This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/3230312e3232302e32392e302f32342d3234203d3e203532343633.roa
File:                     3230312e3232302e32392e302f32342d3234203d3e203532343633.roa (raw, json)
Hash identifier:          J/1kyhLMeslE/e+lt+mDTELkKLQjpyXn+IDNucXySuM=
Subject key identifier:   2C:4B:ED:56:2D:D4:A0:86:94:7C:62:80:53:52:B9:7F:24:60:ED:83
Certificate issuer:       /CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
Certificate serial:       75E4C20C5F94CD35D667D288F768D64327B62EBE
Authority key identifier: 89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/3230312e3232302e32392e302f32342d3234203d3e203532343633.roa
Signing time:             Tue 06 Jan 2026 19:09:29 +0000
ROA not before:           Tue 06 Jan 2026 19:04:29 +0000
ROA not after:            Tue 05 Jan 2027 19:09:29 +0000
asID:                     52463
IP address blocks:        201.220.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:c2:0c:5f:94:cd:35:d6:67:d2:88:f7:68:d6:43:27:b6:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899F313321C13B5591ABC1D56B271A1F6BB60E12
        Validity
            Not Before: Jan  6 19:04:29 2026 GMT
            Not After : Jan  5 19:09:29 2027 GMT
        Subject: CN=2C4BED562DD4A086947C62805352B97F2460ED83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:bb:b1:2c:c9:0d:1e:1c:24:25:12:c9:67:
                    64:d2:b7:96:cd:53:3e:7a:fa:ed:cd:22:b7:95:83:
                    3c:3d:cb:7f:a5:df:d8:c5:7b:1f:8d:6c:95:6d:a8:
                    44:d6:c2:54:0a:71:d4:78:28:fe:50:5b:b7:68:5e:
                    e0:3c:bf:8f:5d:5c:28:3b:ff:ee:43:f4:60:dd:b6:
                    31:a8:2b:7a:26:a7:35:42:69:9a:74:3b:dd:56:7a:
                    09:21:7c:ea:46:a1:04:a1:c9:cd:07:da:d3:f2:e9:
                    4c:c1:2f:53:c2:22:1f:20:09:c5:d3:0a:f3:be:5e:
                    7e:20:9d:ff:ec:6e:88:e6:18:cc:de:c8:a3:6f:6d:
                    c0:a1:fa:91:b1:e1:73:ba:26:22:d2:6a:58:72:fa:
                    cf:e5:33:28:8a:c2:a2:a5:62:aa:31:5f:26:f4:eb:
                    62:87:a5:14:b7:83:79:a4:f8:a1:fc:f3:d7:19:e6:
                    7d:93:f9:06:ae:db:57:17:b5:70:df:14:0e:5e:2e:
                    0e:c1:28:07:94:02:1a:c0:80:1d:57:5f:c8:33:00:
                    9a:c0:ac:18:5e:67:d4:3a:86:1b:25:ed:bd:2a:4e:
                    ec:da:99:4f:df:42:a8:6b:42:99:d4:7e:21:ff:cb:
                    37:1a:0a:58:90:e9:5b:d6:d5:b8:77:77:b1:10:65:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:ED:56:2D:D4:A0:86:94:7C:62:80:53:52:B9:7F:24:60:ED:83
            X509v3 Authority Key Identifier:
                keyid:89:9F:31:33:21:C1:3B:55:91:AB:C1:D5:6B:27:1A:1F:6B:B6:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/899F313321C13B5591ABC1D56B271A1F6BB60E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3454D986A7159EBE4806F466D88ADE313D3969E1A56BFFC481AA91060CD262CE/0/3230312e3232302e32392e302f32342d3234203d3e203532343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:a6:4f:63:cf:ee:97:78:99:72:98:62:4d:ad:3d:bc:98:f6:
         56:ae:ce:13:b4:3f:70:8b:6b:2c:d4:60:49:0f:32:00:a3:c8:
         e7:3e:20:86:a2:63:55:dc:c1:f3:33:4b:5f:75:de:1b:ad:78:
         bf:1b:36:9e:9f:74:e9:c7:ab:14:5d:31:6c:16:28:9b:07:77:
         b9:39:e7:c9:2d:44:ad:e0:62:b6:ef:0b:8d:d2:f1:b6:e6:01:
         9b:84:98:d7:2e:f6:c5:59:96:af:2b:f2:30:20:dc:fd:09:60:
         23:e4:fc:a4:17:6b:e1:83:71:c5:63:2d:95:1d:82:7a:23:3c:
         ba:8b:61:c4:29:81:ba:ce:4d:15:5e:47:2e:19:b9:0e:b6:4d:
         7d:78:68:67:10:f9:39:0c:87:18:a3:21:a6:13:6e:0e:e5:f0:
         07:d4:eb:c6:de:9d:02:28:51:63:34:56:5d:9c:27:3d:06:d5:
         5d:a3:82:9f:d7:61:c3:45:f8:fe:af:0c:d1:64:fb:b2:0d:99:
         b6:99:07:d5:f7:cb:64:d7:08:cd:3c:25:ed:d8:b7:16:96:2b:
         2c:06:8a:53:03:9d:1b:05:d8:cc:73:64:74:68:85:81:77:14:
         32:f7:f1:56:99:d1:ad:22:b3:07:a0:2d:bd:aa:5a:ab:a7:ca:
         61:ec:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:46 2026 by rpki-client