This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3230302e31312e3131322e302f32312d3234203d3e203133333136.roa
File:                     3230302e31312e3131322e302f32312d3234203d3e203133333136.roa (raw, json)
Hash identifier:          yhAfwlQCJvZzUobTqqfNHaChl7kmI5hVlEH2CqyC6dM=
Subject key identifier:   7C:93:B9:A2:85:D3:1D:74:CD:E3:5F:FB:FB:98:50:A8:25:7A:7A:6B
Certificate issuer:       /CN=AD10C8E46313770F3E82B1B8566F3987574A70EB
Certificate serial:       73F2B6DD88B9B3F39534708138EC9BE6194CBE35
Authority key identifier: AD:10:C8:E4:63:13:77:0F:3E:82:B1:B8:56:6F:39:87:57:4A:70:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3230302e31312e3131322e302f32312d3234203d3e203133333136.roa
Signing time:             Tue 06 Jan 2026 19:20:51 +0000
ROA not before:           Tue 06 Jan 2026 19:15:51 +0000
ROA not after:            Tue 05 Jan 2027 19:20:51 +0000
asID:                     13316
IP address blocks:        200.11.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:b6:dd:88:b9:b3:f3:95:34:70:81:38:ec:9b:e6:19:4c:be:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD10C8E46313770F3E82B1B8566F3987574A70EB
        Validity
            Not Before: Jan  6 19:15:51 2026 GMT
            Not After : Jan  5 19:20:51 2027 GMT
        Subject: CN=7C93B9A285D31D74CDE35FFBFB9850A8257A7A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:c4:35:d0:14:04:aa:16:da:f9:0a:78:cf:
                    b8:8a:3b:6b:9e:72:4a:97:61:15:e5:51:ee:17:ce:
                    fd:8d:8e:2e:ee:b8:75:93:3a:8b:59:10:b8:b0:06:
                    96:39:bd:30:dc:ab:2d:d8:b2:7e:d8:06:f1:4e:8a:
                    d7:e8:65:c5:da:6c:cf:55:1f:92:a9:3d:1c:dd:a0:
                    7d:cb:e4:ce:8c:63:02:a1:17:0f:96:50:e1:e8:6f:
                    2c:8a:b9:bc:16:6a:14:85:66:bb:16:1a:36:2d:e1:
                    d4:03:07:b6:c9:fb:0c:88:d2:07:dd:02:a4:d6:16:
                    37:01:8f:b7:ac:4e:78:94:c8:22:9b:54:e0:2d:db:
                    38:d3:2e:68:2d:b4:92:06:98:a1:65:1a:21:80:cc:
                    03:12:35:92:93:7f:ef:51:73:9e:78:ae:54:f9:ad:
                    bd:62:65:a3:1c:ca:92:24:8e:fe:c0:c7:2b:3d:65:
                    a1:f4:b4:36:e5:3a:de:95:64:f8:01:79:20:b4:6f:
                    37:59:4f:27:24:88:7e:cb:e2:dc:11:b8:79:e7:ac:
                    6d:d6:15:96:50:10:a8:2e:cc:94:89:3e:f7:33:40:
                    de:b2:bc:6e:0f:84:3c:9e:4f:e6:d7:3c:b9:1d:04:
                    7f:a5:bd:26:a8:fd:ad:8d:aa:eb:2d:eb:c5:4f:8a:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:93:B9:A2:85:D3:1D:74:CD:E3:5F:FB:FB:98:50:A8:25:7A:7A:6B
            X509v3 Authority Key Identifier:
                keyid:AD:10:C8:E4:63:13:77:0F:3E:82:B1:B8:56:6F:39:87:57:4A:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD10C8E46313770F3E82B1B8566F3987574A70EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE3720460E32A51C1294566DF083B489B7DEBD338972CF3AC4A5561094E1A5A5/0/3230302e31312e3131322e302f32312d3234203d3e203133333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:49:02:41:3f:37:03:ee:a4:09:a3:bc:c7:26:7e:d6:34:
         62:63:21:40:41:a0:3b:a1:3c:14:38:4d:6b:dd:04:57:38:86:
         b6:5c:5b:fc:e5:5e:b0:c1:8d:c8:74:be:dc:d8:af:97:68:83:
         f4:cc:03:5f:37:ea:04:7d:8b:87:55:34:30:62:34:16:2d:dc:
         ae:3a:73:21:b0:d5:5b:7c:2e:58:78:83:1b:20:73:72:52:27:
         36:ec:c0:59:0b:c6:90:44:e9:81:06:25:b6:d4:b3:e4:57:5a:
         af:aa:ad:c1:cb:e1:52:26:96:11:f5:b9:ea:67:7c:69:80:bd:
         cb:e8:76:f3:20:99:02:0a:f2:cf:6d:9a:78:b2:4b:9f:aa:c8:
         d5:f9:f4:da:87:90:f3:ba:55:52:b2:ba:5e:75:5f:c4:4c:6b:
         9d:25:16:80:48:19:e3:30:1a:79:0f:e2:d7:21:50:a5:3a:fd:
         99:bf:db:51:96:ee:4c:4b:e6:e7:36:0c:5b:b4:d4:de:3a:52:
         b4:d0:f7:04:03:b3:a9:d6:73:73:b1:a2:8a:bd:17:ab:e2:bc:
         3f:78:58:70:8c:c8:79:60:6c:42:00:32:49:a7:23:ef:1e:1d:
         90:4c:cc:95:7e:10:db:24:a6:12:75:cc:26:e8:ac:3c:b6:2f:
         5e:2c:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:29:53 2026 by rpki-client