This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36342e302f31392d3234203d3e203332303938.roa
File:                     3230312e3137342e36342e302f31392d3234203d3e203332303938.roa (raw, json)
Hash identifier:          bsZX4kicnN5ofyoZ+vEqZxAFNAi/7+tbr0RdLUy39Mw=
Subject key identifier:   E3:BF:52:ED:29:23:31:82:AA:38:0F:85:41:8E:A9:B6:E6:61:5B:F2
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       30912C6CF1E0A188D67199070C853169615E7BA8
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36342e302f31392d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:44 +0000
ROA not before:           Tue 06 Jan 2026 19:35:44 +0000
ROA not after:            Tue 05 Jan 2027 19:40:44 +0000
asID:                     32098
IP address blocks:        201.174.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:91:2c:6c:f1:e0:a1:88:d6:71:99:07:0c:85:31:69:61:5e:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:44 2026 GMT
            Not After : Jan  5 19:40:44 2027 GMT
        Subject: CN=E3BF52ED29233182AA380F85418EA9B6E6615BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:08:cf:f9:2d:3f:84:3d:80:c2:e8:94:5a:
                    7b:23:ec:ad:c3:02:dd:c4:34:be:e5:d5:41:a0:fd:
                    c5:ff:67:9a:9d:7e:c0:45:0f:a1:35:ab:d3:40:b8:
                    f7:6f:08:55:ae:c4:bf:13:0d:8c:66:bc:cb:75:2e:
                    d0:10:42:86:ff:69:f2:12:b1:e1:d8:d0:76:5e:49:
                    22:1c:8f:65:84:5c:f7:b0:38:bc:e0:77:1b:66:b8:
                    bf:5c:7a:04:ba:78:44:3b:df:06:15:1e:ea:59:dc:
                    ce:9f:14:f1:03:c2:a0:af:01:c0:6f:ac:6f:71:18:
                    a3:f5:5a:7f:e6:63:f0:35:26:d9:c6:e7:6d:eb:65:
                    7a:1f:55:61:d8:c4:93:9d:ac:e7:4c:03:50:ad:fd:
                    ef:66:49:b1:43:18:e7:84:22:29:0b:6e:5b:29:ff:
                    92:ed:66:12:5a:5d:8f:35:ed:ef:f6:c8:25:6a:23:
                    eb:1c:8f:3f:8f:51:47:f6:c8:e8:6c:f9:d4:09:18:
                    31:b7:c4:ae:96:7e:d5:12:a6:94:75:ed:a4:7c:1d:
                    61:f5:47:ed:d1:60:00:a9:90:fe:f3:36:3c:22:60:
                    9a:e4:06:9d:79:78:17:28:2c:37:fe:b0:ed:b0:23:
                    a3:b0:43:94:c9:ad:ba:8f:83:25:ec:3b:3b:c7:d2:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:52:ED:29:23:31:82:AA:38:0F:85:41:8E:A9:B6:E6:61:5B:F2
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36342e302f31392d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:19:9e:e9:f1:fd:67:d3:39:ba:f5:80:5f:b0:d5:8a:3e:
         40:1a:3a:e9:17:fb:15:9f:8e:ea:74:15:41:3a:8d:ee:a0:93:
         37:a1:9b:e4:64:4b:c5:ed:39:de:27:22:1f:2e:1c:84:cf:3f:
         f9:a8:2f:54:b1:1b:e1:5b:40:49:9f:46:72:6d:c2:59:5c:a8:
         70:7e:21:7c:a6:f7:f4:f2:62:0e:35:74:32:b7:de:d1:88:7d:
         00:df:6b:0f:f1:75:7e:f0:65:0b:e4:d8:c3:5a:29:3c:54:62:
         d9:1a:df:3e:53:1d:09:86:7c:f9:35:f8:3e:a5:72:47:d3:e1:
         1a:ad:33:fb:06:61:d6:85:a2:80:03:93:ad:d6:38:01:1b:cf:
         8a:41:76:38:48:53:45:5e:ef:eb:36:fe:26:57:61:29:5f:5e:
         82:e3:f1:28:75:3b:c8:b9:97:29:ab:b5:17:e7:aa:34:3b:c2:
         dc:b8:f2:25:60:d1:50:2d:f8:d3:e6:02:93:b2:fb:2f:e2:7b:
         91:e1:9c:2c:f9:ae:f1:73:a8:46:76:35:1d:63:22:2e:2c:3e:
         19:fd:28:15:31:89:38:b3:b5:57:67:24:96:17:62:9e:19:94:
         b1:4d:4e:b5:09:01:1f:e9:d6:be:d1:65:68:b8:c8:9b:6b:2a:
         51:29:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:29:54 2026 by rpki-client