This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133312e302f32342d3234203d3e203634313330.roa
File:                     3230312e3231382e3133312e302f32342d3234203d3e203634313330.roa (raw, json)
Hash identifier:          xyDOTmWwwPllkuZcNTC8e5fJMt98lLXHCaZIJNx86Nw=
Subject key identifier:   C3:4B:84:A6:ED:FC:2F:02:0C:F3:A5:4B:2D:0E:08:7B:58:A6:86:C1
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       5D56709900FF3DF41CE540CE299A358ACB8783C3
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133312e302f32342d3234203d3e203634313330.roa
Signing time:             Tue 02 Dec 2025 03:00:00 +0000
ROA not before:           Tue 02 Dec 2025 02:55:00 +0000
ROA not after:            Tue 01 Dec 2026 03:00:00 +0000
asID:                     64130
IP address blocks:        201.218.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:56:70:99:00:ff:3d:f4:1c:e5:40:ce:29:9a:35:8a:cb:87:83:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Dec  2 02:55:00 2025 GMT
            Not After : Dec  1 03:00:00 2026 GMT
        Subject: CN=C34B84A6EDFC2F020CF3A54B2D0E087B58A686C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:a0:92:88:8f:f5:d4:d0:f6:1f:5d:1f:32:
                    5a:e7:74:ea:d9:36:a9:40:24:bf:36:89:ca:c4:15:
                    01:44:66:b7:2b:88:d2:0b:81:ac:c5:30:d1:51:17:
                    74:2f:f1:49:b9:20:28:4f:77:07:28:56:0f:41:f1:
                    d4:f1:c9:64:ef:ee:df:ab:a8:f1:41:1d:c9:69:ea:
                    a9:f4:40:4c:60:5c:c0:48:87:5e:a1:7f:85:ac:62:
                    e9:e7:3b:e5:78:77:be:22:16:fa:59:4b:0c:90:95:
                    61:a0:01:6a:48:3a:67:2b:ad:e2:f8:d2:98:57:38:
                    29:1b:66:d3:f8:0a:46:27:ba:af:37:aa:85:f4:01:
                    5c:0e:5b:00:43:20:66:45:5e:ff:62:09:16:2a:10:
                    86:82:b9:c4:da:0d:1f:29:3a:f5:b4:34:4c:79:81:
                    3d:ab:b8:bd:3d:55:e3:b4:12:b3:67:2e:33:53:e6:
                    97:a6:45:d0:57:70:b9:af:16:b7:8d:21:d8:29:b9:
                    d6:24:b9:50:2c:b7:1d:0b:d9:6c:66:a0:bd:63:74:
                    18:9b:fe:7f:b3:7b:33:76:87:8d:72:de:15:39:7a:
                    02:be:f5:14:56:7e:3f:2c:1c:fe:8a:3b:7b:f1:ab:
                    7e:bf:4e:02:30:62:37:23:12:b2:57:d3:bf:63:23:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4B:84:A6:ED:FC:2F:02:0C:F3:A5:4B:2D:0E:08:7B:58:A6:86:C1
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133312e302f32342d3234203d3e203634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:09:09:72:0f:d5:72:d9:3e:42:f1:a8:94:f3:59:99:9e:
         d2:cb:7c:3e:b1:f4:08:d3:3f:a6:07:98:43:d9:ff:b6:a3:71:
         fc:77:2e:c5:07:47:5c:98:88:3f:f5:19:53:36:01:f0:fb:4a:
         35:fe:87:11:b2:88:55:26:88:a1:99:36:dc:aa:fa:b0:af:e3:
         e2:d5:35:85:e8:03:f1:c8:10:2b:10:72:8b:08:41:3e:89:da:
         a3:7c:e2:6b:d6:e0:a4:9b:e4:2c:dd:68:70:8d:70:c9:3c:1d:
         a7:dc:f0:88:86:3d:a5:ea:43:9b:7b:2d:94:ba:a9:37:d3:8b:
         88:f3:3c:40:8b:7c:a7:42:fc:19:d0:aa:cc:e3:4e:d1:ec:4a:
         5f:0a:bb:9c:0c:f2:62:09:0c:5f:f9:6c:79:3f:40:5c:f9:99:
         a8:7f:71:fa:7c:3b:91:33:01:74:95:09:d7:22:22:aa:f4:e8:
         9f:bf:97:97:a3:7e:7a:96:bb:4e:44:9f:cc:b8:0f:44:d2:41:
         76:10:48:43:8b:6f:0c:c7:f3:87:c6:43:44:7d:91:de:46:0e:
         23:93:89:43:17:b7:10:da:03:56:51:61:cf:e3:e1:ed:08:8c:
         55:4e:fb:ae:39:7e:52:44:e4:84:63:dc:61:88:1c:c7:6d:09:
         b0:f0:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:31:44 2025 by rpki-client