This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa
File:                     3230312e3137352e352e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          tFwRBZQAXk+zqzokK0HnSdZhM1TLYH9AVq2AM2fBHKY=
Subject key identifier:   A3:0F:8D:9B:50:FA:ED:F7:A4:FD:FB:E2:13:92:CB:56:D9:D3:28:AA
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       3EC3C2EE1AB45C980DE61F848484ACD2434B7439
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:07:03 +0000
ROA not before:           Tue 06 Jan 2026 19:02:03 +0000
ROA not after:            Tue 05 Jan 2027 19:07:03 +0000
asID:                     22011
IP address blocks:        201.175.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 04:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c3:c2:ee:1a:b4:5c:98:0d:e6:1f:84:84:84:ac:d2:43:4b:74:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jan  6 19:02:03 2026 GMT
            Not After : Jan  5 19:07:03 2027 GMT
        Subject: CN=A30F8D9B50FAEDF7A4FDFBE21392CB56D9D328AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:da:15:77:3d:f7:a8:ad:72:9d:c3:ad:be:
                    8e:da:75:98:a0:b5:3b:c6:d0:35:6f:15:7d:95:77:
                    34:e9:99:11:d2:84:be:17:28:0c:22:5b:ff:c8:df:
                    f9:3d:d9:26:ef:a4:e4:e6:e6:4e:cf:ce:a9:92:1a:
                    53:73:32:6b:a8:e4:a0:bb:88:63:59:2a:3c:c6:0c:
                    40:77:7d:cd:32:14:a3:14:f4:7a:51:cd:b5:f6:ae:
                    36:57:e9:22:34:a6:04:6f:3d:d7:12:63:d7:73:ec:
                    1a:25:dd:89:d6:d8:2a:67:66:2b:79:76:33:da:e4:
                    cf:4a:0c:d6:6e:c6:2c:ea:af:82:34:bf:e5:4c:97:
                    d0:61:94:47:0e:4f:40:cc:eb:51:02:ba:aa:5e:76:
                    f8:fb:cc:ce:f6:33:4c:23:83:5f:9e:c9:e7:18:70:
                    0d:96:ba:0a:59:d3:c1:4e:63:e2:52:cd:55:1b:d2:
                    20:0c:29:95:c0:29:d1:9d:ad:c2:82:20:69:89:f9:
                    7c:c6:ff:6d:07:2d:c6:a2:25:14:42:f6:07:85:75:
                    79:f5:2d:00:e3:3b:55:b0:1b:36:f0:ae:81:f4:82:
                    6f:e8:91:ec:5f:6e:54:09:c8:f1:c1:ec:6f:a9:4a:
                    40:7b:1c:7a:0b:b1:9e:99:2a:31:e3:ce:b9:30:43:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:8D:9B:50:FA:ED:F7:A4:FD:FB:E2:13:92:CB:56:D9:D3:28:AA
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3230312e3137352e352e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:05:d3:09:af:59:97:37:c0:d1:b5:fd:33:84:94:98:a4:
         a8:e6:2f:58:37:ab:14:13:f3:6e:f2:e2:db:b1:39:af:06:bd:
         45:3c:2f:61:82:d5:0e:03:31:d6:d6:eb:ad:21:28:98:7d:09:
         c4:3c:b9:bf:99:77:c2:d4:a9:05:68:5c:0d:6b:8f:8d:3e:0e:
         dc:99:b4:3e:a8:90:77:49:22:b3:e0:23:4b:8e:8f:0c:ef:7c:
         1a:2e:df:5a:a1:6e:eb:c5:de:11:1d:be:83:22:2a:76:3b:36:
         7a:78:21:8c:aa:73:83:48:60:99:62:d9:af:ab:e0:20:cb:13:
         19:95:7c:98:64:e3:35:67:72:38:a5:f5:88:31:bf:48:60:09:
         55:0a:1e:e1:a5:2b:05:a4:c9:4d:89:2c:d4:db:5c:7a:6d:01:
         9f:24:75:07:f3:24:ac:0d:ac:fd:ce:03:f1:e8:28:15:3a:b4:
         0c:d3:68:89:5f:92:5a:fb:c7:32:9a:48:14:95:d5:88:c6:77:
         88:75:bd:39:95:10:eb:3d:33:2a:59:d6:83:50:37:66:83:32:
         9f:67:6f:6b:01:37:4a:93:b9:51:1a:78:cc:8f:b4:62:91:26:
         df:46:81:71:b9:6e:97:90:58:ec:91:15:84:b4:7c:ef:79:ac:
         c6:b0:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 18:29:41 2026 by rpki-client