This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa
File:                     3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa (raw, json)
Hash identifier:          2xYuVLL4AcfdRm0k8QlNn0Z+YbUh1gTHKfAX9OjCQdg=
Subject key identifier:   30:99:F5:9A:84:89:48:12:6F:AE:42:D5:6A:3A:DF:6E:81:E3:24:94
Certificate issuer:       /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial:       0A64267B8FE820D23CE357DBC27F48AF9915401B
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa
Signing time:             Tue 06 Jan 2026 19:35:48 +0000
ROA not before:           Tue 06 Jan 2026 19:30:48 +0000
ROA not after:            Tue 05 Jan 2027 19:35:48 +0000
asID:                     263217
IP address blocks:        201.131.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:64:26:7b:8f:e8:20:d2:3c:e3:57:db:c2:7f:48:af:99:15:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
        Validity
            Not Before: Jan  6 19:30:48 2026 GMT
            Not After : Jan  5 19:35:48 2027 GMT
        Subject: CN=3099F59A848948126FAE42D56A3ADF6E81E32494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:6d:22:5a:ef:77:18:b9:cb:42:fc:eb:71:
                    4a:6e:16:16:3a:f3:c7:27:3e:c0:9f:d0:ac:d5:c5:
                    15:35:3e:43:11:6b:85:f4:47:05:43:af:16:a0:55:
                    f9:02:a7:3a:a7:f7:a6:79:bf:e3:ac:b8:f5:16:63:
                    b2:48:c8:28:51:2b:5d:52:cf:ed:f6:e8:eb:56:82:
                    c9:ac:5f:05:ff:7e:6e:35:70:6a:7d:db:a1:90:c9:
                    ca:54:d0:4b:e5:c2:31:fe:76:76:3f:e9:96:9d:3e:
                    3d:fb:90:65:a9:34:1b:0b:41:2a:08:5c:3b:2f:f5:
                    9f:a8:0e:6f:1a:14:5e:de:eb:2a:e6:97:b3:61:d6:
                    8a:5c:da:22:b6:d3:2a:ee:8e:66:2a:3c:17:ef:ca:
                    e0:9c:77:9f:74:44:84:50:5b:9e:fa:21:90:d6:70:
                    4a:c9:3f:6d:95:0a:37:00:9a:ca:25:70:84:f7:90:
                    e1:c6:1b:93:e2:f0:27:8f:b1:0f:93:ea:0b:72:1d:
                    b5:d5:21:fa:6b:0d:1c:9d:c7:ab:8f:a5:b5:b1:d1:
                    2d:4c:33:da:7d:53:3e:c1:e7:60:33:cb:1f:1f:96:
                    f9:68:61:18:ab:49:d3:5a:74:ce:bd:de:43:e4:e8:
                    27:b1:f8:f3:02:0b:d2:5b:2d:27:96:d5:e7:50:75:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:F5:9A:84:89:48:12:6F:AE:42:D5:6A:3A:DF:6E:81:E3:24:94
            X509v3 Authority Key Identifier:
                keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3230312e3133312e3130322e302f32342d3234203d3e20323633323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:d8:9c:39:c2:cf:ac:11:76:eb:d5:fd:60:e0:a8:cc:c3:
         64:8e:ea:8f:42:de:50:66:3f:2e:ab:d7:ca:b5:8a:7e:6a:82:
         7d:e3:e1:5e:c3:3a:ca:13:4c:f7:ca:f0:69:4f:99:6b:0a:2c:
         ca:27:3f:02:3f:b7:2f:b4:ec:99:7f:98:45:b9:b6:52:2e:e2:
         59:d7:8a:b1:89:4f:e0:f0:d6:ef:cf:27:77:20:f3:18:39:a6:
         36:e8:81:db:a4:af:64:50:7d:6b:18:f2:1b:b4:c1:d3:49:c4:
         48:b8:ca:84:c5:76:0b:c2:0b:b9:07:bf:ba:20:c6:18:b4:44:
         8c:20:5c:81:e0:6d:89:06:60:9b:75:eb:52:57:7b:0f:59:1e:
         64:ef:11:e8:20:1a:3d:94:af:b5:ea:5d:49:96:9a:3b:ee:8d:
         58:42:8f:db:b1:5e:77:f1:9b:66:f9:ed:db:64:d6:6b:89:17:
         4f:d6:df:b5:db:ed:93:9d:3e:87:c4:c8:09:e1:d5:56:f7:ba:
         42:d5:9c:ff:c8:d1:34:af:b2:3e:8b:63:dd:9f:fa:76:4d:62:
         c2:ce:ab:eb:4c:16:05:d6:b0:0c:97:95:27:40:03:41:0c:ea:
         e6:27:bd:09:5c:ec:a7:80:41:8e:e1:ee:9c:a5:43:5d:97:59:
         f6:a4:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 07:28:30 2026 by rpki-client