This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa
File:                     3230312e3231342e302e302f31352d3234203d3e203232303437.roa (raw, json)
Hash identifier:          KXWUQP2vEPsljHP5Zwnb7A5sVauPAi9ncaGiR8P48JY=
Subject key identifier:   77:EE:CC:A7:26:BB:9E:AA:3E:7C:C8:19:99:B6:9E:AF:99:AE:53:62
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       1E7CE71E8D443961F0FF9746FB2F7D883949118D
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:11 +0000
ROA not before:           Tue 06 Jan 2026 19:10:11 +0000
ROA not after:            Tue 05 Jan 2027 19:15:11 +0000
asID:                     22047
IP address blocks:        201.214.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 13:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7c:e7:1e:8d:44:39:61:f0:ff:97:46:fb:2f:7d:88:39:49:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:11 2026 GMT
            Not After : Jan  5 19:15:11 2027 GMT
        Subject: CN=77EECCA726BB9EAA3E7CC81999B69EAF99AE5362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:33:84:50:0a:76:d4:2e:bd:7a:49:97:79:
                    bf:6b:4c:0b:ce:d0:88:40:dc:72:54:26:8e:ae:e6:
                    06:24:63:2e:54:66:19:aa:16:99:64:43:2e:2d:68:
                    b6:d1:f6:5d:bf:2f:61:78:ad:78:6a:5e:a7:c0:0e:
                    41:e3:13:b5:6e:d9:49:64:e2:5d:9b:ab:59:04:c6:
                    5d:2f:6b:0f:d5:eb:f2:24:20:8b:e4:e3:19:e5:cd:
                    68:b6:80:5a:ca:e1:cb:74:70:1d:06:4a:7b:fc:f8:
                    4e:1e:2b:61:70:5d:93:ad:64:69:6e:ac:48:eb:0e:
                    86:2b:d3:64:25:d3:da:41:68:a3:ae:bb:59:55:ca:
                    2b:0e:44:8a:78:1b:9b:a3:6a:24:89:3c:53:3e:8d:
                    44:c4:8d:27:42:5d:fb:65:74:d5:9c:51:f1:8e:72:
                    06:5a:d6:d7:73:04:36:c8:6b:02:56:f9:01:66:a0:
                    87:e7:7f:ea:ba:65:1c:58:c3:30:6a:17:38:e4:8a:
                    eb:e5:ce:fd:95:6f:b8:75:8d:a9:67:52:ee:9f:fb:
                    9c:92:ea:8e:00:1b:8e:5f:9c:26:ad:a9:ce:a3:2f:
                    82:8a:5a:d4:84:b9:5a:47:70:70:e0:61:fa:5e:6f:
                    d2:26:8c:b0:61:57:b0:05:96:7c:32:e7:00:29:b1:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:CC:A7:26:BB:9E:AA:3E:7C:C8:19:99:B6:9E:AF:99:AE:53:62
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3231342e302e302f31352d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.214.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:12:e1:ef:c9:57:39:3d:85:fa:76:8e:61:3a:8f:de:3c:
         0c:03:24:94:40:11:f0:bd:8d:bd:28:01:40:6f:23:37:86:0e:
         5d:c4:46:eb:bf:04:cf:ae:25:15:78:77:81:49:b4:77:84:25:
