This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f32302d3230203d3e203134373534.roa
File:                     3230312e3234372e302e302f32302d3230203d3e203134373534.roa (raw, json)
Hash identifier:          yNePDPGfQKUVRYKNMMNY0bME3DncMKVeXxCqllX0yQE=
Subject key identifier:   68:32:1B:24:3B:FD:72:6F:3C:18:B6:7B:8C:71:BF:30:1A:BC:5D:1F
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       6BFA6A6B5C53B4BE6BBD451BF267E8A64C146FAF
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f32302d3230203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 18:59:24 +0000
ROA not before:           Tue 06 Jan 2026 18:54:24 +0000
ROA not after:            Tue 05 Jan 2027 18:59:24 +0000
asID:                     14754
IP address blocks:        201.247.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fa:6a:6b:5c:53:b4:be:6b:bd:45:1b:f2:67:e8:a6:4c:14:6f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Jan  6 18:54:24 2026 GMT
            Not After : Jan  5 18:59:24 2027 GMT
        Subject: CN=68321B243BFD726F3C18B67B8C71BF301ABC5D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:fa:b5:13:db:d6:be:37:87:08:da:2d:32:
                    1a:bd:79:cc:ad:39:e8:db:eb:72:f5:c6:e6:b6:db:
                    a7:1b:06:11:2d:8e:dd:3e:5c:38:79:89:34:ad:20:
                    65:9b:1b:cd:ef:8f:ec:b8:0f:9f:0c:1e:f9:23:f9:
                    e1:08:0f:7c:16:87:8b:30:24:48:c7:d8:df:32:e8:
                    1e:ac:1b:e8:1c:3f:bc:c2:68:d4:18:bc:86:0f:93:
                    b7:d6:be:d6:b3:7b:f2:c9:ae:95:a9:ba:c1:f4:18:
                    72:60:29:c8:31:28:6a:cd:d9:71:1c:2d:14:b6:ec:
                    c2:54:b6:dd:ed:1c:a1:58:21:64:a7:b7:2a:80:b1:
                    b5:47:9a:4e:60:29:f7:4d:ab:13:6f:f7:4f:df:d1:
                    8c:f1:a6:22:e6:b3:53:82:b5:87:e0:d4:3a:a7:00:
                    b5:39:89:bf:59:68:1a:95:5d:06:c2:6b:f7:25:ed:
                    37:66:9d:3a:36:27:a3:ea:b0:77:e6:5d:cd:5a:a7:
                    71:e6:5e:c8:fa:65:1b:6e:7f:58:c3:dd:d3:3d:ad:
                    49:dd:85:47:15:a1:54:79:d5:97:61:80:ea:7e:7f:
                    a3:af:f4:50:79:08:06:67:c8:30:62:7b:1f:38:8b:
                    30:4f:45:ce:f9:5c:bd:67:f4:bd:b8:66:27:7a:95:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:1B:24:3B:FD:72:6F:3C:18:B6:7B:8C:71:BF:30:1A:BC:5D:1F
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e302e302f32302d3230203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.247.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d6:75:05:be:fa:51:dc:6c:6d:67:07:3a:bc:dd:4f:8b:08:7c:
         46:77:51:cf:97:fd:1c:c3:ce:ba:03:9c:0c:ab:c6:b0:4f:9e:
         ad:ad:68:b9:ed:b8:35:f8:ef:67:b6:7b:1d:84:9c:9b:47:d4:
         d8:0b:d1:c8:be:31:65:09:94:b3:46:fc:ed:5f:8a:87:1f:af:
         5f:24:dd:a7:08:f0:72:e0:00:1c:9d:4b:a3:cb:03:e4:c8:cc:
         a0:e0:b6:13:3f:de:f7:71:ec:d8:e5:f3:eb:a9:53:88:f0:2f:
         0e:6b:df:f3:2c:9c:88:96:9e:ee:09:09:03:1c:fd:31:5a:aa:
         e5:41:31:6f:b2:2c:97:e3:07:55:17:14:00:eb:88:9a:0c:69:
         8f:34:cb:9a:aa:60:3b:a1:04:6e:22:10:66:68:17:cf:a5:cd:
         e2:40:d0:75:4f:74:11:3a:22:9d:b9:fe:7e:ad:7a:74:7a:fa:
         e1:7c:e1:51:58:36:0b:a3:d1:4a:0d:ed:91:35:05:14:6a:d7:
         57:90:0d:17:86:2c:38:b9:46:3c:98:9d:e7:ff:60:ad:3d:31:
         32:c0:db:20:b3:ef:f7:2b:9b:08:7d:de:0d:38:0c:04:e4:12:
         d2:88:64:11:e8:91:21:49:9e:ab:d0:8b:6e:33:ea:25:cf:aa:
         67:0c:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:46 2026 by rpki-client