This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138302e302f32342d3234203d3e203237373733.roa
File:                     3230302e31332e3138302e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          fF8fVRmx+NBusLuXx6k5FbpNz6AVJZNJf0U+mwXhw2A=
Subject key identifier:   E8:03:44:9D:47:94:9C:66:53:96:E4:73:14:96:BA:01:9B:65:B5:F6
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       7359A0ACDC7BCBC83D48AAE1457CD20F1D82A210
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138302e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:09 +0000
ROA not before:           Tue 06 Jan 2026 20:48:09 +0000
ROA not after:            Tue 05 Jan 2027 20:53:09 +0000
asID:                     27773
IP address blocks:        200.13.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:59:a0:ac:dc:7b:cb:c8:3d:48:aa:e1:45:7c:d2:0f:1d:82:a2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:09 2026 GMT
            Not After : Jan  5 20:53:09 2027 GMT
        Subject: CN=E803449D47949C665396E4731496BA019B65B5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:9c:48:30:45:1d:71:2b:d2:d3:8e:4c:ab:
                    ea:f6:b5:35:cf:cd:4e:a4:c1:da:8b:72:54:57:f7:
                    91:cc:c2:5f:c6:65:01:62:cc:a6:df:d2:4b:e6:39:
                    78:07:78:25:b1:16:c2:56:04:41:e3:58:f0:53:28:
                    b0:d0:36:c3:5d:40:ed:1b:ca:98:8e:0e:bd:50:9a:
                    ef:9e:ef:bb:f9:be:3c:f0:fc:7b:25:de:b5:01:30:
                    ed:05:cb:0c:0c:88:56:60:55:3d:da:fd:a8:a3:33:
                    bf:f5:d9:d9:56:01:ae:6e:5f:90:bf:f1:8a:29:f4:
                    5f:86:51:4c:18:dc:57:ea:91:1a:99:ad:ed:b8:97:
                    3a:e0:92:f7:a0:32:99:01:ef:a8:42:de:b4:0e:9e:
                    72:01:63:f9:17:65:ed:76:43:b2:29:e3:ee:f3:d3:
                    ff:f9:bd:c2:09:34:35:c3:15:67:57:57:a2:d2:fb:
                    89:a8:75:f5:3c:38:4c:e9:0e:b1:7d:85:77:79:31:
                    34:16:e8:d1:51:4a:8e:aa:f0:3e:1d:14:80:2f:44:
                    c9:18:ff:e9:e3:e1:0a:81:cb:b3:6e:1a:a2:2b:f7:
                    ab:a9:34:d8:57:7c:0a:7a:c5:fb:59:1d:55:00:fe:
                    ae:da:41:0e:d9:86:29:6b:2b:c6:eb:41:8a:b2:b7:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:44:9D:47:94:9C:66:53:96:E4:73:14:96:BA:01:9B:65:B5:F6
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138302e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:ee:83:fd:99:a3:aa:c7:f3:eb:8e:04:b3:f3:c6:cd:61:
         fe:94:55:bc:c0:2e:ee:d8:dc:95:ba:e8:7f:ed:f1:ba:8a:b7:
         f9:c4:6b:55:3f:e1:bf:58:1b:63:a6:b2:e5:8f:05:8a:d3:69:
         28:6f:dd:e6:29:e6:47:a9:83:91:73:fb:aa:df:59:f4:26:59:
         e3:4b:c8:e8:06:60:4a:4e:16:2d:2b:cd:b7:e5:a3:4e:bb:71:
         b9:1f:19:b8:e5:7c:15:19:ed:be:82:79:ca:65:07:39:a8:d5:
         2d:13:d2:13:9a:84:83:a0:e3:32:1a:aa:f0:cc:fc:52:e4:12:
         58:83:13:60:a0:5b:87:23:07:a1:6b:dd:02:61:e8:45:86:44:
         6d:e6:e6:6d:18:c6:14:97:d2:c6:b7:ff:9f:be:39:20:1f:c1:
         ab:6f:86:56:1f:1f:7f:9e:7a:8f:cf:c2:3c:72:f1:0e:df:a3:
         2b:99:76:f6:93:73:7c:57:f1:4f:4b:09:7b:2e:56:1d:b6:c2:
         a5:ae:04:2c:02:f2:2b:c6:4a:e6:8a:cf:2e:dd:42:60:51:de:
         fe:23:8b:b1:67:ed:19:3d:2f:36:b5:bf:dd:2b:40:a4:82:99:
         23:f2:50:8d:c0:31:c4:25:14:5c:e5:9c:aa:bc:17:2d:0f:a0:
         37:6c:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:57:54 2026 by rpki-client