This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa
File:                     3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          cCO8RtjsgcrG79OBCRfVykhjuDWWaZKWyll3i+MGuiw=
Subject key identifier:   45:C7:F3:32:28:39:FC:32:DB:10:ED:0E:3A:9E:8F:1A:1B:96:FB:FC
Certificate issuer:       /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial:       7F3ED447C389BE6C25ECD3DA67615132F35C6107
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa
Signing time:             Tue 06 Jan 2026 19:27:03 +0000
ROA not before:           Tue 06 Jan 2026 19:22:03 +0000
ROA not after:            Tue 05 Jan 2027 19:27:03 +0000
asID:                     265705
IP address blocks:        201.219.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3e:d4:47:c3:89:be:6c:25:ec:d3:da:67:61:51:32:f3:5c:61:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
        Validity
            Not Before: Jan  6 19:22:03 2026 GMT
            Not After : Jan  5 19:27:03 2027 GMT
        Subject: CN=45C7F3322839FC32DB10ED0E3A9E8F1A1B96FBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:26:84:29:1d:35:52:7f:1b:4b:a6:ab:8b:
                    16:9a:f6:55:ab:6c:03:a2:18:db:a5:00:de:82:97:
                    c1:9a:ee:aa:e2:2f:8f:9d:06:72:38:89:79:d4:23:
                    65:eb:33:5f:6f:7c:d1:4b:a9:2c:fd:12:9d:c9:e8:
                    ca:15:d4:67:f4:7d:95:58:0b:f8:e0:13:a7:6f:4f:
                    f8:00:eb:4c:24:55:0e:dd:56:8b:7d:12:c6:9b:50:
                    c6:22:b6:e4:41:76:17:36:f7:f3:87:7f:b2:8c:b3:
                    b0:7d:1e:9a:e3:c2:6d:8b:30:2f:06:0b:82:b6:0a:
                    7d:03:74:0c:0b:0f:4e:ea:73:d1:0d:c7:d0:d5:4c:
                    f8:12:b5:db:ba:65:6b:48:fe:31:2d:41:d8:c1:c6:
                    4b:96:8a:8a:37:98:3a:00:2c:98:fc:8c:18:26:17:
                    c7:4c:37:9a:33:13:b6:ed:92:35:17:7a:b6:07:7c:
                    2c:59:8c:65:43:d8:73:d3:82:8a:2c:ad:3b:5f:03:
                    37:ba:f9:e2:f1:d0:3c:dd:27:92:fc:e3:90:3c:ab:
                    a2:91:a7:fa:25:f1:13:95:6e:ae:5f:fd:b9:a0:3a:
                    eb:32:f2:f2:9a:cd:0f:bd:be:3a:13:3a:d8:ee:18:
                    3e:85:1a:b3:ce:9b:ac:97:82:bb:ac:5d:7f:1a:73:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C7:F3:32:28:39:FC:32:DB:10:ED:0E:3A:9E:8F:1A:1B:96:FB:FC
            X509v3 Authority Key Identifier:
                keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4f:52:a5:9d:eb:49:fc:ec:6d:1d:58:a5:1d:82:14:d5:f3:
         24:01:b9:af:2d:b5:2d:c0:7e:e7:21:02:89:50:01:55:04:32:
         4e:12:69:27:70:79:f6:a5:27:27:60:c4:82:18:d8:08:3a:b3:
         aa:2c:fc:92:96:58:a0:6c:31:a3:be:67:c3:df:b4:3a:c4:56:
         e7:ea:02:68:86:01:71:e8:b5:15:c1:7f:d1:74:7a:59:41:e7:
         51:1a:72:a6:1e:61:69:58:22:9d:d0:1d:87:c5:19:b7:01:54:
         07:49:03:55:06:d4:a4:95:55:5d:e7:c6:80:51:d7:bd:06:c8:
         49:f9:72:e7:e6:9b:dc:fb:d1:85:16:e2:f4:15:84:a6:3b:e5:
         7b:db:02:00:69:f1:7b:ce:c1:69:1d:b3:32:a2:82:83:f8:ac:
         c4:50:97:6f:28:8c:ee:dc:7b:5d:43:48:fa:75:50:c7:d4:c6:
         2a:05:b9:db:b2:6c:d0:3f:35:f0:b9:0a:61:03:a7:d8:38:05:
         8e:5c:1e:4c:2e:66:bd:af:4d:8d:d7:0b:b5:a8:48:3d:8d:d9:
         12:93:6a:24:df:df:d6:89:72:af:c7:dd:cd:7d:63:54:b6:5c:
         90:a0:b6:f6:26:1a:71:1f:f9:21:68:0a:dd:d9:c2:bb:4d:95:
         ce:57:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:50 2026 by rpki-client