This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39312e302f32342d3234203d3e2033333536.roa
File:                     3230312e3233342e39312e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          bKwM2F5xi9R4huGBBHTZ+kI64FXrR94jWlXtqGUKJjI=
Subject key identifier:   3C:2A:35:95:14:0C:84:69:D0:36:14:96:4E:82:61:AA:1C:E6:8D:DD
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       02E55400B7F531BE7C08CF0101DC46567FBFBF41
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39312e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 06 Jan 2026 19:35:06 +0000
ROA not before:           Tue 06 Jan 2026 19:30:06 +0000
ROA not after:            Tue 05 Jan 2027 19:35:06 +0000
asID:                     3356
IP address blocks:        201.234.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e5:54:00:b7:f5:31:be:7c:08:cf:01:01:dc:46:56:7f:bf:bf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:06 2026 GMT
            Not After : Jan  5 19:35:06 2027 GMT
        Subject: CN=3C2A3595140C8469D03614964E8261AA1CE68DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:58:78:52:ea:09:16:ce:53:cb:25:ba:25:
                    6f:d4:02:30:8d:39:95:af:a9:48:cc:e6:1c:20:8e:
                    08:44:f1:9c:5c:94:b1:05:e7:e3:82:6a:b6:9e:63:
                    03:b6:63:36:9e:d9:a6:34:56:d2:76:21:ec:c1:fc:
                    2c:71:4c:fc:90:33:8f:99:7f:c7:98:27:ce:a6:d3:
                    a7:9d:af:c0:fb:49:58:55:89:f5:ba:36:82:09:1c:
                    51:68:0c:20:7f:c1:a1:31:c5:5f:c9:4e:7a:a2:b6:
                    0f:6a:50:a0:7a:91:1c:95:6e:e3:b1:96:66:51:d1:
                    e7:25:6d:cb:8a:26:c8:1f:30:3d:5d:59:b5:e6:ab:
                    61:7f:e6:f0:8f:76:37:71:bb:ee:15:99:90:d8:cb:
                    11:f8:2d:b2:af:a4:0c:12:22:f4:f7:d2:8a:63:18:
                    8f:e8:1b:44:ec:6e:b3:45:d6:cf:3f:ed:3f:a3:cd:
                    72:8c:27:5c:07:e3:34:d5:34:ee:7d:90:54:93:62:
                    3d:49:f2:00:2e:d7:d4:a0:32:7e:49:ce:b3:aa:00:
                    5a:4b:07:c5:43:bc:b8:17:2f:dc:f6:f4:42:56:99:
                    b9:97:ef:bc:df:a3:8e:cf:ce:36:b8:83:52:e6:a9:
                    f3:74:1a:f3:e9:ed:3c:bd:c9:0b:24:6a:15:f4:c3:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:35:95:14:0C:84:69:D0:36:14:96:4E:82:61:AA:1C:E6:8D:DD
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39312e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:5a:be:25:f0:97:46:d8:f7:71:42:79:41:1e:0c:8b:09:
         ec:21:9e:a0:5b:3c:97:3a:9d:ba:d1:cd:d9:b7:d5:37:99:de:
         91:e4:49:8d:d6:52:3e:17:f6:8d:f9:f3:93:80:2f:9a:1d:e5:
         63:8f:b0:3e:43:be:c5:fa:00:7f:0f:05:1d:49:73:02:52:2b:
         b6:33:40:0e:8e:9c:62:6c:57:15:fb:71:6d:e0:f2:f1:19:6e:
         0a:e4:4c:ec:07:49:6d:b3:ed:1a:1b:ee:2e:c6:50:eb:2b:41:
         12:8f:16:9e:17:7c:4b:3f:bb:db:fa:8e:40:eb:9d:90:31:e2:
         81:25:87:f2:56:fa:f0:14:46:bd:bc:5a:4c:18:78:f1:46:6f:
         8e:a2:0f:88:c2:6a:7f:f4:f3:ac:e2:22:ae:b6:50:8f:bd:d9:
         7d:9f:52:12:1a:18:30:d9:fa:9c:bb:56:5b:7f:23:ab:39:dd:
         bf:e4:78:55:26:b8:c5:48:ad:63:ed:de:bf:41:e6:97:2d:bf:
         2a:fe:4b:fe:2a:ca:0f:d8:4a:15:b7:7d:e0:50:9e:2b:23:0c:
         83:7e:cb:1d:39:43:26:b3:c8:68:03:4c:87:54:70:de:c3:bb:
         c8:18:75:be:56:d9:a8:48:88:98:a1:dd:68:b8:ac:6d:d5:c5:
         7f:a1:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:07 2026 by rpki-client