This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa
File:                     3230302e31332e34322e302f32332d3234203d3e203130343831.roa (raw, json)
Hash identifier:          P72me0burpM2XN9ZOiVfGpTR/LrEBsVI5/K9WZsCr90=
Subject key identifier:   6E:0F:4A:07:52:76:0A:98:40:70:9A:57:21:A6:0F:43:ED:42:38:21
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       33C55DAE45436122C4C20304F4AC14AB93A3497D
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa
Signing time:             Tue 06 Jan 2026 19:31:07 +0000
ROA not before:           Tue 06 Jan 2026 19:26:07 +0000
ROA not after:            Tue 05 Jan 2027 19:31:07 +0000
asID:                     10481
IP address blocks:        200.13.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c5:5d:ae:45:43:61:22:c4:c2:03:04:f4:ac:14:ab:93:a3:49:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Jan  6 19:26:07 2026 GMT
            Not After : Jan  5 19:31:07 2027 GMT
        Subject: CN=6E0F4A0752760A9840709A5721A60F43ED423821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:a5:e3:af:75:3c:81:d2:d4:d0:b4:cc:e3:
                    be:81:bb:5c:f8:3c:56:46:17:53:4b:fe:37:53:95:
                    2a:33:08:3a:97:23:01:2d:37:69:54:e9:8d:fe:74:
                    97:eb:3b:72:31:a9:4d:0f:55:68:ec:2d:40:40:4a:
                    a5:34:98:40:f6:79:d4:cd:14:d6:1b:cc:6b:4a:95:
                    2e:1c:63:75:bb:29:9a:4c:a0:43:78:f6:1c:ef:f5:
                    85:3b:f4:ba:95:c7:16:a2:e3:46:de:6f:57:43:f1:
                    f4:47:6a:01:86:e7:d2:68:77:d0:8d:ee:91:41:ea:
                    8b:84:eb:d3:80:91:5d:56:65:2d:60:16:86:ac:1d:
                    95:b7:85:99:0b:09:94:5e:2f:67:18:e5:fc:3d:f1:
                    08:ad:cb:e6:00:ac:27:21:0e:57:77:e3:00:64:cf:
                    d6:b6:b3:e5:3d:bf:50:7d:92:33:df:bd:06:24:9b:
                    c7:4f:c2:8e:0c:a1:39:19:eb:4b:4d:09:b8:16:72:
                    b2:75:4e:13:d9:64:26:c1:a0:62:b3:81:34:0a:b2:
                    ab:f7:05:28:7b:1b:e7:f8:6d:a9:1e:d1:5f:3e:77:
                    e8:b3:c2:bb:ae:3a:e1:8c:d6:75:51:02:11:7a:eb:
                    2a:55:1d:40:4c:0f:e5:41:ab:e0:97:04:df:53:35:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:4A:07:52:76:0A:98:40:70:9A:57:21:A6:0F:43:ED:42:38:21
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e31332e34322e302f32332d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:37:ff:9e:e1:3b:85:38:fd:1d:4e:4d:4c:69:08:17:1d:2d:
         b5:81:13:96:fe:e1:77:4d:0b:ee:b6:4e:ba:b1:30:58:1f:67:
         c7:29:33:37:38:0f:20:ae:8c:1c:94:88:61:d2:12:7f:d5:5d:
         06:6c:72:a6:01:5d:40:70:c1:e7:cb:ae:e3:99:5f:b2:8c:d4:
         f9:78:23:31:e2:b4:fa:83:f3:4e:5a:06:aa:22:07:b9:df:72:
         45:8a:db:76:6f:b3:73:11:e9:67:8a:12:5a:42:7e:00:9b:8c:
         30:a3:b7:24:ec:33:b1:8f:4e:41:0d:d3:b6:60:ea:72:4a:b8:
         36:22:36:e1:8e:b0:05:a1:31:28:59:ca:c4:e0:49:a9:13:a0:
         fc:48:c9:6d:7f:f1:1e:0f:5f:ac:36:e9:c6:cc:9b:03:41:8c:
         37:50:b3:fa:2a:c5:e1:55:e2:a6:2b:0b:c5:01:ee:29:ae:5a:
         c5:ff:51:71:9b:bc:13:09:a2:e7:52:11:e2:58:51:71:3f:16:
         28:7e:65:63:34:59:ce:10:34:f4:75:00:a3:9a:c3:63:77:68:
         0d:80:03:53:d6:5d:e1:ce:69:39:8e:1e:cb:54:6b:d7:02:8b:
         71:ff:88:ab:1d:4c:9d:f0:d2:ae:96:0b:db:22:6d:a0:7c:46:
         15:85:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:54 2026 by rpki-client