This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
File:                     3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa (raw, json)
Hash identifier:          OV4Ow67gmuRlTEBwhwCCtDBRTakWUuln/WB8lf+U02k=
Subject key identifier:   D4:87:24:78:43:DD:0A:B8:E7:57:9A:C5:58:C5:C9:E5:8D:F3:E9:7D
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7084A0E98EFBC81DEBBFB1315B9F8174333A2D2A
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:42 +0000
ROA not before:           Tue 06 Jan 2026 19:35:42 +0000
ROA not after:            Tue 05 Jan 2027 19:40:42 +0000
asID:                     32098
IP address blocks:        201.174.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:84:a0:e9:8e:fb:c8:1d:eb:bf:b1:31:5b:9f:81:74:33:3a:2d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:42 2026 GMT
            Not After : Jan  5 19:40:42 2027 GMT
        Subject: CN=D487247843DD0AB8E7579AC558C5C9E58DF3E97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:f7:1c:d9:16:b9:30:14:46:db:c2:53:92:
                    ca:2b:a4:fc:17:45:ee:37:63:51:22:39:93:d6:af:
                    cb:47:fd:f8:91:6f:0f:c7:67:22:7d:1c:64:e4:df:
                    9a:f2:52:6c:5f:21:37:0e:70:20:53:a7:72:17:99:
                    87:d4:ee:28:60:8a:6e:43:be:41:cb:3a:4b:34:c2:
                    e2:b4:3e:be:78:db:1f:1a:bf:20:87:b0:cd:32:77:
                    af:63:d5:c9:14:e1:28:c0:5b:49:79:5a:b6:00:d7:
                    ce:69:74:44:83:a0:62:6b:3e:28:2d:43:c3:02:38:
                    b5:54:1e:fc:21:86:8a:d8:db:0f:e0:28:ee:d9:dc:
                    ff:38:89:c6:37:67:56:1a:60:ab:62:9b:09:e8:02:
                    29:5b:63:f0:db:f2:f6:5c:0f:b6:90:cb:c9:b9:10:
                    0f:15:61:a8:b4:1e:6e:f8:34:2e:05:00:9a:86:6e:
                    d0:a0:e4:f2:1c:be:eb:ce:1a:44:8a:12:d8:39:59:
                    ca:81:24:ef:ae:2b:4a:d7:0a:26:f5:5d:8a:37:f1:
                    24:2b:14:77:7c:c7:39:d0:95:75:b6:e9:ac:9a:48:
                    c0:4f:7e:58:b0:b2:93:0f:b8:c1:94:66:52:8f:b6:
                    b0:38:c8:b4:58:f4:ff:82:32:70:d1:86:ed:4f:b4:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:87:24:78:43:DD:0A:B8:E7:57:9A:C5:58:C5:C9:E5:8D:F3:E9:7D
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3131322e302f32302d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:e3:e9:12:10:52:c4:ce:2f:2c:79:2d:29:55:02:57:4b:
         1e:bf:d7:ce:ca:36:a4:01:e9:a1:49:fd:e2:ef:9d:42:a6:bb:
         da:8a:c9:c4:4a:20:4b:30:ee:ea:02:82:02:0e:56:45:ab:a6:
         81:cb:a2:5a:32:65:45:1b:8e:f6:bc:9a:8a:f2:92:ec:e5:ef:
         71:2b:07:9e:b6:34:f7:33:eb:a3:f3:6b:24:98:6e:55:47:b9:
         ac:6d:da:28:a0:ef:24:bc:38:fb:08:02:f0:d1:a0:06:67:55:
         75:99:cb:8f:50:9d:81:43:21:b0:b9:8a:69:78:dc:84:07:94:
         2b:5f:83:93:d7:8f:02:cb:8c:69:9c:f7:e1:06:44:e9:a2:a2:
         4c:6d:2a:ee:e5:b4:75:69:fa:e6:67:a3:6b:a0:12:45:5e:9a:
         03:fb:fc:45:10:78:bb:91:c2:50:cb:c4:69:3f:94:09:b9:0c:
         10:18:e5:a5:45:80:ff:25:25:50:7d:f0:36:f6:cc:1e:0d:b3:
         09:32:a2:9e:9b:20:59:cd:34:4a:39:fa:8c:9f:6c:64:86:ea:
         f1:a7:6a:55:97:f7:5a:7e:6c:c0:f4:a7:ba:c6:7f:49:b0:36:
         2b:f0:75:0b:93:1b:73:ff:54:2c:ac:d8:2c:cd:4c:3d:34:2f:
         1e:50:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:31 2026 by rpki-client