This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa
File:                     3230312e3135392e35362e302f32312d3234203d3e203532323535.roa (raw, json)
Hash identifier:          gXtjYQcB511SZtJ1mfYGCxrXtbDm46cnjROejGymTY4=
Subject key identifier:   48:77:04:8E:BE:E9:49:5D:0E:23:CD:EB:49:A9:CE:ED:01:7D:CD:AE
Certificate issuer:       /CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
Certificate serial:       10D8F869C23887CE768DA3821A30E47E1CBD0127
Authority key identifier: 07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa
Signing time:             Tue 06 Jan 2026 18:57:47 +0000
ROA not before:           Tue 06 Jan 2026 18:52:47 +0000
ROA not after:            Tue 05 Jan 2027 18:57:47 +0000
asID:                     52255
IP address blocks:        201.159.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d8:f8:69:c2:38:87:ce:76:8d:a3:82:1a:30:e4:7e:1c:bd:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A392B2A81913D27F04B16E33DA798EA5E4B8A3
        Validity
            Not Before: Jan  6 18:52:47 2026 GMT
            Not After : Jan  5 18:57:47 2027 GMT
        Subject: CN=4877048EBEE9495D0E23CDEB49A9CEED017DCDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:a8:fc:27:68:29:bf:a7:62:45:42:2f:5a:
                    c0:b6:37:b0:33:f4:b6:4a:df:6e:39:86:85:7c:3e:
                    4c:47:2f:c7:a9:a1:11:de:da:8a:cb:27:50:e1:51:
                    bc:5a:77:13:10:e9:19:0d:0a:45:aa:7c:c7:70:cd:
                    3c:a2:d9:8c:e8:95:94:4a:20:8e:6c:31:0d:60:0f:
                    6d:d0:c5:01:71:4d:d9:57:b8:6c:d2:b6:d2:d7:85:
                    c3:a0:66:98:ec:69:35:b2:05:da:fe:10:15:38:8a:
                    8a:01:bb:2d:58:69:1d:8a:c5:40:09:a2:71:7b:d0:
                    cc:fa:31:73:4d:84:7a:16:dc:d3:83:65:de:e7:e9:
                    3b:96:94:34:e2:4d:20:0e:76:fa:7a:e4:0c:47:ea:
                    31:e4:90:ed:13:ec:42:54:18:b9:43:17:9c:31:29:
                    ba:09:1c:85:6b:42:24:76:a3:08:e7:f2:e3:00:2e:
                    23:b0:ca:72:8f:18:e6:31:20:e3:7f:b5:05:46:62:
                    72:10:d3:42:45:31:81:60:29:0b:e0:d9:ee:91:44:
                    b2:c3:23:b2:66:1f:a4:0d:ec:a1:6e:9b:1e:35:be:
                    c2:07:09:2d:be:0c:19:09:31:cb:96:15:27:3b:03:
                    4e:07:da:b8:8c:9d:ea:91:4c:92:82:59:26:69:2c:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:77:04:8E:BE:E9:49:5D:0E:23:CD:EB:49:A9:CE:ED:01:7D:CD:AE
            X509v3 Authority Key Identifier:
                keyid:07:A3:92:B2:A8:19:13:D2:7F:04:B1:6E:33:DA:79:8E:A5:E4:B8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07A392B2A81913D27F04B16E33DA798EA5E4B8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE3FAF8B48149878FA72C6C8B85A317DD0DA696660834DEA597254200506983/0/3230312e3135392e35362e302f32312d3234203d3e203532323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:14:bf:65:1e:92:f3:33:73:62:3b:5d:94:70:aa:6b:9f:a4:
         57:79:22:5a:ba:a6:59:79:f5:45:80:68:b4:d8:e1:7e:d3:90:
         cb:6a:92:1c:76:b7:2a:f9:71:22:0f:a8:09:89:95:07:0a:24:
         90:55:4e:bb:f4:20:bf:a2:22:99:c6:6f:30:d0:ea:9c:b4:94:
         57:d0:b3:5c:d6:84:8d:c7:18:00:9f:53:89:d3:09:e1:01:4c:
         41:f3:e9:b3:37:e4:01:ed:89:9d:fc:e8:ee:8f:d8:2b:ae:99:
         31:f1:e4:85:ff:7c:7a:2b:f8:5f:3b:f4:a0:6e:90:17:b4:78:
         11:bf:00:92:f5:e8:9e:6f:03:f1:9f:b4:d8:63:46:1a:c3:84:
         74:2e:46:9b:59:40:b4:44:97:4a:06:cc:44:64:fd:60:c0:30:
         b7:05:de:b8:32:23:74:76:d7:c0:34:f6:97:5d:b5:83:47:7a:
         4a:8f:ed:a1:5f:cd:2e:0b:40:a3:5a:37:0b:5b:83:91:0c:64:
         26:a7:56:89:c9:8c:f4:7e:be:ea:35:09:16:85:21:13:c2:7a:
         26:d0:03:14:70:47:74:53:00:60:c6:13:54:03:78:4a:56:38:
         e0:8a:c9:47:3f:a3:a8:90:9a:5b:34:ad:30:f8:f6:66:d3:7f:
         d2:1c:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:17 2026 by rpki-client