This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa
File:                     3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          oD8dxN8vlnaG/t9Sx1RSJarar2BFWwJCm07fWhEGChQ=
Subject key identifier:   BE:0B:54:05:8E:D4:08:64:8A:0E:94:72:75:20:65:48:59:A1:84:73
Certificate issuer:       /CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
Certificate serial:       48CD911CF53C4ACB6D79047459D8E740FEA5207F
Authority key identifier: 19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 06 Jan 2026 19:21:08 +0000
ROA not before:           Tue 06 Jan 2026 19:16:08 +0000
ROA not after:            Tue 05 Jan 2027 19:21:08 +0000
asID:                     28432
IP address blocks:        201.131.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cd:91:1c:f5:3c:4a:cb:6d:79:04:74:59:d8:e7:40:fe:a5:20:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BF355A38263DAC0C4F3D824F2A42E88B78A1B6
        Validity
            Not Before: Jan  6 19:16:08 2026 GMT
            Not After : Jan  5 19:21:08 2027 GMT
        Subject: CN=BE0B54058ED408648A0E94727520654859A18473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:77:76:b6:59:b4:84:75:38:c9:44:b7:71:
                    39:62:4d:e5:df:68:26:7b:f5:a2:2a:20:36:68:ea:
                    5c:95:f2:79:9f:2e:57:e3:c7:3f:bf:b0:34:3b:19:
                    58:40:fb:21:54:69:c2:a4:c8:3e:e1:d8:2b:04:f0:
                    b6:20:27:a1:5a:0b:3c:19:46:3f:55:8c:1c:02:93:
                    03:42:04:4d:ea:d7:4d:f9:b4:41:a5:bc:04:68:19:
                    59:2d:c9:f3:26:5f:64:61:fb:61:ac:18:61:53:3f:
                    10:f1:7c:59:29:52:e5:a3:3d:a6:58:5d:fb:70:20:
                    f9:40:3d:47:7d:68:8b:8d:52:31:98:fa:7a:b9:20:
                    4e:f2:80:f3:ef:ca:42:39:d4:3d:be:a4:9b:43:53:
                    7a:c6:01:fe:63:30:f4:e4:14:a0:9b:36:60:b9:de:
                    6b:d9:4f:fa:a4:54:66:45:47:c6:c8:f6:28:ef:7e:
                    d8:48:d2:ac:f3:10:7d:9d:64:82:ac:dc:a9:6a:c5:
                    86:67:4f:aa:30:9c:10:47:c8:12:3d:dd:9e:f4:4c:
                    24:d2:87:de:e1:0c:37:bc:6e:7d:e9:f9:73:60:07:
                    3b:69:b1:24:73:d1:28:c3:71:01:cd:98:cc:d1:e1:
                    7e:9a:88:ef:cc:94:92:6e:04:87:5f:3c:75:5f:d6:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:54:05:8E:D4:08:64:8A:0E:94:72:75:20:65:48:59:A1:84:73
            X509v3 Authority Key Identifier:
                keyid:19:BF:35:5A:38:26:3D:AC:0C:4F:3D:82:4F:2A:42:E8:8B:78:A1:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19BF355A38263DAC0C4F3D824F2A42E88B78A1B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C4499C13871C01CC13C4D3273A8ACF11671F0713002939882EDADDDDC575D5/0/3230312e3133312e3233372e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:98:0c:e7:e7:e7:70:ed:bb:8a:fc:f3:87:2f:46:06:6a:db:
