This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa
File:                     3231362e3234312e332e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          atLFfe1yzYaHJh5OfYsTn036al4bgKBwlDU4Z+ugBCE=
Subject key identifier:   EE:9B:F0:AE:B7:AC:71:6F:38:CC:E0:BE:58:7C:88:E0:A1:29:3E:61
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       52DEFBE3296F309493B76AE303C70D60FFD7C911
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 06 Jan 2026 19:19:20 +0000
ROA not before:           Tue 06 Jan 2026 19:14:20 +0000
ROA not after:            Tue 05 Jan 2027 19:19:20 +0000
asID:                     20015
IP address blocks:        216.241.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:de:fb:e3:29:6f:30:94:93:b7:6a:e3:03:c7:0d:60:ff:d7:c9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Jan  6 19:14:20 2026 GMT
            Not After : Jan  5 19:19:20 2027 GMT
        Subject: CN=EE9BF0AEB7AC716F38CCE0BE587C88E0A1293E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:e3:49:0c:8f:85:c2:78:30:d9:58:11:0c:
                    a0:f7:51:eb:18:88:2b:1f:16:86:b4:8b:c3:a1:8d:
                    d6:5b:61:60:9d:41:07:c5:6f:5a:15:d5:98:12:7d:
                    31:e5:fd:6f:77:f3:c2:63:14:3a:c2:2e:5a:85:0f:
                    fa:a0:7b:b7:bb:c5:e1:6c:1f:35:4f:aa:d1:86:03:
                    0e:92:84:03:10:04:90:95:3e:82:b6:31:ad:bf:18:
                    cd:81:89:c4:c2:52:c1:2f:9f:3b:b8:48:09:1d:52:
                    12:34:f0:8a:36:19:af:0a:0f:c9:de:06:5a:a4:71:
                    a0:85:cd:43:f4:c3:be:f5:8c:62:a9:b8:f1:32:c0:
                    bd:97:9f:d8:2d:1b:4c:53:17:97:36:53:3f:ad:1a:
                    cf:f4:a3:9b:05:28:01:51:ee:1c:fa:f8:d7:57:d2:
                    98:55:09:06:fb:db:96:b9:99:16:ae:30:41:7a:47:
                    52:85:86:c2:f4:67:f5:62:59:68:b3:ca:17:fa:f9:
                    93:70:5f:94:93:58:a6:31:33:f8:92:2b:9f:69:b1:
                    79:ce:1a:57:9f:df:dd:3d:f7:d2:42:98:3e:29:84:
                    7e:3e:48:37:7d:10:de:b6:c3:14:c6:63:38:23:33:
                    68:10:ef:c5:c5:a2:a8:65:d2:d3:67:4f:50:18:02:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9B:F0:AE:B7:AC:71:6F:38:CC:E0:BE:58:7C:88:E0:A1:29:3E:61
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e332e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:02:9b:8f:a9:b5:61:24:2c:7a:a3:e0:74:b7:63:67:5f:c0:
         c4:e2:b9:7d:42:bf:bd:cd:ca:ba:be:2e:f6:f4:22:82:5e:11:
         02:c1:4c:55:d5:cd:7e:64:b0:57:b3:6a:14:cf:46:d8:31:d3:
         85:63:2a:5c:90:ca:2e:9a:00:12:4b:d0:db:6d:46:2f:e1:6a:
         8c:c7:a4:ab:ad:b1:d8:3e:18:15:ef:05:e3:6f:75:b3:10:a7:
         77:45:a7:f9:19:37:07:25:d4:34:53:44:83:20:7e:40:30:93:
         9b:b0:62:ba:be:cb:bf:cb:f8:5a:1b:b2:14:f8:7a:f7:39:c1:
         a8:64:eb:f9:1f:f9:66:ec:81:ac:a9:7c:a1:75:31:60:9b:5f:
         41:be:f7:b2:73:79:16:5f:8d:a6:cb:d8:75:ff:86:9c:eb:e8:
         0a:f1:09:8e:20:1f:96:d0:cf:3f:a9:c8:26:6d:97:f3:a6:b4:
         50:6d:fd:3e:eb:1d:36:41:cf:b8:af:0d:5e:18:96:6b:00:d0:
         76:23:1b:dd:5e:7c:f4:58:72:d4:1d:0e:fc:fc:b7:95:51:5a:
         95:ff:87:60:c6:c3:b8:6e:66:31:75:28:81:20:2e:6a:e6:0d:
         ba:26:3e:94:24:46:19:44:66:4b:25:8e:a2:7e:cb:e3:2a:b9:
         68:57:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:06:51 2026 by rpki-client