This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
File:                     3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa (raw, json)
Hash identifier:          Y5pQWbfMp5Wr6vslJJ/GITIgOdPeRfZAC2HLRaj18wI=
Subject key identifier:   FA:96:F6:07:96:E8:F6:B9:24:0F:7C:33:C9:4D:D1:F5:DC:44:07:33
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       4F81F76D702958993F799871BBEF139B144B5986
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa
Signing time:             Tue 06 Jan 2026 20:56:44 +0000
ROA not before:           Tue 06 Jan 2026 20:51:44 +0000
ROA not after:            Tue 05 Jan 2027 20:56:44 +0000
asID:                     28015
IP address blocks:        201.217.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:f7:6d:70:29:58:99:3f:79:98:71:bb:ef:13:9b:14:4b:59:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Jan  6 20:51:44 2026 GMT
            Not After : Jan  5 20:56:44 2027 GMT
        Subject: CN=FA96F60796E8F6B9240F7C33C94DD1F5DC440733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:b2:c0:c0:1e:67:77:7e:f1:d6:40:31:8b:
                    93:df:94:47:ba:22:b5:9a:11:67:18:cb:86:08:28:
                    f3:34:fd:cf:69:f6:82:45:fd:b9:49:d3:ed:db:84:
                    f6:cc:69:22:50:ae:73:9c:61:bf:fa:22:81:c1:9d:
                    61:11:77:7b:43:f0:19:88:63:1c:bc:ad:99:24:dd:
                    ba:33:67:15:ac:69:1c:4d:dc:21:5e:7f:e8:7c:f9:
                    d6:7f:a5:db:dd:63:f1:67:12:26:69:1b:48:3b:8e:
                    3d:57:74:ea:bb:f3:25:40:29:e4:e0:cd:80:93:ec:
                    3a:9a:da:dd:3a:4a:af:47:74:22:90:60:21:8b:77:
                    54:a6:73:30:a9:ea:86:d1:d0:23:36:e5:a7:eb:9f:
                    44:63:12:a6:87:d8:6d:5e:96:6e:99:a3:58:71:5e:
                    6a:db:1e:1f:af:52:54:76:38:81:c4:02:5a:7a:44:
                    84:76:10:f5:56:3c:99:ec:98:fc:38:85:33:cd:49:
                    fa:70:3b:01:9c:ef:b0:5a:6c:4a:d3:d7:0d:e2:c2:
                    0d:46:40:a8:b7:80:da:2d:df:8f:12:e8:0d:74:22:
                    94:0a:9d:90:cd:b9:2b:45:c1:6c:d4:6e:04:7f:38:
                    a0:c6:3d:3e:f7:63:01:d3:25:b4:eb:8a:01:19:6d:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:96:F6:07:96:E8:F6:B9:24:0F:7C:33:C9:4D:D1:F5:DC:44:07:33
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231372e3232342e302f32302d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:73:da:a5:8e:dd:93:1f:13:5a:36:1b:cb:20:09:6d:eb:6f:
         95:63:90:0c:b4:d9:9c:40:71:5a:6c:0f:11:b4:69:04:04:0b:
         a8:0b:5b:03:fd:f2:f5:e4:da:db:7e:fc:8d:f2:69:5f:9b:7e:
         65:11:b1:b4:a2:7a:20:c5:1d:e8:c3:67:8a:b5:fe:e3:af:c0:
         55:0d:7c:9f:53:78:fe:ca:de:82:90:91:73:4e:a8:9d:44:a3:
         c6:e5:97:cc:76:e3:fa:b4:89:e3:7a:ee:82:8b:0c:0b:5d:4b:
         80:ac:0d:a6:95:bc:1a:c0:6f:54:37:78:cd:70:64:b8:c0:d3:
         26:5c:f7:57:dc:0f:8d:d9:55:a5:31:a9:f8:23:1f:f0:cf:3c:
         b3:ac:24:9a:11:8c:59:2f:c3:79:3c:53:d0:ab:1a:ca:fc:e1:
         0f:68:25:6c:04:3e:b6:67:7d:68:5c:41:b8:98:d2:70:e8:fe:
         79:11:aa:cd:92:8b:12:2a:41:9d:89:66:07:c1:2f:09:fc:99:
         76:3c:ae:cc:44:6c:d7:3d:16:b0:08:55:d9:d1:c3:03:56:e3:
         cd:89:2f:06:55:55:49:59:77:6b:b1:14:6b:47:41:2c:eb:1d:
         0f:2d:6c:91:14:c8:49:b1:84:92:be:fd:8a:a8:ea:fe:cf:e0:
         26:f4:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:29 2026 by rpki-client