This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa
File:                     3231332e3233362e362e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier:          N0bnMium7b7vxeew2tN+xySgCwo9UdgJa/jNGCap9iI=
Subject key identifier:   B8:18:73:6A:16:73:3D:A7:98:4C:03:25:45:EC:6F:9C:72:7D:7D:11
Certificate issuer:       /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial:       01CC050B42AD38880EB29EAC7C8501727E5488DC
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa
Signing time:             Tue 30 Dec 2025 14:56:46 +0000
ROA not before:           Tue 30 Dec 2025 14:51:46 +0000
ROA not after:            Tue 29 Dec 2026 14:56:46 +0000
asID:                     274010
IP address blocks:        213.236.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cc:05:0b:42:ad:38:88:0e:b2:9e:ac:7c:85:01:72:7e:54:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
        Validity
            Not Before: Dec 30 14:51:46 2025 GMT
            Not After : Dec 29 14:56:46 2026 GMT
        Subject: CN=B818736A16733DA7984C032545EC6F9C727D7D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:95:63:b3:c0:fb:d1:30:86:9e:01:3f:eb:
                    d0:48:8c:d2:3d:6e:c0:af:72:a8:29:e4:bd:1b:fa:
                    2c:d2:92:93:ba:15:5e:7d:c1:27:95:0b:02:96:73:
                    91:b9:a0:65:6d:38:d6:dc:14:56:91:3f:e1:4e:32:
                    f0:22:cf:29:bf:79:e6:f2:c4:e0:ec:d4:de:11:e6:
                    bb:32:d8:10:fb:5f:47:09:41:bc:8d:e4:90:a6:c0:
                    7d:c7:40:97:d2:c5:b2:b5:a2:de:84:c3:7e:4a:d7:
                    d7:45:5a:52:4a:a5:5c:f4:0c:f7:06:b7:0d:ac:7d:
                    82:37:b9:4d:2b:62:cc:ae:74:49:c6:e2:c5:1f:45:
                    47:8d:cd:42:b9:60:ba:6a:f0:0a:42:a4:3d:a0:41:
                    81:55:18:3d:3f:bb:71:d5:72:26:09:03:13:d9:c0:
                    e0:97:c9:5b:7b:eb:a4:22:4f:88:db:6e:92:64:3b:
                    69:9b:52:7a:34:fa:b1:3e:c2:1a:2c:37:49:a7:d2:
                    fa:65:f9:da:06:eb:fa:d4:8c:78:8e:db:bb:4a:46:
                    80:64:73:2c:a5:70:a6:5c:a2:f0:82:a9:d4:8a:47:
                    72:4b:24:ad:0f:4a:94:bc:32:54:a4:f5:2c:0b:c9:
                    5d:2b:9e:57:cc:f7:6e:f9:b3:39:45:1c:f5:b3:d2:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:18:73:6A:16:73:3D:A7:98:4C:03:25:45:EC:6F:9C:72:7D:7D:11
            X509v3 Authority Key Identifier:
                keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e362e302f32342d3234203d3e20323734303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.236.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:06:a9:9e:93:71:3a:d4:d7:8a:bf:15:01:56:6e:b1:b8:
         64:1f:62:4e:ba:8a:79:50:e5:f7:51:8d:87:33:c5:00:4f:f5:
