This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa
File:                     3230312e3230382e302e302f31342d3234203d3e2038303438.roa (raw, json)
Hash identifier:          E42cf56fJcqqZU8YlEknHbbv3w2xsGgm7nrgC3T4TDI=
Subject key identifier:   8C:A3:76:F0:4E:3C:0A:0E:0D:2A:B3:A7:5D:F4:C5:8F:7F:BA:AB:93
Certificate issuer:       /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial:       4E74420676B3732874ED5A2E16E60EEDC310AEF2
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa
Signing time:             Tue 06 Jan 2026 19:47:35 +0000
ROA not before:           Tue 06 Jan 2026 19:42:35 +0000
ROA not after:            Tue 05 Jan 2027 19:47:35 +0000
asID:                     8048
IP address blocks:        201.208.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:42:06:76:b3:73:28:74:ed:5a:2e:16:e6:0e:ed:c3:10:ae:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Validity
            Not Before: Jan  6 19:42:35 2026 GMT
            Not After : Jan  5 19:47:35 2027 GMT
        Subject: CN=8CA376F04E3C0A0E0D2AB3A75DF4C58F7FBAAB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:5b:90:59:a2:73:61:65:b9:31:c1:74:03:
                    0d:9b:63:7a:2b:9c:4f:20:e3:32:fa:ca:3a:0c:d5:
                    d3:53:5a:ee:ed:ad:89:7e:3a:44:2d:29:1a:b0:a6:
                    23:00:c5:d8:22:02:13:bd:f0:67:29:6d:2a:03:4f:
                    9a:28:4a:1d:6f:4b:0b:f9:1b:1b:0a:95:44:ce:54:
                    fc:6d:48:4f:d3:4a:bc:0d:f0:a2:de:4a:96:c3:fa:
                    a1:d3:24:03:b3:b8:10:ef:8d:4e:b0:c5:58:86:33:
                    aa:42:eb:65:a6:90:9c:19:2d:b0:ab:d1:0c:c7:14:
                    9d:95:6f:3a:23:ca:76:1b:9f:a8:0e:0e:9d:e7:88:
                    fc:22:9a:08:e9:fa:8e:8f:0f:52:5d:a9:28:7f:84:
                    b7:f6:ff:c5:21:bc:19:a9:64:25:24:a5:55:f4:d0:
                    8d:1e:3c:df:17:d6:9f:6e:75:38:4f:3d:09:00:b8:
                    6d:8b:de:54:3d:3b:ec:ae:e4:29:4a:e2:13:98:fc:
                    9d:9d:d3:69:34:33:0d:4e:f4:c8:ab:75:26:7e:0d:
                    fb:45:81:bb:14:da:68:59:eb:44:12:bf:02:2e:c7:
                    ef:fa:d8:3a:c5:71:c2:34:8b:b0:55:b2:e4:df:05:
                    0c:77:33:e3:11:db:91:2c:e0:6a:87:6a:a7:4b:3e:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A3:76:F0:4E:3C:0A:0E:0D:2A:B3:A7:5D:F4:C5:8F:7F:BA:AB:93
            X509v3 Authority Key Identifier:
                keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.208.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:ea:99:3a:2b:3a:53:fc:5b:19:bd:29:36:ed:a6:40:2b:
         63:9d:19:eb:d9:a5:d3:9b:fd:f4:4b:34:03:cd:f8:48:db:3b:
         a2:3c:ce:17:70:2d:55:7c:7a:cc:76:b1:d5:d7:2d:1f:57:70:
         65:73:85:a3:21:2a:19:8a:17:79:c0:c0:91:2e:74:25:02:59:
         7b:8a:bc:c9:69:c6:8f:60:44:d8:24:dc:29:d7:a6:30:9e:d9:
         e1:55:0b:69:07:7f:b0:37:bb:aa:45:2f:a2:32:5e:8c:37:5d:
         f1:f8:97:35:b6:4d:ae:40:e0:90:e4:fb:9c:9a:d0:ce:4a:81:
         50:ce:24:21:2b:b5:f6:3d:91:e9:34:01:2a:d3:9f:8d:7d:e3:
         ee:ef:d4:39:f4:39:d3:e4:2e:3f:b5:c0:48:9c:44:07:16:29:
         a6:cb:09:5b:af:66:55:df:f6:da:2b:a0:b9:03:67:01:f1:77:
         0d:cb:3f:63:d4:44:8c:f3:4a:4e:91:ba:d5:26:17:e1:dd:3d:
         37:95:f0:65:ba:4a:10:66:e4:1a:c0:bf:37:60:f7:44:f6:c6:
         36:74:4e:b6:3b:76:cf:29:99:c8:4e:58:8a:8e:92:50:36:64:
         3d:f2:67:c7:11:30:f4:56:5f:40:9e:2c:f5:dc:72:af:8a:b4:
         81:9b:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:30 2026 by rpki-client