This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
File:                     3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa (raw, json)
Hash identifier:          jB0Yg0lkk8AuwH2b0aevHByxZS+ONhIEhMI7Tk28Jtk=
Subject key identifier:   66:6E:E5:38:61:82:4F:F3:BA:31:68:2A:E2:22:F3:9E:CA:F2:44:6B
Certificate issuer:       /CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
Certificate serial:       4BD5220DB35B9B70DA8B554CC5E6749C4F9C9501
Authority key identifier: 70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
Signing time:             Tue 06 Jan 2026 19:17:02 +0000
ROA not before:           Tue 06 Jan 2026 19:12:02 +0000
ROA not after:            Tue 05 Jan 2027 19:17:02 +0000
asID:                     270118
IP address blocks:        201.159.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:22:0d:b3:5b:9b:70:da:8b:55:4c:c5:e6:74:9c:4f:9c:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
        Validity
            Not Before: Jan  6 19:12:02 2026 GMT
            Not After : Jan  5 19:17:02 2027 GMT
        Subject: CN=666EE53861824FF3BA31682AE222F39ECAF2446B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:e0:c3:e4:71:c6:5e:fd:d9:4f:a3:7d:56:
                    d2:08:e4:10:8e:72:34:b7:50:37:7e:f0:fd:6e:32:
                    87:8a:2c:29:53:ff:49:fe:78:b5:21:46:09:b8:60:
                    1a:5d:02:4f:2a:ac:e5:69:29:36:4f:02:96:3c:d0:
                    52:b0:b2:27:ed:19:2c:c4:58:68:26:70:70:b6:4c:
                    b0:af:f4:83:06:68:e4:2b:1c:56:7d:20:5e:19:c1:
                    c4:c7:2a:b6:4f:48:6d:ee:95:ee:5b:bf:22:0f:58:
                    cf:c1:d1:9b:6c:8b:82:20:80:ce:21:e0:44:82:dc:
                    d2:69:4e:c7:88:c7:59:16:5c:77:4a:ed:73:15:a9:
                    d1:70:8b:9b:a8:a4:11:5b:36:53:86:91:78:14:19:
                    5b:8b:84:30:f0:6b:cf:cf:cf:98:93:2d:c9:c9:b3:
                    16:90:95:6e:7b:56:af:67:a9:1f:ee:2f:db:73:f8:
                    48:b4:70:3d:f2:19:fb:29:42:59:fe:f1:78:67:01:
                    a1:b6:7e:70:e8:46:d4:ff:d2:b1:28:ac:8e:8e:49:
                    7a:ee:2d:22:81:64:71:f2:97:a3:77:c3:0b:68:ef:
                    2a:3f:78:a3:09:4c:ae:ed:3c:3b:19:ae:fe:cc:c8:
                    2e:11:55:4d:3d:21:4b:d9:1e:a4:a5:44:9f:87:2b:
                    dd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:E5:38:61:82:4F:F3:BA:31:68:2A:E2:22:F3:9E:CA:F2:44:6B
            X509v3 Authority Key Identifier:
                keyid:70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:ee:48:ed:01:14:de:40:a5:76:b8:b8:2f:b2:b0:08:f8:
         58:74:c8:c8:95:41:cc:2c:21:e1:d7:6d:36:aa:ee:ea:1d:3b:
