This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          OZXfW4/1a0HBLmlfjG7ErQjMwt/EMUgjcCa3OtTx6r4=
Subject key identifier:   C2:E7:9F:4B:F2:C1:41:0D:22:C3:45:C3:0A:77:11:71:1D:DB:0A:06
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       02F01D70459A69D3174ADFA1DD47B28A7E1761DB
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:55 +0000
ROA not before:           Tue 06 Jan 2026 19:35:55 +0000
ROA not after:            Tue 05 Jan 2027 19:40:55 +0000
asID:                     32098
IP address blocks:        201.174.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 23:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f0:1d:70:45:9a:69:d3:17:4a:df:a1:dd:47:b2:8a:7e:17:61:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:55 2026 GMT
            Not After : Jan  5 19:40:55 2027 GMT
        Subject: CN=C2E79F4BF2C1410D22C345C30A7711711DDB0A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:02:0e:ee:7d:83:42:c3:cc:80:ca:8f:16:
                    f0:74:bb:bc:0e:f7:35:8d:9e:e9:bb:64:5a:3c:dd:
                    2c:70:d2:a5:e8:ea:f9:e4:0c:bd:be:41:45:8a:df:
                    b4:4b:14:c5:f7:f4:24:0c:e6:7e:e9:b8:76:d7:32:
                    53:e6:4a:15:a3:ad:5c:7f:0f:7e:a8:25:7e:c5:5c:
                    02:4b:b2:b1:cb:af:7e:b9:2b:46:2f:75:c8:d6:0d:
                    ec:65:d1:fa:ad:e2:41:44:bc:98:e7:a9:a6:68:ab:
                    8a:99:0b:b5:bb:2e:a2:a9:48:7a:49:37:9c:6b:75:
                    80:0f:3e:f3:2b:1a:7c:09:f4:61:23:41:3f:37:18:
                    16:db:5e:1a:1b:06:ac:78:7f:1c:01:4b:7c:99:d7:
                    df:2a:e0:d0:d9:68:1c:4b:71:41:50:8a:37:65:da:
                    03:90:77:d4:46:8a:73:09:42:c2:1f:99:75:5a:07:
                    64:e0:c6:e9:b3:8c:99:13:94:08:4a:7e:ab:9a:b0:
                    b0:be:c0:9f:92:90:e3:ec:c1:59:8f:50:01:f5:54:
                    e3:dd:8a:f8:bb:e5:76:a1:9a:77:14:8b:fd:12:ce:
                    45:28:cf:b0:6d:a6:4d:df:8b:90:0e:4e:30:cd:81:
                    d3:be:25:c0:59:ac:32:a7:dd:39:7d:d3:39:40:69:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:9F:4B:F2:C1:41:0D:22:C3:45:C3:0A:77:11:71:1D:DB:0A:06
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130382e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:c1:88:74:e9:79:77:28:c2:e3:46:38:05:46:7e:54:87:
         2b:30:34:99:99:c7:17:ee:36:49:80:db:18:e9:79:aa:c3:44:
         2b:46:07:16:5e:68:d6:dd:0a:f3:2f:b3:03:13:93:6f:b1:7a:
         b8:e1:54:26:a4:7d:88:c1:e7:db:ea:d1:72:87:cf:5a:9c:63:
         a6:4a:8b:ab:f6:6a:00:ac:86:fc:7c:b1:2e:8d:f5:2a:c9:b8:
         21:cc:38:79:22:51:c2:0b:23:81:66:a2:a4:07:57:d3:ec:5e:
         50:9b:a3:c6:94:5f:b3:74:54:76:ea:06:8b:62:b5:27:23:72:
         4c:f5:ab:e6:cc:11:69:ff:6e:e9:95:bc:0e:d2:50:33:74:f1:
         ec:8d:fe:41:ba:c1:02:d5:b1:ce:33:9d:bb:57:75:c6:96:8d:
         91:2c:cc:15:c8:d1:a8:1f:f1:6a:57:0b:77:a7:3b:2b:33:f5:
         f3:33:b9:13:29:3a:7c:1a:a9:1b:c3:97:d2:12:42:82:04:25:
         a2:0d:ac:fa:fa:b5:ad:98:17:50:b0:4b:02:ad:ac:99:b2:c0:
         8f:1f:94:dd:4e:16:49:74:ba:16:37:51:13:cf:12:e9:8d:ff:
         26:10:76:e5:01:9a:8c:82:01:15:e9:41:4a:fe:cc:ce:7e:a6:
         da:8c:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:21:38 2026 by rpki-client