         22:f3:7a:0b:38:9f:cf:80:94:20:45:b1:7b:58:5d:6c:b1:90:
         86:25:58:ad:99:57:19:d5:b5:e8:9b:87:48:47:5e:c4:9e:3c:
         b1:c9:1e:a9:ce:5c:4e:a3:ca:4a:95:a4:5f:ad:25:43:e7:69:
         ed:08:13:4a:75:da:0c:bb:fb:d0:21:83:3b:df:7f:9b:ee:47:
         20:58:b4:77:5d:3f:87:6e:23:7d:94:b8:ea:53:da:43:37:8a:
         cf:ba:53:59:18:37:f3:81:76:57:42:af:bb:3f:29:6e:2c:45:
         d3:51:a4:fa:cf:6f:9e:9d:50:57:fc:1a:98:d2:e2:10:40:53:
         b7:5c:fe:b1:70:a7:8b:2d:d2:df:0a:4e:c4:2b:40:34:01:76:
         53:50:a3:7d:70:54:a2:8d:2f:1c:7d:b3:15:9e:49:1f:d8:2c:
         29:32:4f:08:06:fa:9e:17:1d:e9:dc:0d:78:21:94:15:3e:7c:
         92:17:0b:61:4f:27:c5:84:fe:f6:18:c9:f8:2f:39:b6:60:ab:
         a6:c9:d9:ec
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHnznHo1EOWHw/5dG+y99iDlJEY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDODVBN0I3MkJCMzg1RTlDQkQxNDRBNTg1ODMxMkUw
Nzk3MDM2RjAeFw0yNjAxMDYxOTEwMTFaFw0yNzAxMDUxOTE1MTFaMDMxMTAvBgNV
BAMTKDc3RUVDQ0E3MjZCQjlFQUEzRTdDQzgxOTk5QjY5RUFGOTlBRTUzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqjOEUAp21C69ekmXeb9rTAvO
0IhA3HJUJo6u5gYkYy5UZhmqFplkQy4taLbR9l2/L2F4rXhqXqfADkHjE7Vu2Ulk
4l2bq1kExl0vaw/V6/IkIIvk4xnlzWi2gFrK4ct0cB0GSnv8+E4eK2FwXZOtZGlu
rEjrDoYr02Ql09pBaKOuu1lVyisORIp4G5ujaiSJPFM+jUTEjSdCXftldNWcUfGO
cgZa1tdzBDbIawJW+QFmoIfnf+q6ZRxYwzBqFzjkiuvlzv2Vb7h1jalnUu6f+5yS
6o4AG45fnCatqc6jL4KKWtSEuVpHcHDgYfpeb9ImjLBhV7AFlnwy5wApsdhRAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUd+7Mpya7nqo+fMgZmbaer5muU2IwHwYDVR0j
BBgwFoAU9chae3K7OF6cvRRKWFgxLgeXA28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OTQ0MTgzNjVEMzM0MDc0QTU0ODgzNkMxMUMwNjdBMzEy
Rjk5Q0E4NEMzMENDMjkzQUZGQTUyNjI1QjM1ODVELzAvRjVDODVBN0I3MkJCMzg1
RTlDQkQxNDRBNTg1ODMxMkUwNzk3MDM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNUM4NUE3QjcyQkIzODVFOUNC
RDE0NEE1ODU4MzEyRTA3OTcwMzZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzk0NDE4MzY1RDMzNDA3NEE1NDg4MzZDMTFDMDY3QTMxMkY5OUNBODRD
MzBDQzI5M0FGRkE1MjYyNUIzNTg1RC8wLzMyMzAzMTJlMzIzMTM0MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMyMzIzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHJ1jANBgkq
hkiG9w0BAQsFAAOCAQEAtVsS4e/JVzk9hfp2jmE6j948DAMklEAR8L2NvSgBQG8j
N4YOXcRG678Ez64lFXh3gUm0d4QlIvN6Czifz4CUIEWxe1hdbLGQhiVYrZlXGdW1
6JuHSEdexJ48sckeqc5cTqPKSpWkX60lQ+dp7QgTSnXaDLv70CGDO99/m+5HIFi0
d10/h24jfZS46lPaQzeKz7pTWRg384F2V0Kvuz8pbixF01Gk+s9vnp1QV/wamNLi
EEBTt1z+sXCniy3S3wpOxCtANAF2U1CjfXBUoo0vHH2zFZ5JH9gsKTJPCAb6nhcd
6dwNeCGUFT58khcLYU8nxYT+9hjJ+C85tmCrpsnZ7A==
-----END CERTIFICATE-----
Generated at Tue Jan 13 23:37:03 2026 by rpki-client