This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
File:                     3230312e3234302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          OPQVjR8XA4b4lDD/b6DzZaM2XCqgK8Xyf1CH8egT9Cc=
Subject key identifier:   04:32:DD:F1:2D:E4:BC:05:EF:14:E8:9F:C9:DB:AB:5E:04:5D:38:E8
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       0D8B22C9321942AF7F354EEF86CD462D7976B927
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:56:03 +0000
ROA not before:           Tue 06 Jan 2026 20:51:03 +0000
ROA not after:            Tue 05 Jan 2027 20:56:03 +0000
asID:                     6147
IP address blocks:        201.240.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8b:22:c9:32:19:42:af:7f:35:4e:ef:86:cd:46:2d:79:76:b9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:51:03 2026 GMT
            Not After : Jan  5 20:56:03 2027 GMT
        Subject: CN=0432DDF12DE4BC05EF14E89FC9DBAB5E045D38E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:4a:a9:f4:e3:d6:98:2d:ab:10:45:68:8c:
                    c0:92:8d:96:09:b7:21:a3:c0:59:da:30:49:fd:97:
                    51:33:84:da:eb:d4:1d:ab:df:f7:32:73:22:e3:73:
                    b7:50:8b:72:56:35:47:fc:55:9b:32:42:5a:14:43:
                    eb:f7:c3:b7:40:4a:49:26:0a:0e:7a:dc:54:ed:4d:
                    08:78:15:00:8b:f5:15:17:ff:76:60:1b:b6:1b:49:
                    b3:26:78:b8:5b:e7:d8:55:35:eb:7f:c7:4b:57:30:
                    ac:a8:e6:b2:ee:c6:fd:7e:2f:11:fc:64:f2:9e:4b:
                    61:c4:cb:0b:b6:c5:a4:98:57:c6:91:dd:cf:07:14:
                    cc:75:af:74:d8:32:45:ff:b7:f2:7d:5f:08:5c:58:
                    cc:62:a9:78:73:c2:98:36:0c:bb:76:83:79:6b:fb:
                    f8:34:bf:cf:d8:46:3d:4f:a1:52:c4:05:0c:4d:ca:
                    36:86:8e:a6:7a:e1:e8:03:84:88:bc:f6:7f:06:32:
                    d2:7c:37:c8:cd:f2:2e:22:07:3b:c9:02:46:af:96:
                    8c:77:0a:e1:5f:bf:34:ef:da:07:a3:dc:f6:24:33:
                    90:83:c8:d9:55:e8:5b:9b:d5:9b:fb:2e:52:0f:5f:
                    8a:c1:d8:39:51:7c:84:8e:e0:41:41:f6:2e:d9:a1:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:32:DD:F1:2D:E4:BC:05:EF:14:E8:9F:C9:DB:AB:5E:04:5D:38:E8
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3234302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:0d:7b:19:80:54:58:52:b0:b2:1f:71:10:11:f5:a0:06:
         13:19:90:8f:28:78:51:c6:d0:4e:03:b7:0a:fc:8a:3d:3a:57:
         0e:b2:71:19:ca:bf:8e:01:51:0f:12:62:8d:3b:c4:14:65:85:
         3c:c1:85:24:c7:1f:88:87:be:73:1b:c7:b8:a8:45:a3:63:d2:
         47:e2:02:ac:7a:88:02:81:9c:9d:7a:96:9d:d8:7c:cd:52:fa:
         bf:d0:bf:bb:40:4a:44:b2:e6:2b:1f:79:b4:e3:06:28:d7:76:
         23:ae:e5:7e:5e:e4:cb:fe:25:19:f7:21:50:a9:75:d9:5b:00:
         04:be:cc:d8:ca:c8:04:c4:81:cd:82:ac:7c:ad:73:d0:3c:e3:
         d3:e6:39:79:77:cf:36:b6:db:7e:a2:97:5d:87:e2:68:5a:c5:
         79:49:9e:69:60:ef:f3:d6:37:3c:10:9d:76:74:cb:b9:c0:4a:
         86:b4:22:75:f5:c1:ae:26:d0:e0:ed:06:2c:7c:e2:75:4d:64:
         d7:a4:19:e5:db:91:bb:34:49:5e:a0:67:1a:9f:78:2e:48:9a:
         07:4e:d6:90:fa:e3:9a:f4:a8:21:3f:db:dd:78:7d:06:ee:95:
         4c:f5:34:86:08:a5:71:3c:3b:63:f9:12:8e:de:db:a0:91:e3:
         b5:63:64:83
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUDYsiyTIZQq9/NU7vhs1GLXl2uScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNjAxMDYyMDUxMDNaFw0yNzAxMDUyMDU2MDNaMDMxMTAvBgNV
BAMTKDA0MzJEREYxMkRFNEJDMDVFRjE0RTg5RkM5REJBQjVFMDQ1RDM4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2Uqp9OPWmC2rEEVojMCSjZYJ
tyGjwFnaMEn9l1EzhNrr1B2r3/cycyLjc7dQi3JWNUf8VZsyQloUQ+v3w7dASkkm
Cg563FTtTQh4FQCL9RUX/3ZgG7YbSbMmeLhb59hVNet/x0tXMKyo5rLuxv1+LxH8
ZPKeS2HEywu2xaSYV8aR3c8HFMx1r3TYMkX/t/J9XwhcWMxiqXhzwpg2DLt2g3lr
+/g0v8/YRj1PoVLEBQxNyjaGjqZ64egDhIi89n8GMtJ8N8jN8i4iBzvJAkavlox3
CuFfvzTv2gej3PYkM5CDyNlV6Fub1Zv7LlIPX4rB2DlRfISO4EFB9i7ZoQb/AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUBDLd8S3kvAXvFOifydurXgRdOOgwHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMyMzAzMTJlMzIzNDMwMmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyfAwDQYJKoZI
hvcNAQELBQADggEBAEy8DXsZgFRYUrCyH3EQEfWgBhMZkI8oeFHG0E4Dtwr8ij06
Vw6ycRnKv44BUQ8SYo07xBRlhTzBhSTHH4iHvnMbx7ioRaNj0kfiAqx6iAKBnJ16
lp3YfM1S+r/Qv7tASkSy5isfebTjBijXdiOu5X5e5Mv+JRn3IVCpddlbAAS+zNjK
yATEgc2CrHytc9A849PmOXl3zza2236il12H4mhaxXlJnmlg7/PWNzwQnXZ0y7nA
Soa0InX1wa4m0ODtBix84nVNZNekGeXbkbs0SV6gZxqfeC5ImgdO1pD645r0qCE/
2914fQbulUz1NIYIpXE8O2P5Eo7e26CR47VjZIM=
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:54 2026 by rpki-client