This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa
File:                     3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa (raw, json)
Hash identifier:          9oDm/7a1eLd5OmDLBL54lsopZdGjkMmXXTSMcvX9F7E=
Subject key identifier:   2F:C6:AB:1B:DC:5A:37:9C:F5:34:76:5E:36:48:E4:73:69:FA:9B:50
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       5FC01CCEB7293F4BE80B9152094547224956D770
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:44 +0000
ROA not before:           Tue 06 Jan 2026 19:35:44 +0000
ROA not after:            Tue 05 Jan 2027 19:40:44 +0000
asID:                     32098
IP address blocks:        201.174.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c0:1c:ce:b7:29:3f:4b:e8:0b:91:52:09:45:47:22:49:56:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:44 2026 GMT
            Not After : Jan  5 19:40:44 2027 GMT
        Subject: CN=2FC6AB1BDC5A379CF534765E3648E47369FA9B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:61:52:e1:2b:24:c6:6d:3a:2a:22:e1:33:
                    d5:a1:21:f4:b2:e3:6d:c4:f2:a7:d0:dc:04:5e:e3:
                    ac:23:ca:55:cb:f0:d0:bf:42:11:ee:e9:83:ab:6a:
                    4f:51:86:ae:c9:61:e8:02:49:bf:57:66:6d:7f:dd:
                    db:0e:b2:9c:ea:7d:9f:b5:62:61:7e:43:74:ea:90:
                    87:20:0a:fc:87:c0:de:d5:38:4d:e2:57:23:53:e3:
                    c1:95:fc:7f:77:4e:20:ac:df:10:62:72:29:45:87:
                    d7:8f:d0:15:77:26:70:b4:aa:00:04:61:43:6d:27:
                    f2:8e:56:f3:10:99:b7:b5:83:81:16:72:f9:bd:6c:
                    92:48:76:3b:88:a4:85:f3:f9:8c:1d:9f:2c:59:2d:
                    1f:61:a8:31:49:f9:64:2c:65:ac:65:df:41:97:ed:
                    2c:bf:22:c7:7c:2b:4d:32:43:27:2e:a3:59:5f:5c:
                    30:a7:11:e5:e1:48:dc:7b:81:98:5c:6d:be:ae:28:
                    71:1d:c7:bd:43:de:51:2b:02:e7:ff:70:35:8d:97:
                    6e:06:0e:de:3f:b4:68:4a:10:ef:01:e5:4b:a6:91:
                    6e:92:e1:29:a5:31:50:c2:f4:c1:09:87:ee:60:98:
                    ea:6e:31:35:18:0a:8b:cf:40:15:7b:2d:b7:28:e8:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:AB:1B:DC:5A:37:9C:F5:34:76:5E:36:48:E4:73:69:FA:9B:50
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3232342e302f31392d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:8e:f6:7d:ec:72:78:1f:0c:fd:67:26:a6:9e:85:fc:a8:
         64:0b:f4:7a:b4:81:cb:80:c2:fe:72:42:dd:94:29:8d:16:63:
         4d:a9:e3:9c:0b:8f:c0:30:ff:68:67:68:d8:c9:b6:ee:33:33:
         34:1c:bf:13:8e:d4:fc:ee:1f:66:de:07:e7:1a:21:05:3a:02:
         63:f3:12:6b:e4:45:c6:bc:52:d0:81:45:c3:13:13:68:4f:de:
         89:90:11:f0:dd:7c:54:cf:59:fc:0d:d7:bf:e7:8c:b1:58:81:
         3b:1a:19:f2:f0:48:a9:7b:22:73:5d:08:a0:df:1c:d5:f9:14:
         4a:89:93:32:37:06:42:76:9c:0e:64:2e:0c:ed:ab:ad:ee:0a:
         d0:f4:bc:ba:88:79:d2:c1:40:6d:be:3e:33:18:b9:ec:07:78:
         e9:f5:07:8a:78:1c:29:ef:d0:e9:1d:d5:bf:9d:43:06:19:6b:
         21:e9:2a:d7:08:e7:3e:a0:eb:71:cf:b0:01:9a:44:c2:a4:ea:
         c2:28:58:cf:86:9a:8e:19:da:4f:ce:6f:ae:96:ee:54:0b:c8:
         2c:8d:9c:8b:0f:95:b2:a2:06:9f:1c:b3:1a:29:8d:51:17:5e:
         94:ee:ee:1e:c3:c4:6d:df:23:dc:e9:73:af:3b:1f:2c:ce:24:
         5d:15:9c:ad
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUX8AczrcpP0voC5FSCUVHIklW13AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNjAxMDYxOTM1NDRaFw0yNzAxMDUxOTQwNDRaMDMxMTAvBgNV
BAMTKDJGQzZBQjFCREM1QTM3OUNGNTM0NzY1RTM2NDhFNDczNjlGQTlCNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79WFS4Sskxm06KiLhM9WhIfSy
423E8qfQ3ARe46wjylXL8NC/QhHu6YOrak9Rhq7JYegCSb9XZm1/3dsOspzqfZ+1
YmF+Q3TqkIcgCvyHwN7VOE3iVyNT48GV/H93TiCs3xBicilFh9eP0BV3JnC0qgAE
YUNtJ/KOVvMQmbe1g4EWcvm9bJJIdjuIpIXz+YwdnyxZLR9hqDFJ+WQsZaxl30GX
7Sy/Isd8K00yQycuo1lfXDCnEeXhSNx7gZhcbb6uKHEdx71D3lErAuf/cDWNl24G
Dt4/tGhKEO8B5UumkW6S4SmlMVDC9MEJh+5gmOpuMTUYCovPQBV7Lbco6CDfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUL8arG9xaN5z1NHZeNkjkc2n6m1AwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMyMzAzMTJlMzEzNzM0MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMzMyMzAzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFya7g
MA0GCSqGSIb3DQEBCwUAA4IBAQAuEY72fexyeB8M/Wcmpp6F/KhkC/R6tIHLgML+
ckLdlCmNFmNNqeOcC4/AMP9oZ2jYybbuMzM0HL8TjtT87h9m3gfnGiEFOgJj8xJr
5EXGvFLQgUXDExNoT96JkBHw3XxUz1n8Dde/54yxWIE7Ghny8EipeyJzXQig3xzV
+RRKiZMyNwZCdpwOZC4M7aut7grQ9Ly6iHnSwUBtvj4zGLnsB3jp9QeKeBwp79Dp
HdW/nUMGGWsh6SrXCOc+oOtxz7ABmkTCpOrCKFjPhpqOGdpPzm+ulu5UC8gsjZyL
D5WyogafHLMaKY1RF16U7u4ew8Rt3yPc6XOvOx8sziRdFZyt
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:06:54 2026 by rpki-client