         5f:71:1e:b7:70:59:6f:21:35:fc:aa:e8:58:5d:06:d8:e7:66:
         57:a7:70:33:ec:7d:d5:e9:d9:ef:bc:29:be:9b:58:58:25:a0:
         fc:4b:99:76:9e:b8:da:65:ad:cf:64:e5:b1:d3:a5:a0:79:70:
         d2:21:75:70:3d:76:5a:1b:bb:30:5e:ad:54:4e:13:ee:56:18:
         44:fd:3a:66:89:f2:d1:af:20:fb:07:46:f9:83:6c:e6:17:da:
         b1:62:3e:c9:61:de:52:1a:e2:88:9b:2f:0c:75:ae:cf:71:e2:
         75:a8:7e:04:b3:91:6d:05:8d:7b:46:23:7a:ad:20:f1:74:52:
         85:ee:90:1d:f5:2a:97:56:75:c9:1d:19:c5:d8:1e:59:ef:dc:
         05:40:19:21:c3:8a:8f:74:4a:98:f0:80:5d:1f:1e:02:38:1b:
         4b:0b:b3:fb:ad:75:d1:9a:0c:5d:db:71:60:97:55:b9:97:ea:
         6a:60:15:ef:b6:88:b0:4e:30:7d:9f:05:18:62:2d:45:9a:2f:
         b7:c0:9e:94:c8:20:c3:7b:41:1d:fc:a2:47:e2:6c:81:78:80:
         7f:91:01:a6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAcwFC0KtOIgOsp6sfIUBcn5UiNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU5NTdENDc5MEI1M0Y4RUI0NkE2MkMxQTQwQTdDOUQ3
RTREQjAzMDAeFw0yNTEyMzAxNDUxNDZaFw0yNjEyMjkxNDU2NDZaMDMxMTAvBgNV
BAMTKEI4MTg3MzZBMTY3MzNEQTc5ODRDMDMyNTQ1RUM2RjlDNzI3RDdEMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcJVjs8D70TCGngE/69BIjNI9
bsCvcqgp5L0b+izSkpO6FV59wSeVCwKWc5G5oGVtONbcFFaRP+FOMvAizym/eeby
xODs1N4R5rsy2BD7X0cJQbyN5JCmwH3HQJfSxbK1ot6Ew35K19dFWlJKpVz0DPcG
tw2sfYI3uU0rYsyudEnG4sUfRUeNzUK5YLpq8ApCpD2gQYFVGD0/u3HVciYJAxPZ
wOCXyVt766QiT4jbbpJkO2mbUno0+rE+whosN0mn0vpl+doG6/rUjHiO27tKRoBk
cyylcKZcovCCqdSKR3JLJK0PSpS8MlSk9SwLyV0rnlfM9275szlFHPWz0leFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuBhzahZzPaeYTAMlRexvnHJ9fREwHwYDVR0j
BBgwFoAUvpV9R5C1P460amLBpAp8nX5NsDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTVBQ0RERjQ3RTRBMDc1RDYxMTk3QjFBRTYwMDc3NTRC
NTBEQzgyOEM3M0JCQzY5MkNEQzdEMjI1RUZEODAwLzAvQkU5NTdENDc5MEI1M0Y4
RUI0NkE2MkMxQTQwQTdDOUQ3RTREQjAzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTk1N0Q0NzkwQjUzRjhFQjQ2
QTYyQzFBNDBBN0M5RDdFNERCMDMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDU1QUNEREY0N0U0QTA3NUQ2MTE5N0IxQUU2MDA3NzU0QjUwREM4MjhD
NzNCQkM2OTJDREM3RDIyNUVGRDgwMC8wLzMyMzEzMzJlMzIzMzM2MmUzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNDMwMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXsBjAN
BgkqhkiG9w0BAQsFAAOCAQEAb8UGqZ6TcTrU14q/FQFWbrG4ZB9iTrqKeVDl91GN
hzPFAE/1X3Eet3BZbyE1/KroWF0G2OdmV6dwM+x91enZ77wpvptYWCWg/EuZdp64
2mWtz2TlsdOloHlw0iF1cD12Whu7MF6tVE4T7lYYRP06Zony0a8g+wdG+YNs5hfa
sWI+yWHeUhriiJsvDHWuz3Hidah+BLORbQWNe0Yjeq0g8XRShe6QHfUql1Z1yR0Z
xdgeWe/cBUAZIcOKj3RKmPCAXR8eAjgbSwuz+6110ZoMXdtxYJdVuZfqamAV77aI
sE4wfZ8FGGItRZovt8CelMggw3tBHfyiR+JsgXiAf5EBpg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:16 2026 by rpki-client