This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa
File:                     3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa (raw, json)
Hash identifier:          yIA7EkW6op/AKh/qkplcZWq7L18NnGmWaB6m/U8tUOw=
Subject key identifier:   AE:8C:70:CE:9F:E8:96:5B:B1:E2:B8:DC:F0:EB:0E:BB:D4:B0:8A:A2
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       55852DC59931551E8A20D3E3CB2DEE570328BCA1
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa
Signing time:             Tue 06 Jan 2026 19:35:23 +0000
ROA not before:           Tue 06 Jan 2026 19:30:23 +0000
ROA not after:            Tue 05 Jan 2027 19:35:23 +0000
asID:                     22698
IP address blocks:        201.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:85:2d:c5:99:31:55:1e:8a:20:d3:e3:cb:2d:ee:57:03:28:bc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:23 2026 GMT
            Not After : Jan  5 19:35:23 2027 GMT
        Subject: CN=AE8C70CE9FE8965BB1E2B8DCF0EB0EBBD4B08AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:55:30:c7:cb:ef:1a:ea:05:bf:ab:c2:6f:
                    10:a8:a4:ea:0d:d8:04:06:ef:0e:61:03:d0:cf:f6:
                    e5:18:3b:7e:72:ee:40:0c:b7:59:43:65:33:05:15:
                    01:2f:c6:84:10:8a:b8:81:22:a2:73:30:6f:fd:4f:
                    48:70:0d:b4:a3:43:ae:a2:23:bd:8c:cc:d8:5c:39:
                    18:fa:88:1c:9c:1d:de:4e:71:46:f3:ae:e5:55:8d:
                    4c:21:5a:e8:c3:f8:98:fe:90:32:43:90:70:f0:e7:
                    23:aa:8c:1d:32:5f:37:ca:c0:f4:f9:f7:1b:51:6e:
                    1f:96:9c:85:7d:9f:68:82:32:7d:c4:22:02:06:fa:
                    6b:d6:ad:89:3e:d1:23:f1:46:b4:8c:a1:e8:2a:ee:
                    9f:2a:af:59:c7:1c:3a:9e:42:61:70:03:28:85:83:
                    45:b4:1c:b8:3a:75:40:24:e6:88:cc:ed:c1:fa:d8:
                    6a:38:b0:50:90:8c:f9:29:af:a3:28:10:02:14:da:
                    9b:64:b7:1c:37:4b:a9:ba:85:a4:55:99:03:22:62:
                    16:80:ab:40:0e:f3:bc:c3:10:68:13:da:24:4f:35:
                    8c:00:89:9c:f9:3b:68:24:57:d4:22:3a:1c:ca:ef:
                    7b:77:de:5e:26:df:2d:dd:c0:ae:93:83:d4:16:31:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:70:CE:9F:E8:96:5B:B1:E2:B8:DC:F0:EB:0E:BB:D4:B0:8A:A2
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:55:6f:a9:b6:d0:7a:68:bb:90:f3:b1:fe:2e:03:67:82:ee:
         19:4d:c8:2b:d8:d4:51:b7:ec:d5:58:ea:e5:5a:73:b7:63:3a:
         21:ff:b3:a9:12:d2:ea:19:97:12:15:4c:37:a7:a3:a4:25:a3:
         6c:3a:f9:39:2c:27:1e:70:8a:48:14:be:89:0f:7b:cd:ee:11:
         50:cd:77:44:0a:c4:94:fb:48:f0:bc:55:62:f0:17:09:d2:3e:
         41:73:ad:61:1a:8c:3b:4a:3b:b1:ac:33:ab:eb:15:1c:cf:62:
         5f:6b:09:24:3b:6c:2d:9e:6f:e4:dd:66:60:36:69:96:f6:2e:
         43:26:c7:8d:a7:78:b5:1c:95:05:a6:13:0c:ed:52:9d:19:4f:
         e7:94:72:25:11:6d:b3:67:9e:e9:c7:91:ff:4c:53:db:a6:73:
         fc:91:6d:ba:37:9e:26:75:c8:85:70:1a:ef:58:25:5a:45:92:
         7b:5c:01:03:3a:e5:41:41:ee:64:a5:5b:89:64:a3:38:86:80:
         57:24:60:98:17:14:1a:c3:c5:9d:07:71:bf:f5:6f:ea:b7:f0:
         2d:71:e1:61:af:80:fb:b4:4e:33:b7:d8:8f:66:4e:65:2d:48:
         d7:f7:4a:27:cb:ae:e9:2a:5c:6b:ca:cd:fe:37:60:bf:17:fe:
         19:30:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:07 2026 by rpki-client