This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323033.roa
File:                     3230312e3139312e302e302f31362d3234203d3e20323033.roa (raw, json)
Hash identifier:          U3nRMykVymQa1YYoox03H2Aq6XPYVz64/X1KVSzDCN8=
Subject key identifier:   C5:FA:33:1D:11:D1:0D:78:07:45:4E:88:B8:01:4D:B1:2F:BD:B1:9C
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       0ADC871BD53A8E5C6CE21CCA61ABB1422B6BCC09
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323033.roa
Signing time:             Tue 06 Jan 2026 19:30:33 +0000
ROA not before:           Tue 06 Jan 2026 19:25:33 +0000
ROA not after:            Tue 05 Jan 2027 19:30:33 +0000
asID:                     203
IP address blocks:        201.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dc:87:1b:d5:3a:8e:5c:6c:e2:1c:ca:61:ab:b1:42:2b:6b:cc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:33 2026 GMT
            Not After : Jan  5 19:30:33 2027 GMT
        Subject: CN=C5FA331D11D10D7807454E88B8014DB12FBDB19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:82:22:cc:b4:b5:9f:c8:ed:9b:55:f7:ca:
                    db:a1:53:d3:33:4a:12:e5:cc:c5:31:fa:4a:db:31:
                    ef:8b:b7:06:7d:73:92:35:de:db:09:54:94:ce:be:
                    17:77:dc:b3:b5:35:16:ef:d2:d1:69:22:4c:00:a0:
                    6b:56:89:f0:8b:3d:eb:0d:69:0c:0b:fb:0e:9e:56:
                    9f:17:8c:35:87:01:9c:66:74:af:1e:55:53:31:0b:
                    3e:09:24:70:67:00:9a:75:db:fe:4f:cd:82:1f:df:
                    96:91:e4:a2:ea:45:b7:1f:44:b3:35:2a:82:e1:be:
                    8b:2d:fb:80:73:f9:ce:64:c5:de:8b:75:74:96:3d:
                    d0:8f:61:99:29:55:67:56:f5:9a:0f:f7:2c:d7:87:
                    18:8e:25:50:7b:3c:23:ab:45:4d:fe:f8:48:c5:26:
                    c6:2f:0c:9e:d2:20:5e:48:0d:a8:4f:00:cc:ab:c3:
                    6b:cd:f0:f4:d5:4e:57:45:5c:46:74:d4:ab:5d:4c:
                    51:1d:e4:73:0d:17:d7:b0:32:90:77:f1:22:27:d0:
                    32:c1:c3:69:ed:06:79:a2:99:32:58:92:f3:a1:09:
                    15:09:c9:24:eb:c7:71:ff:eb:9f:a6:71:6d:9d:15:
                    71:7f:2c:f2:57:3d:6f:c2:fd:e0:88:65:71:58:db:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FA:33:1D:11:D1:0D:78:07:45:4E:88:B8:01:4D:B1:2F:BD:B1:9C
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:78:fc:0b:e5:47:6a:15:4b:d7:a0:fc:0c:71:40:9f:82:
         ea:f2:e1:83:d5:0b:7a:43:23:89:f3:ca:a7:0a:d4:e2:b2:d7:
         9e:69:f5:14:80:e2:c3:c5:40:12:4c:4a:62:28:b5:de:ba:e9:
         da:8c:d8:ce:a3:90:5e:6d:a4:76:75:0e:31:00:79:94:cf:ef:
         55:52:e2:04:29:c5:62:b9:2b:68:21:94:43:2f:aa:2d:5a:23:
         0d:09:62:26:81:cd:d9:7f:0f:54:ec:ae:f9:73:91:24:fe:4d:
         ad:92:f3:0a:ab:7b:33:2c:26:85:92:3d:cc:c6:76:03:41:6b:
         67:5e:32:db:f6:7b:41:7e:af:e5:72:f0:84:fa:a5:78:2f:b6:
         75:4d:fc:b4:f1:a4:ac:59:44:2a:2f:08:47:dc:3d:41:a1:6b:
         bd:06:ed:00:79:2b:a6:4d:1e:51:c0:28:de:05:08:1d:e9:62:
         9a:69:0a:92:52:eb:9b:54:ca:8e:25:c7:84:10:25:86:e7:1f:
         b9:cb:5a:07:e4:df:10:55:dc:3e:3c:e2:1b:45:f2:c8:6d:02:
         1d:c8:be:b9:bd:fd:f5:d2:19:75:6b:ef:95:f8:d6:2e:d0:d2:
         be:f5:86:c1:08:25:92:00:25:4c:a6:06:2f:43:57:7f:5f:c4:
         41:6d:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:31 2026 by rpki-client