This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
File:                     3230312e3232312e36342e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier:          KlPw084qD8Y95P0cPUXMptcHbENsgl6XTyS0a7DBo5M=
Subject key identifier:   0D:57:44:0F:3A:D7:BB:E7:9A:78:1C:FC:DF:92:DD:63:92:34:2E:AD
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       67AAF2DF06F3349F832836E95B3290C0850C310A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa
Signing time:             Tue 06 Jan 2026 20:58:48 +0000
ROA not before:           Tue 06 Jan 2026 20:53:48 +0000
ROA not after:            Tue 05 Jan 2027 20:58:48 +0000
asID:                     27789
IP address blocks:        201.221.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:f2:df:06:f3:34:9f:83:28:36:e9:5b:32:90:c0:85:0c:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan  6 20:53:48 2026 GMT
            Not After : Jan  5 20:58:48 2027 GMT
        Subject: CN=0D57440F3AD7BBE79A781CFCDF92DD6392342EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:c0:46:18:45:ef:44:a7:6b:a3:b7:ef:8d:
                    db:a5:d6:57:25:63:0b:27:bb:1f:a3:78:85:70:58:
                    f5:47:ae:d1:6d:c8:6d:65:c0:c0:3f:05:e6:f9:1a:
                    a4:c0:4b:7e:7c:69:38:2a:76:76:a1:79:3e:0b:e5:
                    9d:6c:19:bf:9a:f4:66:16:14:97:37:7d:10:eb:2c:
                    e3:ce:48:96:1a:3a:db:9a:15:d6:43:58:4f:5e:94:
                    f2:b8:2e:aa:20:9e:d0:5b:32:51:00:4f:d6:12:5e:
                    e7:d2:2e:8a:94:ef:f3:b1:d8:35:56:c0:80:2d:32:
                    73:43:d0:93:ba:ed:f5:41:ab:2e:aa:ad:de:91:a5:
                    da:cf:04:b0:d7:ea:7c:c3:05:03:ea:1d:4d:7f:20:
                    06:57:62:48:92:e4:3e:ce:b2:23:e5:54:96:e0:ca:
                    e2:9a:22:1b:63:25:eb:c1:0b:5a:e4:aa:61:01:af:
                    66:c5:59:3f:98:ec:f6:6e:86:c9:80:79:02:4b:fb:
                    83:7a:f7:46:ae:06:a1:ba:d6:de:10:23:50:82:50:
                    b8:5b:b5:cd:bf:eb:d8:87:d6:fc:ad:5b:b1:19:bc:
                    e1:86:64:8e:d8:a2:b5:f4:18:55:d8:c0:09:1c:fa:
                    e8:4f:de:90:4a:4e:db:6a:47:86:82:68:db:70:ce:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:44:0F:3A:D7:BB:E7:9A:78:1C:FC:DF:92:DD:63:92:34:2E:AD
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e36342e302f32322d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:b3:2a:59:32:2a:ad:39:5b:53:95:a1:db:c2:1c:0d:2c:
         bb:20:46:04:bc:fe:88:b2:3e:70:ba:4f:38:44:5f:77:6d:54:
         b0:e6:8d:bd:0e:97:3a:d9:e7:77:b1:53:7d:1f:60:4d:84:30:
         c5:91:d3:f4:c7:a1:c7:61:d9:f6:d2:cb:2c:ab:6e:c3:37:f6:
         53:e1:23:b4:56:d3:51:9d:3d:6e:26:6e:ee:4a:88:ec:0e:44:
         51:a1:5a:e9:cc:49:6d:79:35:70:38:1a:1d:a0:78:ce:ee:26:
         91:76:57:8b:0a:8d:18:1a:d4:7c:69:f7:8c:59:a4:6f:a3:3e:
         e0:d8:9d:27:11:53:2e:04:92:5f:0d:38:26:2f:cf:43:a9:5c:
         00:2e:35:80:72:47:b7:a4:e3:37:ae:00:80:4a:6f:e4:2a:b8:
         52:0e:bb:26:95:fc:f8:e6:e9:85:7d:28:aa:6e:1e:f1:59:6e:
         1e:11:ff:cd:2d:cc:51:c5:d5:5c:52:e0:39:8c:5f:92:21:dc:
         d0:cd:9b:43:9a:51:a3:34:f2:61:a8:27:a0:e6:c2:df:67:9f:
         b8:0c:31:30:e5:04:e1:5c:05:80:c8:64:56:1a:d8:4c:f0:e8:
         5c:5d:2f:e3:84:a8:68:fc:0b:16:3c:2d:a6:a0:33:a6:e5:03:
         78:0d:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:21:33 2026 by rpki-client