         a8:0f:81:0f:ea:51:1a:0c:b0:44:d6:a9:1c:84:10:c6:7b:b5:
         6c:bc:dd:5e:db:15:15:38:7e:c5:2c:9a:2b:3f:9f:47:6a:07:
         67:ab:f8:4c:48:19:f3:18:42:e9:ae:7a:97:07:58:47:7b:48:
         41:c5:6a:46:1a:ed:6f:d6:0d:a7:19:be:0e:06:76:15:5a:69:
         ac:2e:df:24:84:98:95:32:8d:6e:bd:9d:d5:50:42:30:79:d4:
         c9:b3:bd:14:70:ea:2b:20:70:7f:1c:df:cd:ca:33:ba:19:94:
         4d:c0:ab:21:65:c8:5e:82:fc:d0:ff:09:ae:58:04:a3:d3:b9:
         0f:c3:4e:f4:32:da:51:3d:67:00:eb:8d:08:38:05:e1:cd:2a:
         75:eb:bb:d5:fb:5c:72:67:63:eb:f5:aa:82:b0:fa:b6:4b:db:
         a2:c4:c0:5c:89:ed:9c:ac:e8:a0:52:4f:f1:96:b9:36:ca:50:
         9d:a3:30:df:44:47:bd:9f:34:eb:b6:60:8d:78:6c:81:54:b5:
         15:27:8b:4b:e9:0d:0c:14:07:7b:13:59:ef:5e:48:29:3a:99:
         16:18:f5:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUS9UiDbNbm3Dai1VMxeZ0nE+clQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA2NkQ1OThCQkJBQjQyQTk2NTA5OEU2MjA4RDZBQjdC
RDA3NDBENjAeFw0yNjAxMDYxOTEyMDJaFw0yNzAxMDUxOTE3MDJaMDMxMTAvBgNV
BAMTKDY2NkVFNTM4NjE4MjRGRjNCQTMxNjgyQUUyMjJGMzlFQ0FGMjQ0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8ODD5HHGXv3ZT6N9VtII5BCO
cjS3UDd+8P1uMoeKLClT/0n+eLUhRgm4YBpdAk8qrOVpKTZPApY80FKwsiftGSzE
WGgmcHC2TLCv9IMGaOQrHFZ9IF4ZwcTHKrZPSG3ule5bvyIPWM/B0Ztsi4IggM4h
4ESC3NJpTseIx1kWXHdK7XMVqdFwi5uopBFbNlOGkXgUGVuLhDDwa8/Pz5iTLcnJ
sxaQlW57Vq9nqR/uL9tz+Ei0cD3yGfspQln+8XhnAaG2fnDoRtT/0rEorI6OSXru
LSKBZHHyl6N3wwto7yo/eKMJTK7tPDsZrv7MyC4RVU09IUvZHqSlRJ+HK913AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZm7lOGGCT/O6MWgq4iLznsryRGswHwYDVR0j
BBgwFoAUcGbVmLu6tCqWUJjmII1qt70HQNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzJGMDkyQTc1QkQwODQ2NTM2RDNCRUU1MzI0QkNCNjk0
NjcwQUQ4OUQ5MEM4NDY2MzU5MDU4MzUzNjhEMjMxLzAvNzA2NkQ1OThCQkJBQjQy
QTk2NTA5OEU2MjA4RDZBQjdCRDA3NDBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MDY2RDU5OEJCQkFCNDJBOTY1
MDk4RTYyMDhENkFCN0JEMDc0MEQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjcyRjA5MkE3NUJEMDg0NjUzNkQzQkVFNTMyNEJDQjY5NDY3MEFEODlE
OTBDODQ2NjM1OTA1ODM1MzY4RDIzMS8wLzMyMzAzMTJlMzEzNTM5MmUzNDM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByZ8u
MA0GCSqGSIb3DQEBCwUAA4IBAQBTs+5I7QEU3kCldri4L7KwCPhYdMjIlUHMLCHh
1202qu7qHTuoD4EP6lEaDLBE1qkchBDGe7VsvN1e2xUVOH7FLJorP59Hagdnq/hM
SBnzGELprnqXB1hHe0hBxWpGGu1v1g2nGb4OBnYVWmmsLt8khJiVMo1uvZ3VUEIw
edTJs70UcOorIHB/HN/NyjO6GZRNwKshZchegvzQ/wmuWASj07kPw070MtpRPWcA
640IOAXhzSp167vV+1xyZ2Pr9aqCsPq2S9uixMBcie2crOigUk/xlrk2ylCdozDf
REe9nzTrtmCNeGyBVLUVJ4tL6Q0MFAd7E1nvXkgpOpkWGPVk
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:17 2026 by rpki-client