This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203236353631.roa
File:                     3230302e31332e3139332e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          HcRjm1Yji6F8fA+MkAW1ZDEa4Zoh0l9qULL3u2adVRI=
Subject key identifier:   8C:FC:47:45:26:CD:15:08:AA:63:F2:55:26:8B:5F:F9:EA:65:7D:9A
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       1B80871B9DAA89712D88590F83B2BE9A5B4BB297
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203236353631.roa
Signing time:             Tue 23 Dec 2025 11:00:00 +0000
ROA not before:           Tue 23 Dec 2025 10:55:00 +0000
ROA not after:            Tue 22 Dec 2026 11:00:00 +0000
asID:                     26561
IP address blocks:        200.13.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:80:87:1b:9d:aa:89:71:2d:88:59:0f:83:b2:be:9a:5b:4b:b2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Dec 23 10:55:00 2025 GMT
            Not After : Dec 22 11:00:00 2026 GMT
        Subject: CN=8CFC474526CD1508AA63F255268B5FF9EA657D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:2e:e4:70:ce:a6:72:18:1a:b0:ae:0f:92:
                    03:67:b3:b3:a5:16:f0:2c:0a:a9:d4:b2:3e:10:82:
                    c6:24:3c:45:40:f0:5d:26:4d:94:d9:46:cd:01:ff:
                    5f:db:24:27:48:c9:17:62:b9:f5:0d:f7:bd:5f:d3:
                    db:27:ca:ab:2d:d5:69:c6:92:81:16:07:bf:7d:63:
                    0e:18:80:b1:07:15:7c:e8:7a:0f:7f:87:91:5e:00:
                    75:af:7c:3c:09:9b:1d:93:4b:35:7d:d6:17:24:3b:
                    9a:97:53:33:ee:4d:f0:73:fc:d7:4f:07:52:69:76:
                    b4:9c:9d:20:5d:55:ab:cd:db:aa:26:1e:7c:17:63:
                    78:9b:a3:c4:19:74:0d:e1:a4:7b:8d:ef:7b:07:c9:
                    fa:b3:8c:65:37:0e:3f:98:0c:1c:89:b9:5c:b6:41:
                    64:19:c4:34:c2:24:ce:7f:3b:c7:17:78:6a:a1:dd:
                    12:d1:32:ad:aa:22:90:35:9c:23:32:85:34:89:88:
                    ed:b8:ac:a9:ee:08:aa:83:f6:73:2c:a5:39:1c:19:
                    26:47:19:af:8f:74:38:b3:ae:31:1e:3f:e4:4b:f0:
                    bf:59:19:ff:17:33:fb:36:e7:70:79:58:1e:3d:eb:
                    0f:5a:bc:41:48:d4:d9:bb:ad:98:96:0d:36:13:f3:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:47:45:26:CD:15:08:AA:63:F2:55:26:8B:5F:F9:EA:65:7D:9A
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139332e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:71:12:bb:59:13:63:38:92:1c:72:a4:f4:1a:7d:4c:fd:a1:
         5a:61:a1:92:ef:df:45:d3:00:47:ce:e7:b1:4a:05:f2:ac:00:
         ae:11:01:e8:42:7a:ac:c6:23:a5:27:af:80:12:3f:34:1a:d7:
         66:c2:11:86:f4:43:b8:13:13:12:29:eb:88:a4:0b:eb:12:c5:
         5f:62:d9:b5:4d:6a:84:60:cc:1a:8a:aa:3e:86:32:a5:d9:8d:
         0e:c6:d9:6c:97:02:01:4e:84:47:ac:e6:07:6d:79:a3:91:31:
         01:d6:a7:2a:38:40:62:54:a7:3f:9f:4d:0a:04:a2:68:a0:25:
         b9:39:af:e7:d8:fd:5d:54:b7:90:47:de:e1:bf:51:3d:34:1a:
         48:45:7c:40:3a:ed:6c:a8:86:b9:f9:6e:eb:17:79:0f:94:3b:
         ef:e2:75:17:0f:9c:62:39:83:8a:11:0e:3e:24:51:51:a8:1e:
         60:4f:42:bc:5c:96:59:d6:89:90:fe:ad:85:a4:23:22:d9:2d:
         d6:33:e4:80:f3:07:cf:ec:e1:aa:f3:df:7f:20:54:ec:d5:96:
         b7:c1:d7:11:ac:db:4f:fa:27:6a:d5:7a:cb:4c:4d:40:4d:a6:
         38:88:bd:cf:6b:8a:35:c0:0b:8d:9c:69:0e:72:c1:04:18:cf:
         48:99:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 05:23:34 2025 by rpki-client