This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203236353631.roa
File:                     3230302e31332e3139352e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          7+ksWEetRIdpr+AnYVXNysk4ezcBNwuzeoFoy5Vbn78=
Subject key identifier:   EC:5B:0D:7D:01:63:39:81:EA:10:3F:5B:90:8D:77:2E:09:D2:29:8D
Certificate issuer:       /CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
Certificate serial:       3355C579CA1C4ECE33160DFFB5C8D37971F60928
Authority key identifier: 36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203236353631.roa
Signing time:             Tue 23 Dec 2025 11:00:00 +0000
ROA not before:           Tue 23 Dec 2025 10:55:00 +0000
ROA not after:            Tue 22 Dec 2026 11:00:00 +0000
asID:                     26561
IP address blocks:        200.13.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:55:c5:79:ca:1c:4e:ce:33:16:0d:ff:b5:c8:d3:79:71:f6:09:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5
        Validity
            Not Before: Dec 23 10:55:00 2025 GMT
            Not After : Dec 22 11:00:00 2026 GMT
        Subject: CN=EC5B0D7D01633981EA103F5B908D772E09D2298D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:9e:6d:c7:58:63:fd:46:45:65:00:74:fc:
                    22:63:51:64:f4:d8:2b:e2:f0:64:62:14:3f:c2:2b:
                    62:e4:ce:16:f9:21:f0:e7:cc:7a:63:63:bd:80:76:
                    cd:11:06:e0:cf:46:11:57:9c:07:cf:bd:16:75:94:
                    1e:50:6f:ed:e2:cc:6d:74:42:01:5f:0e:66:a6:32:
                    92:09:ef:31:d8:23:41:4f:b5:aa:3f:ce:c5:8c:9f:
                    a6:3e:92:b2:2c:88:97:84:87:c0:b8:7c:0e:83:da:
                    41:1d:2f:b0:28:15:4e:ee:7c:fd:bd:15:ec:4b:4c:
                    62:8d:3f:c7:4b:55:f9:4a:5d:52:e9:92:59:01:70:
                    2f:c2:c3:0b:fb:48:7a:0a:05:ab:7d:7a:77:03:47:
                    cc:63:5f:1e:29:94:60:fd:68:ba:17:ab:c6:2a:2e:
                    26:09:1e:60:66:3f:7b:5d:f6:4e:b4:01:5f:89:9d:
                    85:b0:58:d6:66:08:be:0c:67:5d:b3:9a:d6:30:fe:
                    7a:96:4c:6c:5e:5f:9a:0d:71:be:ba:03:f3:f7:0e:
                    e4:0c:d4:e7:d8:0d:80:06:bc:e6:81:cd:ed:ca:32:
                    7b:0f:65:df:a4:c5:c2:ff:1e:29:50:2d:8c:0a:97:
                    ff:04:d4:3b:93:a5:59:61:4b:60:a0:02:1d:de:6a:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:0D:7D:01:63:39:81:EA:10:3F:5B:90:8D:77:2E:09:D2:29:8D
            X509v3 Authority Key Identifier:
                keyid:36:E1:9E:2D:4E:E8:F3:EA:D0:C1:46:60:B2:A8:64:6A:C9:F2:0A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36E19E2D4EE8F3EAD0C14660B2A8646AC9F20AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF7BA75055F799758F3F4CE811BADBA2491BF1E32384FBB3AF8A39E7FB506C2B/0/3230302e31332e3139352e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:ee:f5:6e:bb:71:f4:c8:78:6d:49:dc:d0:58:1a:94:a2:
         7f:bb:a6:71:4f:b6:5d:8f:ed:ce:6b:31:49:cd:51:e8:df:0b:
         6d:0d:54:d4:fb:ac:b1:ba:97:08:4a:05:cc:18:a3:f9:df:d2:
         cd:c5:ec:0a:35:64:b7:9d:d4:24:d4:70:b7:22:42:de:7b:52:
         25:58:c2:f0:26:87:9c:8f:b7:3a:8e:6a:ee:b6:3d:f0:24:00:
         b8:3a:a4:f4:27:3f:88:a8:fc:f5:74:1b:2d:b7:eb:19:23:45:
         95:91:28:7f:e8:0a:45:20:ae:b4:eb:35:fe:39:bf:92:1b:d9:
         42:12:9b:80:92:ce:10:14:5a:13:9f:83:31:60:74:72:00:a9:
         11:f8:ba:c7:4e:7f:37:5d:28:bf:a8:53:a5:5e:19:24:db:db:
         91:46:f6:d0:4b:05:37:ce:82:cb:81:c9:20:24:67:21:6c:6c:
         b3:24:1f:66:e5:96:89:f7:0e:45:df:dd:a3:32:ab:99:43:ed:
         e1:70:f7:18:bf:4f:d6:f4:e6:eb:44:12:5c:c6:84:d4:0d:8e:
         e2:cd:e3:06:3e:cb:4a:b7:1d:0b:ea:48:68:bb:32:b4:b8:95:
         ef:e9:0d:4d:d5:6d:b2:9e:d7:df:82:9b:57:ba:53:a5:3d:0c:
         46:02:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 05:22:19 2025 by rpki-client