This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3133312e342e302f32342d3234203d3e2037343338.roa
File:                     3230312e3133312e342e302f32342d3234203d3e2037343338.roa (raw, json)
Hash identifier:          igrw1R5n1lRkHlS2Pinn/jXEEkTFdw2uXtrH9ph7VFw=
Subject key identifier:   05:6D:A1:20:D3:8B:88:77:EB:88:E1:96:4E:44:A2:4B:81:62:4F:17
Certificate issuer:       /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial:       2B372F071092F24DDA1908D1125AB8219BE5D026
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3133312e342e302f32342d3234203d3e2037343338.roa
Signing time:             Tue 06 Jan 2026 20:56:35 +0000
ROA not before:           Tue 06 Jan 2026 20:51:35 +0000
ROA not after:            Tue 05 Jan 2027 20:56:35 +0000
asID:                     7438
IP address blocks:        201.131.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:2f:07:10:92:f2:4d:da:19:08:d1:12:5a:b8:21:9b:e5:d0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
        Validity
            Not Before: Jan  6 20:51:35 2026 GMT
            Not After : Jan  5 20:56:35 2027 GMT
        Subject: CN=056DA120D38B8877EB88E1964E44A24B81624F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:08:8d:a6:35:47:44:26:92:bd:da:8a:3a:
                    16:0e:60:d6:8b:90:5b:b8:83:04:ca:af:11:8e:80:
                    69:15:be:24:f7:0d:d9:a7:e8:38:00:46:5f:fe:82:
                    4e:58:84:4a:c3:b8:c1:6e:a1:1a:57:de:15:e5:7a:
                    16:91:87:38:cc:35:25:30:2e:e9:90:c4:e3:b0:24:
                    c8:0d:59:b9:06:e8:b1:93:29:70:c9:4b:a9:69:92:
                    90:38:f2:c4:69:96:b8:3f:c1:35:6b:25:3a:87:5f:
                    bf:db:34:0a:89:8f:bf:55:fc:d7:f7:aa:f0:df:16:
                    2c:3b:de:24:f1:c6:64:78:de:9e:1a:71:c3:c2:ae:
                    d1:42:aa:53:38:67:5a:1e:c7:f0:46:b8:ae:ea:4b:
                    dc:be:8e:87:01:3e:f8:94:8f:30:d7:ee:64:66:28:
                    f8:0c:cf:2e:1a:fe:74:6f:fa:8e:9e:0e:46:3a:ab:
                    88:05:5b:79:43:f4:ed:90:44:f9:81:c4:8a:cf:c6:
                    4a:70:e1:2d:79:7b:6f:fc:f6:c0:f0:2e:6b:6f:43:
                    c5:09:eb:70:7f:13:6f:c4:e1:26:7a:13:0e:a5:0d:
                    91:94:7a:ac:cd:57:0e:9a:51:c4:d0:5a:3c:a3:3d:
                    a8:b7:df:32:6a:b9:eb:dc:07:2e:3f:d1:ee:04:d7:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6D:A1:20:D3:8B:88:77:EB:88:E1:96:4E:44:A2:4B:81:62:4F:17
            X509v3 Authority Key Identifier:
                keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3230312e3133312e342e302f32342d3234203d3e2037343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9f:3f:02:99:aa:14:8b:65:87:88:13:68:cc:52:da:ad:59:
         11:d2:37:1e:19:8b:61:43:54:aa:df:ad:eb:a2:93:50:87:9d:
         09:20:13:ae:76:88:c5:81:8c:02:f4:4b:62:ae:10:fa:97:4a:
         49:9c:7d:9d:bc:6d:3e:f1:12:cd:80:8e:8e:dd:31:37:1c:18:
         df:31:e5:61:a6:98:87:a1:d4:10:b9:6a:a1:78:a4:61:e3:de:
         15:f5:10:81:7b:e8:d6:36:40:e9:6e:b1:06:f2:87:ea:50:1d:
         18:91:57:32:fa:22:e7:c2:9d:e5:1a:81:ae:98:6b:46:75:5b:
         27:bd:d7:86:a2:da:2e:cf:d1:f8:dc:31:2a:e2:71:db:08:75:
         8b:9d:82:93:a9:3a:f9:0f:15:7a:a4:d0:04:61:e2:d8:ea:85:
         b5:be:94:be:1e:8c:68:a2:10:79:69:a7:34:1d:fa:ef:a4:ae:
         11:05:84:4e:cf:6e:74:18:c8:2d:be:a9:a6:94:cd:49:8f:db:
         16:4c:44:86:f3:7a:10:d8:4c:a2:d8:01:65:39:32:d4:59:57:
         18:0d:0b:16:3d:12:68:d8:07:ec:03:b3:38:db:7b:ec:66:79:
         36:46:95:bc:14:d8:a2:f8:7c:4a:17:6e:22:9e:02:5f:66:fc:
         5c:61:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:48 2026 by rpki-client