This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133312e302f32342d3234203d3e203232333638.roa
File:                     3230312e3232312e3133312e302f32342d3234203d3e203232333638.roa (raw, json)
Hash identifier:          qYTyd//QUKzPK1z0l7hZZ2NxFd9KoXd0xdj83sYpumw=
Subject key identifier:   8B:31:F5:80:93:7C:10:CC:13:40:6A:5D:DC:7E:C9:A3:68:D0:87:58
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       737AB81CA3330E46EAF566A8C1BE6139614F62BF
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133312e302f32342d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:17:56 +0000
ROA not before:           Tue 06 Jan 2026 19:12:56 +0000
ROA not after:            Tue 05 Jan 2027 19:17:56 +0000
asID:                     22368
IP address blocks:        201.221.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:b8:1c:a3:33:0e:46:ea:f5:66:a8:c1:be:61:39:61:4f:62:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:56 2026 GMT
            Not After : Jan  5 19:17:56 2027 GMT
        Subject: CN=8B31F580937C10CC13406A5DDC7EC9A368D08758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:ba:33:97:75:34:c2:5b:ee:95:3b:d0:2a:
                    67:ce:06:71:50:07:6a:ef:8f:52:93:49:d0:76:09:
                    22:e9:9f:e5:ad:9f:fd:f8:1e:a0:89:78:cd:d5:3e:
                    1c:b0:7b:34:c8:d1:d9:e5:7a:fd:82:3c:63:d7:e3:
                    e5:95:2d:6e:d7:a7:2d:c4:6f:e2:a2:7e:13:ae:e7:
                    94:b7:44:1f:3f:a6:4d:d2:ae:49:49:35:c0:0f:93:
                    04:89:85:f4:0b:61:c9:17:2f:1d:4c:7d:39:a2:53:
                    3a:30:4c:fa:b3:0b:7d:e3:d6:2e:21:c2:14:86:b1:
                    5f:25:2e:6d:b8:8a:09:d4:be:2c:14:92:ae:19:f0:
                    3c:fb:fb:a4:b4:c4:d2:ae:48:7a:12:e0:6f:23:f5:
                    2c:17:3a:51:8a:7a:10:bd:03:6e:d4:e6:b9:27:e8:
                    17:c3:1c:b3:0e:9b:09:da:45:db:77:1f:a7:fa:72:
                    c0:f1:b3:dd:84:97:4b:75:9c:37:8c:eb:a9:47:79:
                    94:a9:46:c9:88:04:9a:86:10:2a:a1:af:c8:d7:d7:
                    e9:df:52:0e:f3:28:a7:29:c3:57:dd:60:ba:17:ca:
                    8c:f2:7c:36:1a:80:4a:7c:70:5a:aa:fb:e8:cb:80:
                    55:9c:1a:d9:fc:03:99:f0:d3:d3:70:c3:62:71:20:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:F5:80:93:7C:10:CC:13:40:6A:5D:DC:7E:C9:A3:68:D0:87:58
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133312e302f32342d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:97:01:26:81:ee:1d:56:40:a7:23:ac:6a:e7:6d:6f:0c:db:
         bb:2e:32:8d:8c:39:7a:e4:04:be:71:c2:69:45:b6:d3:03:bf:
         4a:0d:dc:21:e0:b8:e3:75:36:24:00:8a:71:12:1f:4d:9d:86:
         f0:c2:13:40:e9:28:b8:94:e6:9f:cf:9c:6a:d8:4d:3f:bc:71:
         c1:f0:99:82:47:e4:d0:5f:4f:2a:70:a3:3f:4e:68:44:44:ac:
         ec:40:41:c8:c0:8a:57:83:50:08:af:71:9d:fb:90:6a:73:d9:
         20:2b:b1:60:16:1a:2e:ee:c1:4d:ca:09:ed:78:b7:68:4d:af:
         b1:05:8c:b3:f6:7d:fd:4a:35:31:00:fd:a6:04:b6:4d:9a:db:
         54:e2:c1:d9:5c:68:c9:df:95:fd:0e:e7:91:4f:e5:17:c9:06:
         7d:94:ea:ba:52:23:8a:39:22:f0:75:ac:ca:1f:eb:c6:87:91:
         2f:40:d2:d5:49:11:d3:26:3d:78:06:0c:1b:1b:3e:1f:24:a7:
         48:73:a1:65:21:8a:08:77:45:eb:b5:17:59:1e:15:41:58:bb:
         58:cc:ff:4e:d5:26:51:21:0c:78:83:93:8a:a2:27:ec:90:90:
         c4:0d:a0:c4:8e:7a:a7:e0:cd:61:32:db:9e:e1:19:4d:ed:e8:
         fe:a3:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:27:09 2026 by rpki-client