This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa
File:                     3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa (raw, json)
Hash identifier:          Ee2nL8FKy9MsDWUo59E3+jYW/xuhPgM7LM5zb+DWlE4=
Subject key identifier:   D2:DB:C6:ED:39:BD:F9:58:21:5D:A3:D1:E1:B7:A8:D1:A7:C3:69:FB
Certificate issuer:       /CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Certificate serial:       1118D881A6D918248FE0A2333FD05AEB5FD07CC4
Authority key identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 19:10:48 +0000
ROA not before:           Tue 06 Jan 2026 19:05:48 +0000
ROA not after:            Tue 05 Jan 2027 19:10:48 +0000
asID:                     27884
IP address blocks:        201.220.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:d8:81:a6:d9:18:24:8f:e0:a2:33:3f:d0:5a:eb:5f:d0:7c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
        Validity
            Not Before: Jan  6 19:05:48 2026 GMT
            Not After : Jan  5 19:10:48 2027 GMT
        Subject: CN=D2DBC6ED39BDF958215DA3D1E1B7A8D1A7C369FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:0d:80:e4:5f:27:05:c4:f5:11:64:69:4c:
                    c5:09:07:02:8e:de:a4:a4:76:5a:04:81:4f:a5:fe:
                    2e:9b:fa:47:4c:88:c3:f4:b7:14:a5:71:7a:56:6a:
                    16:89:28:5d:06:7b:3a:d3:0f:af:51:f5:fc:5b:c4:
                    f9:16:7e:81:61:ab:91:25:1e:1d:b7:62:c5:bc:4a:
                    4d:d3:44:f2:30:04:98:c4:96:be:ca:73:2b:8f:b8:
                    46:2c:36:cb:c5:14:a1:ba:58:b5:a2:29:85:78:ac:
                    f3:c6:96:13:7b:d1:f1:f7:f1:11:d8:76:17:e8:3e:
                    d9:6f:bb:cd:e1:fd:3a:92:5f:b3:58:ec:6a:4c:ac:
                    6f:1f:f6:f3:a0:b1:29:52:ab:67:5b:d5:3c:06:00:
                    7f:fd:1c:67:8e:3d:0c:4e:06:0b:4d:4a:6e:3e:a3:
                    12:2f:74:1d:8e:46:b0:75:37:78:96:c3:d3:99:47:
                    7b:17:bc:33:a0:fc:94:cd:7a:de:52:3a:c4:68:fb:
                    4b:71:b6:41:4a:af:b1:fe:2c:75:aa:9c:9e:e5:e4:
                    63:0d:24:01:5e:e0:9f:84:a8:25:a5:c6:c1:91:78:
                    3a:01:8b:b3:26:e0:c5:ef:79:33:65:2e:c1:b3:40:
                    50:44:6e:ec:e2:89:19:b1:65:c0:a4:45:b3:e1:83:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DB:C6:ED:39:BD:F9:58:21:5D:A3:D1:E1:B7:A8:D1:A7:C3:69:FB
            X509v3 Authority Key Identifier:
                keyid:DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/3230312e3232302e3132382e302f32302d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:ac:c6:cc:ce:12:ec:6b:e0:50:8a:c8:7d:d3:43:2c:54:
         f9:76:8c:58:f4:45:39:1d:8f:04:e9:ba:82:47:42:7e:02:a2:
         76:03:d4:a6:cc:d7:93:bd:92:14:31:64:b9:d1:fc:b0:de:7d:
         5e:c0:13:6c:c1:65:0a:76:56:68:19:e5:c9:5e:10:60:2b:ef:
         e3:08:46:4f:08:42:65:de:71:a1:8e:48:c7:8c:ab:1f:50:4a:
         2c:3d:59:31:be:9a:15:e9:81:48:54:70:d8:6d:9c:41:6f:a4:
         3c:de:fe:74:70:6a:4e:a9:72:06:ca:59:62:62:ad:33:b1:b5:
         90:e5:2c:fa:cc:b5:e8:55:30:f4:0d:c4:74:1c:9d:50:f5:5b:
         06:ca:31:68:97:05:1d:80:6c:2b:3b:f5:f0:f5:8d:75:6e:6b:
         77:db:1c:c4:d6:9b:36:4a:da:0d:40:1b:75:6c:8c:5c:11:01:
         81:54:f3:e8:de:03:76:0b:e3:c4:58:ea:0d:24:d8:05:61:2e:
         10:7e:ea:24:bf:5b:c8:a8:52:22:02:cf:1a:75:a2:34:2a:17:
         ca:85:9e:b7:14:e8:64:91:60:23:a6:86:ee:28:bb:03:b7:17:
         6b:b5:d6:de:75:65:a4:9b:6f:f0:ec:44:73:3b:ae:31:a0:34:
         7e:15:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:44 2026 by rpki-client