This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/3230312e3232302e31362e302f32312d3234203d3e203532343133.roa
File:                     3230312e3232302e31362e302f32312d3234203d3e203532343133.roa (raw, json)
Hash identifier:          rcqFNtHnit+/FUNovrNYOJ8Qm8HkZrZjJf/8o1gStDU=
Subject key identifier:   5C:92:A7:21:72:4D:CD:8A:98:70:30:AE:CD:AC:6E:7C:79:7A:E0:FA
Certificate issuer:       /CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
Certificate serial:       480A941D01E7B70CA93E25BD9043370DD5F025C6
Authority key identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/3230312e3232302e31362e302f32312d3234203d3e203532343133.roa
Signing time:             Tue 06 Jan 2026 19:10:21 +0000
ROA not before:           Tue 06 Jan 2026 19:05:21 +0000
ROA not after:            Tue 05 Jan 2027 19:10:21 +0000
asID:                     52413
IP address blocks:        201.220.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 18:52:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0a:94:1d:01:e7:b7:0c:a9:3e:25:bd:90:43:37:0d:d5:f0:25:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
        Validity
            Not Before: Jan  6 19:05:21 2026 GMT
            Not After : Jan  5 19:10:21 2027 GMT
        Subject: CN=5C92A721724DCD8A987030AECDAC6E7C797AE0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:57:7f:14:c9:24:f3:0e:80:e2:7f:71:93:
                    0d:ff:2a:97:29:7c:12:42:1e:55:fd:5e:dc:e2:6f:
                    65:9a:99:fd:e8:f3:38:08:99:46:5d:bd:05:e3:b1:
                    d4:5a:6b:2a:cb:9c:36:e7:8a:dc:f8:56:1d:f3:29:
                    24:80:40:5a:3d:c9:b3:ce:2e:0c:f2:90:08:60:be:
                    72:6e:46:e8:7e:e9:56:22:6b:22:f5:bf:dd:6e:3b:
                    7b:ac:d5:c8:07:ea:c2:99:7b:e6:de:37:46:9f:d0:
                    88:c0:d7:8e:9f:12:20:9b:ed:2d:79:10:04:dd:a7:
                    24:df:d5:07:83:c5:f5:66:87:56:a6:e9:e5:86:93:
                    5a:26:8e:0a:19:34:86:70:db:ac:9e:b5:fe:17:c9:
                    62:5c:be:a2:4f:fa:f4:d3:07:f1:89:34:fe:85:1f:
                    9f:93:b7:27:34:0c:a4:30:b3:99:21:f7:1b:18:45:
                    e7:c3:16:92:13:0b:b6:bb:14:5e:a3:d0:c4:47:f5:
                    44:37:71:2c:b0:be:8d:59:f5:d4:a1:13:0a:be:2b:
                    0a:5f:2c:5d:f8:f2:3f:29:52:15:df:be:c7:63:22:
                    1c:ca:f6:c0:d2:75:91:05:fe:6c:36:6f:5d:21:ad:
                    84:22:6b:c4:8f:81:2a:47:30:25:9c:55:a3:95:9b:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:A7:21:72:4D:CD:8A:98:70:30:AE:CD:AC:6E:7C:79:7A:E0:FA
            X509v3 Authority Key Identifier:
                keyid:0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/3230312e3232302e31362e302f32312d3234203d3e203532343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:5b:13:9c:8a:68:4e:38:38:8b:45:22:5b:de:2d:02:38:
         83:62:51:77:62:7d:3f:35:84:0a:2f:c7:9f:94:5c:cc:13:50:
         81:e0:b4:8a:7d:1e:26:be:d1:e1:52:ce:0a:22:e9:ac:23:48:
         18:37:c5:f6:ff:7a:9f:fa:4f:12:26:04:64:af:15:13:3a:05:
         45:76:bd:32:2b:c9:9d:0f:3b:34:04:a5:47:b9:0a:3a:4d:33:
         d5:3d:90:bb:ab:40:13:46:76:96:c6:73:3e:97:95:ac:f2:39:
         8c:89:40:5d:24:79:a8:34:20:1e:2f:40:ff:15:db:11:ce:57:
         64:4c:08:46:02:35:ea:d3:49:6e:06:e2:d4:da:3d:25:4a:32:
         f7:70:8e:31:dc:69:9b:57:e4:b2:d3:e8:bb:9b:a8:6b:36:f4:
         3e:f7:06:e7:7a:56:7a:dd:e0:5d:da:e7:05:59:ef:47:6c:c5:
         44:2b:e5:b7:a5:e7:5d:6b:da:29:b0:66:f0:ff:10:1f:57:4e:
         87:9a:85:83:8f:22:92:58:68:f2:fc:37:04:51:70:e8:ca:e0:
         71:16:4b:47:f7:78:9d:77:9e:fb:34:9f:81:1a:61:95:68:72:
         fc:87:be:bc:20:53:51:bd:9c:b8:f9:7d:24:e7:3b:ff:37:9a:
         45:67:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 10:07:45 2026 by rpki-client