This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135312e302f32342d3234203d3e203232333638.roa
File:                     3230312e3232312e3135312e302f32342d3234203d3e203232333638.roa (raw, json)
Hash identifier:          EnUNhefTgn7rMg+niBqAReBGopd06j2iTFKnbLprnuU=
Subject key identifier:   A3:C2:06:06:25:0D:53:51:8C:1C:9A:79:22:4D:A7:5C:81:F9:E7:11
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       62F8F0A2B9E571A19ED10B2E25D696962FF44609
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135312e302f32342d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:17:59 +0000
ROA not before:           Tue 06 Jan 2026 19:12:59 +0000
ROA not after:            Tue 05 Jan 2027 19:17:59 +0000
asID:                     22368
IP address blocks:        201.221.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f8:f0:a2:b9:e5:71:a1:9e:d1:0b:2e:25:d6:96:96:2f:f4:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:59 2026 GMT
            Not After : Jan  5 19:17:59 2027 GMT
        Subject: CN=A3C20606250D53518C1C9A79224DA75C81F9E711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:f7:25:63:65:17:98:af:0c:f6:bf:50:fd:
                    7d:ea:24:6d:fd:27:01:ac:52:a2:68:ba:ed:b7:c0:
                    c0:eb:3f:99:fc:8d:49:cf:ad:d7:1d:63:1f:6d:ff:
                    12:bb:4a:f5:09:86:4b:6d:43:c5:98:d5:bd:ee:da:
                    62:72:26:70:39:0c:2e:ef:74:45:2b:da:a3:c5:44:
                    7b:ba:6a:2d:db:37:91:de:b3:00:1d:8d:a3:10:f9:
                    d9:9a:e1:f0:24:9b:08:22:9b:a5:b6:73:4e:60:65:
                    c1:72:e6:0f:59:4a:74:da:20:25:2a:22:d7:53:3e:
                    30:ba:e2:df:26:a4:60:65:fd:5b:59:18:88:65:c7:
                    21:a5:e3:38:9c:35:26:5f:2a:35:e7:28:e6:35:a8:
                    10:f1:59:e8:82:f2:15:a3:d9:26:c5:9f:b7:65:b2:
                    20:b2:4c:4b:0e:e1:30:86:cb:00:9a:19:72:d9:f5:
                    b9:6c:3d:e8:a4:ed:08:2d:94:2c:49:f5:53:1a:41:
                    14:d7:a4:10:2b:d0:01:9a:1b:f8:4e:41:1c:fb:39:
                    5f:c0:19:35:50:58:ba:c7:32:7d:55:7c:5f:e3:af:
                    14:4b:71:0e:b3:d9:09:94:18:3b:76:3e:14:f7:a9:
                    c3:ef:25:bd:ef:ff:26:d8:f5:7b:03:96:ef:20:ed:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C2:06:06:25:0D:53:51:8C:1C:9A:79:22:4D:A7:5C:81:F9:E7:11
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135312e302f32342d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:cc:48:13:88:3a:19:a4:a0:af:76:5d:15:0e:ac:45:6e:
         21:8d:81:2f:1f:1b:56:6e:8e:87:dd:16:41:07:70:0b:ab:c4:
         76:06:81:43:d7:13:92:78:2e:99:4a:28:08:46:bc:0a:a8:00:
         69:cd:7f:0a:98:0f:b2:17:07:a5:c5:60:87:0c:9b:01:64:f8:
         62:e8:57:9f:3d:6a:70:06:e9:85:dd:78:c7:59:33:2b:c7:51:
         42:04:0c:06:fd:c2:ca:92:75:6e:05:be:de:c9:6e:9a:ee:73:
         9c:61:c8:02:d7:65:4a:e1:2a:7d:ee:67:98:28:a9:20:a6:02:
         46:5c:7a:a5:df:f6:7d:56:11:a4:a3:36:05:7a:23:e7:4c:c8:
         a7:22:59:30:51:ed:f2:fb:50:55:b9:89:14:29:e3:bb:df:32:
         dc:75:3c:91:d0:23:c0:96:a8:03:c8:bd:78:de:a5:f5:92:77:
         8b:ad:14:ea:5a:dc:73:75:5d:f8:40:07:cc:1f:97:7d:9f:6d:
         57:99:b4:b5:0a:21:b3:b7:d7:ec:31:26:6b:83:d7:30:58:38:
         b0:75:a2:88:88:d4:d0:60:03:f8:81:93:8c:7e:30:99:72:f2:
         34:a6:ca:70:28:41:65:e8:74:7a:26:1f:0b:8f:6a:c9:c0:da:
         b0:6d:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:16:11 2026 by rpki-client