:a5:86:bf:3e:49:d8:dd:c4:8f:
                    22:ee:81:bb:bc:66:2c:c0:0f:82:fd:d8:82:11:69:
                    d1:5d:51:bf:6f:69:7c:63:09:c3:57:af:6b:2f:e6:
                    4b:16:35:94:73:e7:07:cf:9f:52:5f:68:bc:41:60:
                    1a:bf:1d:b4:43:d3:39:2b:3a:9d:16:48:f2:e1:94:
                    c6:73:df:16:76:6e:5b:69:b8:cd:91:7e:89:88:c9:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:18:E0:2E:54:65:CB:8F:2F:E9:F7:9B:E6:02:0C:E4:D3:50:48:C6
            X509v3 Authority Key Identifier:
                keyid:7D:5A:B6:A5:FF:F2:03:7A:75:F7:B8:0A:CA:B8:31:F2:35:45:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D5AB6A5FFF2037A75F7B80ACAB831F23545E080.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F73556C0C4C1B21D76A8192F97061708A4E2BEF3BE1AC4C3B7AF579444E3D384/0/3230302e31332e34342e302f32322d3234203d3e203532323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:69:ea:70:66:3b:22:22:be:7f:ad:f2:78:44:91:48:94:ee:
         11:f3:40:99:72:85:1c:7a:63:30:d6:ca:19:03:66:65:32:fe:
         b0:f5:f8:30:92:96:82:28:ce:a3:3e:fc:67:e5:7d:b3:3a:2a:
         be:e9:8b:1c:28:df:ed:bf:01:4e:ab:9b:9e:48:04:a6:62:d2:
         bb:d9:86:75:94:30:76:e2:09:ac:df:3e:35:02:27:52:b7:00:
         41:65:c1:74:50:d8:44:3c:d7:8a:11:32:0b:ee:e9:fa:e1:05:
         ba:88:7d:52:6d:f0:81:c5:05:74:d4:87:1a:3e:2b:ab:0f:4d:
         af:1e:b9:83:f5:ab:7a:4a:bd:56:c3:e4:4e:d6:71:87:60:2b:
         53:0d:6c:49:a4:d4:3b:19:ab:bf:2d:df:ad:44:d5:dc:71:f2:
         51:24:b6:f7:ec:b1:bd:75:e0:f1:a5:d3:d3:90:ff:19:c9:aa:
         a1:cf:1c:60:22:ee:30:19:0b:cc:e9:d0:1f:47:af:35:6c:94:
         c0:31:ee:c0:5b:01:d6:9e:52:96:d3:00:69:3b:b9:da:7f:74:
         ed:e9:bf:d4:fc:a6:6f:20:05:cb:03:ed:9c:b7:56:03:f9:50:
         97:e6:f7:24:8a:6a:78:7f:59:04:6c:f8:dc:44:35:33:b1:bb:
         a4:f9:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:04:01 2026 by rpki-client