         df:d1:1f:08:c5:8c:3a:f2:e7:3f:c4:93:ef:28:63:89:69:61:
         b5:02:0b:26:2b:42:f4:49:36:44:4f:9a:2c:73:c1:af:df:47:
         5d:27:d3:06:d9:76:40:ab:28:95:a0:2a:cd:5f:5f:c5:39:68:
         23:f6:19:36:94:c1:0d:63:40:a1:01:01:50:0d:9c:69:bc:fd:
         a8:d1:cf:34:1c:8e:8f:ff:72:99:c5:cd:23:99:87:83:bd:4d:
         b8:c0:cf:23:ef:e9:a9:bd:bf:a3:16:63:81:af:cd:a4:cd:59:
         0f:7d:cb:0c:01:4a:ec:56:97:56:5c:2c:9b:ed:50:ee:20:66:
         b1:1f:9a:6c:4d:a1:f3:43:d5:67:fb:88:6a:9c:48:74:52:a7:
         16:f3:67:f3:ca:29:b6:05:88:00:74:a3:68:08:10:6e:44:b1:
         79:e0:75:4d:9e:bd:2c:8e:be:23:90:05:a8:01:8c:5f:98:7c:
         5c:39:14:67:ad:fa:b8:3d:2d:15:49:22:b8:5e:96:07:b7:9b:
         8f:83:91:f1:57:1c:dd:e3:9f:90:5e:55:91:74:a3:ba:f2:05:
         21:22:af:70:46:89:81:bb:bf:6c:9c:fe:3b:12:17:04:c5:af:
         8a:d3:f2:33
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSM2RHPU8SstteQR0WdjnQP6lIH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlCRjM1NUEzODI2M0RBQzBDNEYzRDgyNEYyQTQyRTg4
Qjc4QTFCNjAeFw0yNjAxMDYxOTE2MDhaFw0yNzAxMDUxOTIxMDhaMDMxMTAvBgNV
BAMTKEJFMEI1NDA1OEVENDA4NjQ4QTBFOTQ3Mjc1MjA2NTQ4NTlBMTg0NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLHd2tlm0hHU4yUS3cTliTeXf
aCZ79aIqIDZo6lyV8nmfLlfjxz+/sDQ7GVhA+yFUacKkyD7h2CsE8LYgJ6FaCzwZ
Rj9VjBwCkwNCBE3q1035tEGlvARoGVktyfMmX2Rh+2GsGGFTPxDxfFkpUuWjPaZY
XftwIPlAPUd9aIuNUjGY+nq5IE7ygPPvykI51D2+pJtDU3rGAf5jMPTkFKCbNmC5
3mvZT/qkVGZFR8bI9ijvfthI0qzzEH2dZIKs3KlqxYZnT6ownBBHyBI93Z70TCTS
h97hDDe8bn3p+XNgBztpsSRz0SjDcQHNmMzR4X6aiO/MlJJuBIdfPHVf1mY5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvgtUBY7UCGSKDpRydSBlSFmhhHMwHwYDVR0j
BBgwFoAUGb81WjgmPawMTz2CTypC6It4obYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEM0NDk5QzEzODcxQzAxQ0MxM0M0RDMyNzNBOEFDRjEx
NjcxRjA3MTMwMDI5Mzk4ODJFREFEREREQzU3NUQ1LzAvMTlCRjM1NUEzODI2M0RB
QzBDNEYzRDgyNEYyQTQyRTg4Qjc4QTFCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOUJGMzU1QTM4MjYzREFDMEM0
RjNEODI0RjJBNDJFODhCNzhBMUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDNDQ5OUMxMzg3MUMwMUNDMTNDNEQzMjczQThBQ0YxMTY3MUYwNzEz
MDAyOTM5ODgyRURBREREREM1NzVENS8wLzMyMzAzMTJlMzEzMzMxMmUzMjMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyYPt
MA0GCSqGSIb3DQEBCwUAA4IBAQCVmAzn5+dw7buK/POHL0YGatvf0R8IxYw68uc/
xJPvKGOJaWG1AgsmK0L0STZET5osc8Gv30ddJ9MG2XZAqyiVoCrNX1/FOWgj9hk2
lMENY0ChAQFQDZxpvP2o0c80HI6P/3KZxc0jmYeDvU24wM8j7+mpvb+jFmOBr82k
zVkPfcsMAUrsVpdWXCyb7VDuIGaxH5psTaHzQ9Vn+4hqnEh0UqcW82fzyim2BYgA
dKNoCBBuRLF54HVNnr0sjr4jkAWoAYxfmHxcORRnrfq4PS0VSSK4XpYHt5uPg5Hx
Vxzd45+QXlWRdKO68gUhIq9wRomBu79snP47EhcExa+K0/Iz
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:02 2026 by rpki-client