This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa
File:                     3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa (raw, json)
Hash identifier:          mW2n59WSi+ExugiZVV8tA0QYIgnd9bYUfKP4dZJn3QQ=
Subject key identifier:   AA:35:16:51:95:78:4A:39:8C:0B:94:DE:91:FB:2E:9A:05:28:A9:AA
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       11F00F2B50F47B34FAD703CE2FCBA0B0C509A5DB
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa
Signing time:             Tue 06 Jan 2026 19:45:11 +0000
ROA not before:           Tue 06 Jan 2026 19:40:11 +0000
ROA not after:            Tue 05 Jan 2027 19:45:11 +0000
asID:                     64130
IP address blocks:        201.218.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f0:0f:2b:50:f4:7b:34:fa:d7:03:ce:2f:cb:a0:b0:c5:09:a5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Jan  6 19:40:11 2026 GMT
            Not After : Jan  5 19:45:11 2027 GMT
        Subject: CN=AA35165195784A398C0B94DE91FB2E9A0528A9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:f6:88:0d:83:fb:a5:1a:d3:50:f9:30:96:
                    29:c8:07:4f:86:c3:80:ee:f7:64:6a:ee:ae:7e:c3:
                    81:3c:9e:57:16:a5:e3:e3:b7:25:03:8f:75:68:9f:
                    53:8c:27:48:ab:47:58:cf:c3:d0:ff:44:dd:10:05:
                    e0:10:4f:cc:4d:8f:54:55:35:a9:86:a8:a5:94:2d:
                    1d:7a:0d:80:cc:5f:bf:98:c8:72:76:b9:f7:9c:97:
                    cd:fa:18:6e:5b:33:6b:2b:03:0a:fd:a1:8d:10:ec:
                    6d:6f:2a:07:cf:cd:b7:b6:eb:9d:b3:80:a2:52:3f:
                    f8:c6:75:45:b4:14:81:19:24:52:df:2e:ea:1c:f8:
                    d8:d3:37:e7:2e:d3:13:34:c1:63:7a:aa:3d:7c:bb:
                    73:df:cf:c5:a7:ac:fd:39:87:84:1a:a1:d9:43:ef:
                    5d:a2:cf:f7:a1:e0:e0:fb:56:d5:17:7c:ae:5f:94:
                    4c:3f:04:5b:20:33:b5:82:9b:df:20:79:c2:f0:02:
                    0e:cf:98:97:24:1a:a6:22:a7:47:23:b5:80:ec:d6:
                    9b:07:6c:50:8e:a7:a2:db:ef:4b:a6:5d:1c:c1:0c:
                    ec:28:d9:c3:9b:45:30:18:01:67:de:be:23:ff:38:
                    0c:09:4d:16:ad:44:79:79:8b:c0:2d:75:f3:c9:cb:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:16:51:95:78:4A:39:8C:0B:94:DE:91:FB:2E:9A:05:28:A9:AA
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3132392e302f32342d3234203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:32:bf:7b:b6:c4:f9:41:60:4c:7a:d9:00:93:0b:50:ce:
         34:e7:b9:68:b6:4b:2d:f9:b5:48:8d:a4:69:77:a2:7f:9c:41:
         ad:86:a3:d3:09:a4:e8:47:5d:bc:f8:67:6f:26:2d:3b:ec:48:
         50:9e:61:9b:f1:99:29:ec:47:db:c4:63:45:16:1f:ab:82:72:
         64:1f:31:a9:fd:bf:70:7e:27:88:13:ac:6c:83:60:34:6d:f2:
         b7:93:77:69:5d:2e:d3:4f:10:72:40:a6:7f:ed:a8:9c:c2:b6:
         5d:23:0f:24:5f:e8:0f:2d:ff:65:9b:19:7d:8c:90:d1:a8:dd:
         3f:b1:12:01:a8:75:da:b5:b6:73:01:e7:6a:a4:33:51:af:00:
         f6:e9:58:d5:7d:1d:f1:54:51:57:05:2a:4e:39:2a:0e:5f:76:
         05:b5:61:64:42:4b:ea:e9:a9:d2:6d:c9:80:55:b8:38:78:90:
         93:45:ad:9a:8f:2c:de:98:3c:59:b2:e8:cd:dd:af:4f:75:56:
         b8:a7:90:d8:5a:a7:84:3f:63:a3:a8:4c:ec:9a:61:ed:43:33:
         c5:b4:5c:e2:1a:26:83:ef:bc:f4:e9:1f:b3:25:e5:65:db:30:
         22:2d:b3:cd:0e:5b:98:35:4a:10:51:ae:3d:70:2f:f2:c3:9f:
         ec:89:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:17 2026 by rpki-client