This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
File:                     3230302e31332e3138382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          tPPGuIIrVvoTTGRe3bQ/0gFB2KxvZOKndT04t0aEjJ8=
Subject key identifier:   1A:D3:78:55:08:6A:22:8D:65:E8:35:93:53:3D:64:EC:69:A9:D1:FD
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       049D099FD316BBF13116E988FF8E07F8A916CCFA
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 20:53:12 +0000
ROA not before:           Tue 06 Jan 2026 20:48:12 +0000
ROA not after:            Tue 05 Jan 2027 20:53:12 +0000
asID:                     23383
IP address blocks:        200.13.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9d:09:9f:d3:16:bb:f1:31:16:e9:88:ff:8e:07:f8:a9:16:cc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:12 2026 GMT
            Not After : Jan  5 20:53:12 2027 GMT
        Subject: CN=1AD37855086A228D65E83593533D64EC69A9D1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:f1:02:81:4e:a4:09:e2:15:3e:3a:89:15:
                    0b:f1:54:4d:ba:b5:46:65:de:75:4a:3b:e0:ec:ff:
                    4a:34:db:e6:a7:42:59:08:71:f3:45:b0:7a:47:04:
                    cd:f8:86:c0:6c:04:78:e8:7c:59:bc:b2:67:24:cb:
                    f7:d3:42:36:1b:03:df:02:e2:f7:ea:96:f6:85:76:
                    84:0e:da:8c:57:fd:64:67:d0:34:59:ee:cc:e2:7a:
                    f2:ea:f8:10:b4:42:ae:f6:20:1b:80:bc:23:1a:17:
                    ae:0a:9d:90:6f:45:59:5d:38:bc:b9:17:94:de:33:
                    4b:86:a3:93:6c:20:b7:f4:b0:4f:b4:51:a2:a9:e1:
                    6f:1d:bd:73:50:36:ec:be:cf:31:52:31:f2:54:e2:
                    f8:57:c8:06:29:33:6a:3c:26:1e:93:cd:3e:9c:ff:
                    bc:68:4c:d1:55:5e:ae:1b:b5:18:f2:51:11:a6:57:
                    eb:ff:b3:30:3e:74:c1:95:c0:a6:a3:4c:50:91:c1:
                    d7:b8:7f:7c:54:bb:bf:fc:3f:64:ae:46:85:f3:1c:
                    65:c8:c0:cb:82:5a:b7:06:25:c9:9b:66:38:1a:b5:
                    de:6f:a8:d0:e5:7a:be:f2:61:54:b6:c7:01:02:29:
                    9b:08:3a:39:2c:76:18:67:21:20:aa:32:cb:3b:25:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:78:55:08:6A:22:8D:65:E8:35:93:53:3D:64:EC:69:A9:D1:FD
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e6:39:b3:6e:b4:31:6d:fc:af:27:c5:93:48:08:f7:84:a3:
         dc:f3:d1:e0:9a:cf:fd:4a:7d:30:82:54:d1:52:9c:56:7f:48:
         9c:21:af:0e:84:06:76:3c:64:e1:8e:e5:b9:c2:85:1c:71:ea:
         2e:e4:dc:14:63:0b:20:56:28:64:10:b8:19:2d:6a:a1:7c:49:
         a9:e1:db:d3:dd:62:68:0b:53:51:2a:e4:74:39:10:d0:ac:94:
         7b:07:e9:59:5e:2f:e4:b0:6f:65:0f:f5:20:db:cc:21:47:f7:
         8e:b9:7c:4d:43:38:2a:28:41:16:12:5f:d8:f2:9e:76:57:cd:
         16:2d:de:fd:90:44:9f:c3:15:09:d5:35:5b:1b:5f:d6:b8:e2:
         ed:13:77:25:ea:7b:74:26:06:c2:dd:f9:3d:f1:2c:df:83:b7:
         41:a6:c1:92:c9:3b:14:eb:61:8c:9f:01:29:31:fd:f7:55:b5:
         f4:04:ae:8b:f8:ee:0f:b9:d2:c3:61:86:5e:03:7a:81:34:56:
         d0:de:57:aa:a8:c1:7c:e6:4b:ee:34:01:af:48:8b:a6:1d:03:
         b3:6e:63:87:3a:77:e4:dd:4e:c8:e7:2d:f3:1c:0b:77:c9:fb:
         01:0b:61:13:df:1f:ca:7b:c6:d9:92:9a:2c:79:69:da:70:ee:
         29:0e:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:53:09 2026 by rpki-client