This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa
File:                     3230312e3234372e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          cAz5Gk3qSh2mucgWi3YuQ0haor6/ret//6znitQ3Kgw=
Subject key identifier:   9C:62:E2:57:0D:B2:E9:48:32:70:C3:97:2B:EB:AC:8D:4F:51:24:F4
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       5E680BBE8EE936664024C0913D2C676489B0D18D
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 18:59:25 +0000
ROA not before:           Tue 06 Jan 2026 18:54:25 +0000
ROA not after:            Tue 05 Jan 2027 18:59:25 +0000
asID:                     14754
IP address blocks:        201.247.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:0b:be:8e:e9:36:66:40:24:c0:91:3d:2c:67:64:89:b0:d1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Jan  6 18:54:25 2026 GMT
            Not After : Jan  5 18:59:25 2027 GMT
        Subject: CN=9C62E2570DB2E9483270C3972BEBAC8D4F5124F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:37:1f:80:68:9f:42:67:2f:d0:82:ba:f7:
                    22:e8:80:03:7a:7c:ac:9b:45:34:74:00:e2:84:56:
                    f9:74:e1:6a:24:28:eb:86:28:20:77:f8:5e:0b:0b:
                    35:78:0f:71:78:02:3a:ab:bb:47:11:a4:35:54:d4:
                    89:d5:b2:06:a9:3e:c3:6a:2d:b1:5b:c1:32:8b:e1:
                    5a:ad:fe:8c:1f:74:79:d6:36:06:ce:1c:9a:d7:90:
                    53:b0:95:fb:d6:c5:95:1b:77:46:8a:c3:ad:85:5a:
                    f1:18:90:ec:4e:66:62:09:3d:7b:12:49:41:06:60:
                    f6:a6:ef:d6:65:48:4f:b5:cd:28:10:c0:5f:3d:05:
                    e1:65:2a:82:34:a9:0a:ac:6e:ad:01:67:c5:82:2a:
                    78:b8:88:d1:49:07:8f:51:23:7d:30:8e:ae:fa:6c:
                    f4:66:7d:bc:5d:aa:bd:ca:18:27:7b:36:11:b9:c0:
                    85:c2:76:f5:86:4f:fb:7d:f8:70:6d:4d:27:be:ff:
                    46:91:b2:b3:5c:10:d4:36:dc:fd:0c:0d:0c:a5:b1:
                    7d:00:e9:3a:a7:15:9f:0b:da:a3:c4:f9:76:4d:04:
                    ae:c8:46:35:52:4b:c2:01:dd:08:67:f8:be:85:8c:
                    86:b1:21:48:b4:dd:21:38:5e:74:d7:6c:8a:53:5f:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:62:E2:57:0D:B2:E9:48:32:70:C3:97:2B:EB:AC:8D:4F:51:24:F4
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:94:68:25:2e:40:59:6e:e2:a7:57:1f:2e:cf:99:9c:d3:
         ae:7e:3c:25:e8:4a:43:f6:c5:6f:a5:d5:06:38:71:b4:4f:98:
         57:57:95:a4:d1:bd:c3:4e:53:48:72:de:fb:87:7d:13:42:32:
         cc:b4:32:23:d3:54:80:48:85:d2:19:df:f3:3a:ec:5d:d4:f2:
         43:2c:2e:29:d7:2d:72:93:87:cf:76:34:da:1d:c8:04:4c:d5:
         d8:91:ee:4e:47:1a:90:02:9c:72:57:e0:d2:5e:cd:d7:68:be:
         75:11:88:53:6e:ab:5f:51:3b:fe:43:e9:fa:d6:11:6b:27:93:
         5d:9c:78:fb:27:66:20:7e:f7:59:c8:2e:fc:4b:dc:11:53:27:
         59:9e:4e:f4:a0:05:0a:ba:da:33:06:0b:87:4c:2e:2c:51:4d:
         61:bf:3b:40:27:db:6c:fe:d7:b3:67:39:3a:10:ce:b0:4c:ee:
         8e:bd:cc:d1:66:f8:70:ee:9e:75:c3:81:36:86:ee:9b:59:5a:
         43:5e:24:9d:d4:d9:e2:17:10:63:83:d7:98:db:ea:35:96:af:
         67:f3:ac:86:14:af:4a:45:10:97:95:40:7f:97:1b:da:e6:af:
         e7:25:b4:03:30:9a:c9:1c:99:64:ad:d1:43:0a:b6:24:42:c9:
         26:29:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:45 2026 by rpki-client