This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31372d3234203d3e203134373534.roa
File:                     3230312e3234372e302e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          Ed0zT4s65UG7TQblG7LJsvQin26AvZx2QE4mj7jE26k=
Subject key identifier:   7E:32:CF:E1:A7:A9:19:31:2C:D1:73:8B:36:44:CF:EA:8A:72:8E:67
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       612724DE2524451BA4E927E37D3A4DFEBDB8A1B0
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 18:59:23 +0000
ROA not before:           Tue 06 Jan 2026 18:54:23 +0000
ROA not after:            Tue 05 Jan 2027 18:59:23 +0000
asID:                     14754
IP address blocks:        201.247.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:27:24:de:25:24:45:1b:a4:e9:27:e3:7d:3a:4d:fe:bd:b8:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Jan  6 18:54:23 2026 GMT
            Not After : Jan  5 18:59:23 2027 GMT
        Subject: CN=7E32CFE1A7A919312CD1738B3644CFEA8A728E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:11:92:6a:71:52:57:ca:50:f8:2a:7b:e7:ea:
                    ba:d4:dd:b0:ec:89:3c:b4:30:c3:f8:a3:d1:23:af:
                    cc:b7:b5:85:d2:f9:50:db:f1:0d:20:98:c0:85:c8:
                    16:8f:39:7a:55:8d:cd:aa:48:3a:ab:4f:62:55:6e:
                    f0:63:35:09:1f:c3:6a:b0:20:08:df:03:26:98:ce:
                    a7:17:bc:1c:18:cd:ab:d9:ef:da:60:ef:85:bb:a6:
                    34:10:83:fa:67:cd:bc:69:de:10:66:a8:c1:fe:d8:
                    34:35:7e:18:3d:f5:eb:24:05:1f:9d:13:ec:1a:9b:
                    b3:4e:e2:2f:87:24:22:d1:da:5d:da:a6:21:3c:4d:
                    ec:cd:92:92:5a:a2:d6:2e:b2:04:ef:0b:08:17:da:
                    e6:a5:63:40:2f:e5:60:c1:2e:8a:7c:73:00:27:f3:
                    3b:75:a2:94:60:9f:f9:64:6e:4a:6b:4f:57:a0:56:
                    ca:5e:88:cf:43:14:a8:2f:67:83:c1:19:4c:c4:c4:
                    d5:f1:ea:6f:4b:cc:8c:a1:2a:ff:6b:7f:0e:3e:40:
                    3e:23:ba:e4:b2:b9:ed:45:76:4b:3c:90:42:e1:c9:
                    22:88:be:53:e3:92:b1:0c:5c:74:6c:07:72:d0:57:
                    58:1e:7d:9d:a2:dd:e8:59:42:b9:6f:73:2c:9e:6f:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:CF:E1:A7:A9:19:31:2C:D1:73:8B:36:44:CF:EA:8A:72:8E:67
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d7:ce:ab:30:4a:8d:ea:d6:1d:42:a8:bc:16:1c:48:f9:ca:eb:
         c1:fd:78:be:7e:25:db:ff:b2:93:08:d5:a3:24:72:2e:db:9e:
         03:ff:61:c8:87:7f:68:f8:47:6d:d7:20:e8:7f:54:96:25:6c:
         87:ec:aa:9c:4d:3f:12:03:15:6c:25:0d:4a:a2:cc:34:2f:77:
         9e:ff:77:5d:ce:40:75:ed:8e:3b:a4:d8:71:63:c8:7d:81:50:
         fc:ad:ac:73:14:d9:b7:b3:86:ba:b5:62:cc:07:8c:27:53:4d:
         c4:d5:1f:f8:53:ac:0e:a6:da:19:41:28:b7:ba:a5:ca:c0:35:
         91:57:df:e5:8b:6b:a7:14:3a:5b:69:08:42:38:9b:de:9d:f0:
         11:95:13:2e:ef:b6:9c:30:84:e8:01:63:67:93:62:8c:ed:08:
         ae:e6:fc:34:ca:03:0a:ac:a2:ff:a1:b6:2d:cb:dc:6c:d0:b8:
         ae:b4:52:78:31:a9:ec:88:20:f2:5b:27:e1:c9:4d:9d:f3:95:
         4a:74:40:a1:96:3f:7c:d6:7c:36:0a:38:c4:5b:14:05:9a:24:
         15:5c:c4:ff:db:aa:35:27:19:6f:84:9e:e7:d7:c2:97:39:02:
         9b:8c:16:6e:3a:89:f4:58:4b:a8:4f:b7:43:bc:55:c2:f5:61:
         4b:24:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:46 2026 by rpki-client