This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e34342e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          RMFlzdgL+Aw8CNznrRbXn90fESQD2xHTQYISWn6kbnk=
Subject key identifier:   E5:D0:6A:17:8D:4C:BC:80:54:93:35:8D:EC:72:7C:9B:CF:EE:C6:70
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7B04588BC22D647741D967DDDA1304843ED556A8
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:54 +0000
ROA not before:           Tue 06 Jan 2026 19:35:54 +0000
ROA not after:            Tue 05 Jan 2027 19:40:54 +0000
asID:                     32098
IP address blocks:        201.174.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:58:8b:c2:2d:64:77:41:d9:67:dd:da:13:04:84:3e:d5:56:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:54 2026 GMT
            Not After : Jan  5 19:40:54 2027 GMT
        Subject: CN=E5D06A178D4CBC805493358DEC727C9BCFEEC670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:8b:28:ac:8c:bf:19:c4:45:f4:25:0f:61:
                    d5:16:fd:2a:4a:8e:f6:20:36:f0:d1:25:58:bd:3a:
                    42:78:83:8d:94:09:ac:06:a2:93:83:3f:85:b3:31:
                    37:a0:e2:74:44:65:72:fb:d7:c2:2e:46:94:a0:55:
                    ce:63:05:95:77:2a:95:3a:cf:43:d6:00:9a:ba:05:
                    a0:92:f1:cd:ed:d4:3f:a8:fe:7d:89:ab:15:80:ff:
                    59:9d:a5:f9:ec:e4:76:7d:ab:eb:3b:d2:a7:1c:fe:
                    e2:48:65:b5:c6:2b:15:19:bd:46:67:cb:35:df:0a:
                    79:e6:c8:e3:97:c8:91:6d:41:dc:65:4b:ce:0c:24:
                    ba:1f:55:7d:97:cf:dd:46:35:8e:db:8d:07:98:a9:
                    25:07:6f:8c:98:45:ac:4d:ab:ee:f0:1d:f8:d2:bc:
                    3d:21:c5:93:b7:f9:e1:8c:a6:92:b7:80:ff:6d:24:
                    60:4e:83:85:60:0f:63:0e:bb:32:ef:7b:04:65:1c:
                    75:9f:fc:79:30:3f:38:37:8b:5a:9e:0b:cf:e4:a7:
                    30:22:f1:37:61:ac:4d:44:58:94:9f:fd:0f:66:51:
                    f4:b6:87:f0:3c:44:d4:95:87:a1:be:95:25:fe:82:
                    30:4a:07:c1:8c:30:94:ee:ed:54:4e:44:ef:9f:06:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D0:6A:17:8D:4C:BC:80:54:93:35:8D:EC:72:7C:9B:CF:EE:C6:70
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e34342e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:8a:9d:db:f5:fa:8f:f4:31:d5:6f:c6:2c:1c:f3:63:5e:
         c6:37:2f:8d:90:60:50:14:53:fe:bc:53:4e:ac:31:25:8a:dd:
         89:7a:a4:b5:4b:45:97:6a:61:71:b3:71:9c:f4:2b:7a:86:c6:
         8f:da:55:aa:31:86:1e:0b:60:e5:72:c2:87:9b:b2:91:6a:d9:
         ff:20:07:91:d6:0e:f8:88:00:42:c6:b0:f1:89:ab:8a:bd:b1:
         de:b0:4a:0d:09:9b:c0:a4:bc:36:99:e7:ca:48:82:8d:e9:ac:
         5e:81:37:e7:a9:1c:cd:8c:41:c1:bf:15:09:93:e3:aa:42:06:
         3b:e1:17:3d:1d:66:86:b3:3c:c7:c6:d7:14:27:8e:88:61:77:
         61:05:bb:c1:20:71:ce:d0:87:cb:03:02:b0:e9:46:f7:6b:e3:
         fb:a1:2a:0f:2c:a6:63:db:fe:cf:97:5d:8d:90:f3:ae:c1:c9:
         e0:b7:91:c4:dd:12:c0:e2:77:0c:63:49:33:3c:03:6a:2d:c1:
         7b:db:97:da:a9:91:ca:f9:5c:05:d2:1c:e5:a6:3c:78:fc:3c:
         b0:ae:a7:a0:9a:48:3d:a5:c6:24:e3:01:d6:72:e6:43:81:34:
         6f:ca:8e:b1:b2:02:c6:8c:82:f7:2d:42:73:6d:25:f0:0e:90:
         34:98:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:38:03 2026 by rpki-client