This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          xezkecxL0VZ5X/2h3JwQXZR3o6+Yf71KD2B5PvtXrJ4=
Subject key identifier:   A8:11:FF:1C:0A:E4:09:BB:F3:D7:C2:F9:49:FF:6A:C4:67:BA:FC:62
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3C2FF44B024A5C1BE1F6B87FD3930398F2E1F83C
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 06 Jan 2026 19:45:04 +0000
ROA not before:           Tue 06 Jan 2026 19:40:04 +0000
ROA not after:            Tue 05 Jan 2027 19:45:04 +0000
asID:                     265615
IP address blocks:        201.151.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 13:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:f4:4b:02:4a:5c:1b:e1:f6:b8:7f:d3:93:03:98:f2:e1:f8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:04 2026 GMT
            Not After : Jan  5 19:45:04 2027 GMT
        Subject: CN=A811FF1C0AE409BBF3D7C2F949FF6AC467BAFC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:79:10:90:84:3b:9c:8b:8a:e0:9c:69:d5:
                    95:4d:86:d8:f5:f8:4d:e9:aa:37:64:aa:3c:e5:fc:
                    92:77:c3:70:86:79:c8:4e:b1:8b:bd:0b:3a:af:ef:
                    a8:ed:ca:8c:38:5a:65:99:c9:3c:1e:6a:f7:b7:6e:
                    cf:df:8a:b6:de:f4:33:2e:c7:92:63:f8:e7:6c:ab:
                    38:fe:9f:e2:76:bb:8e:eb:79:3b:28:4b:45:7c:e0:
                    b5:6a:06:cf:ed:9d:d5:40:fa:a1:ea:23:a8:eb:ac:
                    c9:fe:25:03:ad:64:fc:f5:0c:6c:6b:6e:33:b4:3b:
                    87:6f:7c:76:8b:42:3b:4f:b5:b4:9a:57:47:83:90:
                    6e:6d:dc:a7:29:92:38:2f:21:48:91:1b:cf:94:6f:
                    43:24:85:26:cb:08:c3:d9:68:02:01:cb:b2:e7:01:
                    0b:cf:8c:88:18:ee:29:85:22:e4:11:8d:63:0c:c7:
                    06:c2:de:40:60:92:f6:16:53:0d:b9:e5:0c:e6:94:
                    85:cb:a9:47:75:c0:c3:90:9c:c3:0d:e6:cd:71:0d:
                    4e:d8:5b:7a:34:76:d1:d7:3b:d1:eb:68:47:6d:63:
                    e4:60:a1:da:fc:21:a2:75:ef:75:e9:e9:79:a0:2a:
                    cd:1e:3d:ab:af:64:40:1e:2b:bd:96:21:f3:f3:8f:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:FF:1C:0A:E4:09:BB:F3:D7:C2:F9:49:FF:6A:C4:67:BA:FC:62
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3137382e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:ef:ce:80:c8:a1:47:89:86:68:12:5f:6c:e2:31:96:47:
         32:fa:98:ab:d3:d0:49:b3:d5:a3:e5:04:ea:05:77:38:47:6b:
         07:e1:49:a5:74:73:b6:f9:ee:8e:72:9f:d9:a9:b5:a4:89:8c:
         3d:2d:ac:40:76:03:8c:44:dd:66:bc:5b:e2:c7:01:40:41:5c:
         74:7a:17:9e:a2:47:64:ed:a8:cf:9e:1b:cd:1b:21:c4:7b:3a:
         6e:a0:5b:7c:3d:01:49:8e:7c:07:64:a6:db:e7:cc:cc:9a:91:
         8b:88:75:39:e7:26:d5:30:a9:b7:17:33:1d:0f:2c:59:86:3f:
         5f:85:da:ce:41:eb:9c:42:6a:81:99:88:c2:88:3a:09:a2:e7:
         12:cb:15:17:2d:fe:73:c2:98:da:81:e3:4b:10:59:95:3d:fe:
         cc:f6:5d:db:55:98:6e:ec:f9:1d:c4:bb:99:8e:f1:42:91:25:
         4f:7c:a9:35:4e:37:20:eb:a3:63:c9:8a:65:4e:1d:20:99:23:
         ca:82:b8:ca:b4:8d:70:f6:b0:b3:01:f1:4c:2e:ec:62:6f:c2:
         68:c9:a6:c5:ef:09:23:de:10:89:60:40:0a:5c:62:73:26:8c:
         ee:45:ed:f7:cc:38:fb:ce:b6:91:24:dc:4f:4a:6f:2c:8a:ff:
         b8:1f:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 12:25:27 2026 by rpki-client