This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa
File:                     AS263221.roa (raw, json)
Hash identifier:          2zU44aYLsx/RPvAHcPJiNCqYz6xLxkcHdsaXjEKCWtA=
Subject key identifier:   20:DE:D0:79:9B:C1:51:5B:7A:BE:25:B8:F6:56:AB:38:FC:CA:4C:2F
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       03D66A73C4F4D771984F433B81DA2D94575D2113
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa
Signing time:             Tue 06 Jan 2026 19:10:31 +0000
ROA not before:           Tue 06 Jan 2026 19:05:31 +0000
ROA not after:            Tue 05 Jan 2027 19:10:31 +0000
asID:                     263221
IP address blocks:        201.251.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d6:6a:73:c4:f4:d7:71:98:4f:43:3b:81:da:2d:94:57:5d:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Jan  6 19:05:31 2026 GMT
            Not After : Jan  5 19:10:31 2027 GMT
        Subject: CN=20DED0799BC1515B7ABE25B8F656AB38FCCA4C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:e2:42:1c:70:bd:4e:02:04:43:63:6a:d4:
                    2e:63:2b:d9:68:19:35:61:e7:b9:34:01:72:24:34:
                    9d:e1:0e:da:a6:69:28:a7:61:f9:de:b6:f0:59:8a:
                    71:13:a5:a5:f2:61:1a:5d:39:f2:82:f0:58:eb:4d:
                    8e:b7:cf:f6:f1:e2:7c:e3:c8:be:c6:ae:8c:3e:2b:
                    d7:95:a7:c8:62:3e:35:cd:68:4b:6b:e0:95:71:a6:
                    da:6b:81:a1:3d:1a:69:33:51:4d:af:8a:cc:e3:90:
                    89:0e:49:e3:e3:d7:87:4b:a8:4d:0e:f3:ad:7d:10:
                    d6:03:d7:93:d7:30:b6:2f:87:c2:b4:cd:58:96:ae:
                    2b:8a:29:4a:a4:08:6d:bc:4b:4c:d7:d6:d4:f6:96:
                    37:f2:82:66:4e:e5:a8:d6:ae:ed:2f:1e:65:e0:0c:
                    83:c3:66:69:96:eb:3a:1f:ae:ae:16:f4:e1:fa:b4:
                    23:1f:29:f0:33:2b:fb:91:cb:da:7e:11:56:00:70:
                    73:5c:21:b3:a2:eb:22:ae:3d:f9:79:73:19:4c:de:
                    76:d7:cd:32:2d:86:72:db:62:a4:16:65:d3:05:47:
                    5f:84:c8:84:a3:f0:b9:5e:b3:d5:18:4e:51:c5:55:
                    4d:b7:7e:4f:e2:27:72:a7:7f:9a:f5:7d:c3:53:ce:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:D0:79:9B:C1:51:5B:7A:BE:25:B8:F6:56:AB:38:FC:CA:4C:2F
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:cd:0c:57:b1:9e:d6:3a:dc:a8:40:77:a4:bf:6b:75:82:
         bb:b4:0c:77:f7:db:57:a3:a5:d2:d9:c6:5c:f8:1f:1a:1d:11:
         dd:14:2c:2e:21:c4:f1:a3:ff:d3:f7:fb:67:2a:09:93:bd:6e:
         3c:8b:64:1d:8c:59:88:f6:06:b9:5e:3e:82:ca:9e:90:84:27:
         2a:c7:2a:59:a0:1d:54:51:0f:d4:05:53:55:4f:90:e5:42:35:
         65:7d:22:4d:ef:13:59:80:c0:00:eb:89:c4:df:ce:54:2d:1b:
         62:04:bd:50:fa:08:8c:a6:89:ce:53:a6:44:f9:29:14:c9:f2:
         d9:d9:98:8e:47:c7:1b:7f:d9:ff:86:70:5e:12:69:66:9c:59:
         2d:e5:40:29:8b:cd:05:12:9e:dd:1b:3e:f8:77:e3:4b:b2:b0:
         9c:2a:4a:a3:ac:0d:e8:7e:41:f1:fb:0d:2a:47:8f:f9:c0:b0:
         8a:0c:95:ef:5f:fd:1c:6c:f5:66:96:c6:a2:b0:57:41:bc:31:
         79:31:9c:7f:33:ca:4a:94:27:5e:92:f8:62:a7:08:b4:66:79:
         d4:e2:36:c0:a8:9c:b3:f4:c6:82:4a:64:b4:f1:00:ae:6d:f5:
         98:51:b9:47:44:13:1d:bf:a5:55:be:be:41:67:df:61:cd:4d:
         3f:89:22:e8
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUA9Zqc8T013GYT0M7gdotlFddIRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNjAxMDYxOTA1MzFaFw0yNzAxMDUxOTEwMzFaMDMxMTAvBgNV
BAMTKDIwREVEMDc5OUJDMTUxNUI3QUJFMjVCOEY2NTZBQjM4RkNDQTRDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3uJCHHC9TgIEQ2Nq1C5jK9lo
GTVh57k0AXIkNJ3hDtqmaSinYfnetvBZinETpaXyYRpdOfKC8FjrTY63z/bx4nzj
yL7Grow+K9eVp8hiPjXNaEtr4JVxptprgaE9GmkzUU2viszjkIkOSePj14dLqE0O
8619ENYD15PXMLYvh8K0zViWriuKKUqkCG28S0zX1tT2ljfygmZO5ajWru0vHmXg
DIPDZmmW6zofrq4W9OH6tCMfKfAzK/uRy9p+EVYAcHNcIbOi6yKuPfl5cxlM3nbX
zTIthnLbYqQWZdMFR1+EyISj8Lles9UYTlHFVU23fk/iJ3Knf5r1fcNTzv1LAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUIN7QeZvBUVt6viW49larOPzKTC8wHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNjMyMjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ+ygw
DQYJKoZIhvcNAQELBQADggEBALfozQxXsZ7WOtyoQHekv2t1gru0DHf321ejpdLZ
xlz4HxodEd0ULC4hxPGj/9P3+2cqCZO9bjyLZB2MWYj2BrlePoLKnpCEJyrHKlmg
HVRRD9QFU1VPkOVCNWV9Ik3vE1mAwADricTfzlQtG2IEvVD6CIymic5TpkT5KRTJ
8tnZmI5Hxxt/2f+GcF4SaWacWS3lQCmLzQUSnt0bPvh340uysJwqSqOsDeh+QfH7
DSpHj/nAsIoMle9f/Rxs9WaWxqKwV0G8MXkxnH8zykqUJ16S+GKnCLRmedTiNsCo
nLP0xoJKZLTxAK5t9ZhRuUdEEx2/pVW+vkFn32HNTT+JIug=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:58 2026 by rpki-client