This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134382e302f32332d3234203d3e203232333638.roa
File:                     3230312e3232312e3134382e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          YH5nGLIErt18qy42nVOXHnGV/c8ksSRbdlNz6nJPg0I=
Subject key identifier:   09:23:F6:31:D8:89:14:77:04:44:74:4C:98:D6:16:E2:96:25:89:EA
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       651B7358F77B37873ACBB254D9EEC3FC38921575
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134382e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:18:02 +0000
ROA not before:           Tue 06 Jan 2026 19:13:02 +0000
ROA not after:            Tue 05 Jan 2027 19:18:02 +0000
asID:                     22368
IP address blocks:        201.221.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1b:73:58:f7:7b:37:87:3a:cb:b2:54:d9:ee:c3:fc:38:92:15:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:02 2026 GMT
            Not After : Jan  5 19:18:02 2027 GMT
        Subject: CN=0923F631D88914770444744C98D616E2962589EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:70:ad:e3:bb:df:d3:66:bc:70:87:e9:98:
                    e5:8d:08:59:c8:20:62:1c:fb:08:a6:79:33:76:02:
                    b2:07:54:29:99:6b:c6:a0:9d:ce:3f:82:49:89:51:
                    38:54:9b:c1:2b:f2:8a:71:8b:4c:6d:30:20:09:b5:
                    9c:ba:19:96:d3:de:47:c3:8c:eb:6f:bd:d1:dd:be:
                    ae:cb:67:2b:55:5b:88:c1:e4:39:19:19:3c:e1:c8:
                    c0:62:52:0b:41:ee:eb:09:a8:e7:d5:62:75:8c:5a:
                    1a:92:ed:50:5e:32:b3:32:f1:9c:f2:48:90:5d:d6:
                    6e:03:b6:a9:54:8e:00:47:c7:fd:2c:de:e2:64:9c:
                    42:28:6c:4f:ed:46:26:48:95:de:77:e2:34:25:e0:
                    ad:14:d7:a7:54:1c:76:6c:5b:b0:22:d8:e6:92:7f:
                    2d:7a:38:97:ed:3c:33:a0:8a:31:b2:41:a5:60:13:
                    69:f1:da:d0:7c:5f:ef:09:5f:29:3a:c9:56:96:da:
                    fd:7a:7f:8e:03:74:3b:2c:c7:d6:31:51:89:9f:85:
                    87:93:5a:10:b3:20:6f:32:03:63:7f:d7:3f:5d:af:
                    a3:a2:25:9e:b9:1c:ab:ff:4d:bc:b9:fb:76:0e:80:
                    13:59:e6:92:f8:19:88:0f:1b:2f:ae:49:2f:29:1a:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:23:F6:31:D8:89:14:77:04:44:74:4C:98:D6:16:E2:96:25:89:EA
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134382e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:d8:4a:09:76:65:f0:e9:d3:fb:8a:ec:94:d0:11:40:a1:
         75:23:8b:f0:0d:63:a5:fe:9c:b4:00:fc:5e:55:0f:24:96:2a:
         6f:f0:9f:11:37:5f:86:0d:bf:c9:fd:a5:25:be:ae:e8:e9:82:
         c1:69:b5:5c:01:a0:84:dd:93:6a:6c:d9:9b:31:33:ec:34:90:
         87:29:ea:c8:67:99:83:70:b5:73:87:29:c7:94:23:a5:fc:5f:
         06:a6:f9:04:99:5c:0e:8b:3a:e3:e1:51:68:4f:bf:69:14:fc:
         0b:52:ba:45:93:88:e4:f6:ac:b0:05:7f:76:6d:e4:6f:28:8b:
         50:f4:f9:41:68:15:73:b5:b8:7a:b1:5b:ac:d0:0a:67:69:54:
         dd:5b:6d:a8:69:2b:2a:85:64:16:72:f6:cf:a4:d9:a2:d4:7d:
         6a:ae:45:26:e8:1e:70:09:f5:e4:99:74:24:f4:ac:1d:ec:e1:
         b6:9a:8d:50:8d:d6:f8:9c:fd:b6:2c:e6:85:ff:35:91:11:b5:
         68:45:45:93:e7:ac:10:25:0f:4e:76:9a:fe:95:1e:e8:fc:63:
         69:64:c1:2e:b1:11:6b:fb:76:af:7d:ad:9c:90:20:95:a8:bc:
         11:57:ed:36:00:65:10:0d:de:87:41:df:b7:06:d9:3e:25:70:
         ba:9d:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:53:37 2026 by rpki-client