This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39342e302f32342d3234203d3e203237373839.roa
File:                     3230312e3232312e39342e302f32342d3234203d3e203237373839.roa (raw, json)
Hash identifier:          jJmfxrs8LWPgh7L1wGQ7UTd3kk4dTEpXsu673nPj4Kc=
Subject key identifier:   D8:58:5D:5D:FF:55:99:8B:E0:1F:C7:4D:76:25:55:E8:06:AF:5B:D7
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       517CF6E6D238CCB793F82CA81AB108F5BDD8D529
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39342e302f32342d3234203d3e203237373839.roa
Signing time:             Tue 06 Jan 2026 20:58:49 +0000
ROA not before:           Tue 06 Jan 2026 20:53:49 +0000
ROA not after:            Tue 05 Jan 2027 20:58:49 +0000
asID:                     27789
IP address blocks:        201.221.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7c:f6:e6:d2:38:cc:b7:93:f8:2c:a8:1a:b1:08:f5:bd:d8:d5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan  6 20:53:49 2026 GMT
            Not After : Jan  5 20:58:49 2027 GMT
        Subject: CN=D8585D5DFF55998BE01FC74D762555E806AF5BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:a5:5c:f8:fa:0f:35:5c:04:e1:26:5d:75:
                    65:52:b2:b1:87:cc:de:74:b4:9b:36:1a:c7:b1:8a:
                    c8:4b:64:aa:71:99:bb:89:65:c7:6a:52:5e:db:73:
                    14:42:af:78:ba:64:cd:b6:84:4f:c5:bb:46:04:3d:
                    be:fc:6f:9c:4c:2d:6e:81:1f:3f:f5:82:76:02:40:
                    0e:fb:02:28:d3:10:1f:76:d8:3d:7c:28:f0:91:4e:
                    69:d3:3f:8e:e3:ca:2e:08:15:08:ba:49:b9:e2:57:
                    52:83:19:51:20:16:1c:29:78:a7:62:16:87:8a:67:
                    2e:2f:de:8d:24:0b:0a:bc:1a:84:97:1b:74:53:de:
                    0a:a7:5d:3f:87:17:7e:69:2a:3e:13:53:cd:e9:2b:
                    68:b4:75:9d:0f:00:21:53:7c:07:46:54:c3:e1:5f:
                    72:0e:de:08:9a:32:98:6d:80:12:3c:9c:49:6f:14:
                    4b:0a:77:50:67:51:dd:ef:65:b5:d1:48:c7:cc:04:
                    d5:d1:15:5a:47:6a:40:f5:91:bf:b0:a1:19:ca:2a:
                    b0:3c:1e:56:74:5f:0d:2b:37:ab:27:d9:4a:af:a8:
                    09:3e:ea:90:bd:f1:11:84:45:35:12:b8:3e:f3:d9:
                    bc:7e:7f:d8:d5:eb:ed:88:bb:d0:81:a1:a6:86:0a:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:5D:5D:FF:55:99:8B:E0:1F:C7:4D:76:25:55:E8:06:AF:5B:D7
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39342e302f32342d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ea:57:a8:e4:4c:7c:25:54:f0:8d:10:05:09:b2:39:b2:f8:
         fa:91:3a:e2:2a:4e:fb:06:f3:f9:e0:b7:c9:13:70:95:25:f9:
         40:53:5c:a6:1a:38:49:a6:48:e9:d0:da:89:e7:4f:b9:66:d5:
         7c:31:46:16:89:91:70:31:21:10:8c:04:b5:f2:a4:51:e5:1d:
         f2:f9:af:46:03:b9:9d:a4:68:59:06:c8:6f:07:20:d8:bd:dd:
         04:77:2e:03:7b:d1:c4:db:6e:bb:ed:96:3e:9f:44:a9:ff:60:
         1a:49:6c:3e:18:0e:14:63:2e:65:31:c7:55:0a:df:6f:dd:20:
         11:1f:bb:c2:c9:0b:60:9b:5b:03:8c:8e:e1:84:2d:b0:f1:9a:
         14:43:2d:d1:72:92:5e:f3:b8:fd:98:21:26:08:3b:e4:3e:c5:
         fa:64:9b:d1:98:73:dc:fb:9a:fe:a7:9f:6a:7e:62:f1:3c:db:
         cc:59:02:aa:94:3d:1c:8c:f3:56:7e:30:88:dc:91:c4:00:a6:
         c2:bf:a5:98:af:e1:0c:d6:d4:7f:2a:b0:36:b5:81:84:be:c1:
         49:33:e5:e2:f4:e2:c8:ba:39:4e:a7:79:f3:11:5f:50:64:20:
         25:e1:3c:45:b9:c9:6c:9d:71:73:a7:a9:f7:41:1e:50:45:cc:
         45:03:f5:9d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUXz25tI4zLeT+CyoGrEI9b3Y1SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNjAxMDYyMDUzNDlaFw0yNzAxMDUyMDU4NDlaMDMxMTAvBgNV
BAMTKEQ4NTg1RDVERkY1NTk5OEJFMDFGQzc0RDc2MjU1NUU4MDZBRjVCRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMDKVc+PoPNVwE4SZddWVSsrGH
zN50tJs2GsexishLZKpxmbuJZcdqUl7bcxRCr3i6ZM22hE/Fu0YEPb78b5xMLW6B
Hz/1gnYCQA77AijTEB922D18KPCRTmnTP47jyi4IFQi6SbniV1KDGVEgFhwpeKdi
FoeKZy4v3o0kCwq8GoSXG3RT3gqnXT+HF35pKj4TU83pK2i0dZ0PACFTfAdGVMPh
X3IO3giaMphtgBI8nElvFEsKd1BnUd3vZbXRSMfMBNXRFVpHakD1kb+woRnKKrA8
HlZ0Xw0rN6sn2UqvqAk+6pC98RGERTUSuD7z2bx+f9jV6+2Iu9CBoaaGCoclAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2FhdXf9VmYvgH8dNdiVV6AavW9cwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMyMzAzMTJlMzIzMjMxMmUzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMndXjAN
BgkqhkiG9w0BAQsFAAOCAQEAiupXqORMfCVU8I0QBQmyObL4+pE64ipO+wbz+eC3
yRNwlSX5QFNcpho4SaZI6dDaiedPuWbVfDFGFomRcDEhEIwEtfKkUeUd8vmvRgO5
naRoWQbIbwcg2L3dBHcuA3vRxNtuu+2WPp9Eqf9gGklsPhgOFGMuZTHHVQrfb90g
ER+7wskLYJtbA4yO4YQtsPGaFEMt0XKSXvO4/ZghJgg75D7F+mSb0Zhz3Pua/qef
an5i8TzbzFkCqpQ9HIzzVn4wiNyRxACmwr+lmK/hDNbUfyqwNrWBhL7BSTPl4vTi
yLo5Tqd58xFfUGQgJeE8RbnJbJ1xc6ep90EeUEXMRQP1nQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:21:33 2026 by rpki-client