This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
File:                     3230312e3137342e39362e302f32322d3234203d3e203332303938.roa (raw, json)
Hash identifier:          yYK4ywVg7Dv/dW4B0zMgXV8Wtes6a0JzyRBDnR+1X0o=
Subject key identifier:   6B:F2:05:14:56:55:99:75:88:2A:3C:76:3D:77:15:43:02:D7:29:EF
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       528265F7F74D147C8D6559821EF87396935961EC
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:53 +0000
ROA not before:           Tue 06 Jan 2026 19:35:53 +0000
ROA not after:            Tue 05 Jan 2027 19:40:53 +0000
asID:                     32098
IP address blocks:        201.174.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:82:65:f7:f7:4d:14:7c:8d:65:59:82:1e:f8:73:96:93:59:61:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:53 2026 GMT
            Not After : Jan  5 19:40:53 2027 GMT
        Subject: CN=6BF2051456559975882A3C763D77154302D729EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:39:d7:a9:b0:f6:fb:09:16:dd:91:30:93:
                    de:30:31:7e:31:9f:85:70:d9:92:a1:aa:15:92:38:
                    d8:11:b0:76:c9:1a:24:6e:3e:b7:d5:14:6d:22:b2:
                    a6:dd:27:48:ba:9d:9d:18:18:1c:c6:3d:b8:4e:92:
                    b1:20:30:a5:a4:c7:95:21:41:b7:20:47:6d:01:f2:
                    dd:a0:a5:00:80:c4:2d:61:dd:45:c8:27:ad:c5:52:
                    29:40:2c:0c:d9:5f:ca:68:01:08:53:bd:15:16:47:
                    37:28:53:c4:25:30:8e:2f:1e:a9:7d:b5:8f:d4:db:
                    a3:31:7f:e6:47:f6:88:ce:29:af:7e:60:95:8c:c5:
                    ba:0c:c2:9e:6a:f2:38:b7:f2:b8:d9:0e:74:ea:b4:
                    98:49:a4:c0:c5:71:51:d6:e9:21:7c:71:16:c1:25:
                    90:91:a1:24:22:12:c4:b2:80:13:67:d2:2d:db:dc:
                    52:fb:53:e1:11:af:82:8f:85:1c:fd:f5:4b:9c:45:
                    44:a7:a0:99:ba:73:db:45:95:65:5e:22:f5:a4:05:
                    d0:c4:df:28:2a:dd:f9:7f:65:61:f3:1c:e0:e4:9b:
                    e2:94:09:be:83:54:77:a6:86:5d:db:fc:87:fc:14:
                    14:95:e0:a5:d6:9e:00:a7:ef:fd:86:d2:56:08:eb:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F2:05:14:56:55:99:75:88:2A:3C:76:3D:77:15:43:02:D7:29:EF
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e39362e302f32322d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:a3:75:19:09:5d:7f:ec:a4:5a:6e:59:35:ba:0c:f3:f7:
         83:85:2b:db:fd:28:fd:93:6a:7f:4d:d3:74:31:b2:0e:8d:8c:
         51:49:eb:f2:9b:89:56:32:f7:e4:d5:e4:0e:6c:98:0a:f6:df:
         ae:03:a3:71:d8:11:1d:bb:ef:68:0f:5b:b2:8b:ec:81:cf:c1:
         bd:8f:02:06:a6:50:37:1b:d3:ec:8e:03:82:cc:2b:f1:d0:ec:
         d8:94:a3:40:81:c4:a1:9c:19:44:44:77:26:db:09:90:68:c9:
         1c:41:54:36:2f:93:01:a7:3c:99:d8:03:a9:9d:82:8a:41:ce:
         f1:b1:ef:38:7a:3f:0e:0a:db:61:9c:0f:a9:49:c2:c1:51:8e:
         4a:9a:5b:43:bc:aa:ba:d1:d6:13:20:ec:1f:88:a0:ec:8a:cc:
         bb:c9:9c:2b:c3:d3:6e:84:04:50:09:5e:4c:4c:79:af:39:19:
         cb:6b:df:82:c9:d3:35:96:5c:47:88:d9:fd:6e:be:b9:ba:4c:
         08:87:0e:60:8e:d6:b7:3d:48:9b:80:68:f3:a4:1d:56:02:59:
         06:6a:04:51:af:2f:cf:6d:01:19:a9:8b:4c:d1:01:03:47:fe:
         34:62:ee:e0:69:64:9c:63:17:21:75:e8:ed:94:b3:0e:06:82:
         16:bd:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:25 2026 by rpki-client