This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133332e302f32342d3234203d3e20323732383438.roa
File:                     3230312e3231382e3133332e302f32342d3234203d3e20323732383438.roa (raw, json)
Hash identifier:          SeMgLvxdNJsdHEkpS7+7XKYZEU82qrLdcGm8T8Hj4mc=
Subject key identifier:   39:14:B1:93:84:46:65:F1:61:A6:55:73:F4:AD:52:5B:00:3B:17:BB
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       C1AECD30FFAF0540D8A658286FE26BEBA95B73
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133332e302f32342d3234203d3e20323732383438.roa
Signing time:             Tue 06 Jan 2026 19:45:16 +0000
ROA not before:           Tue 06 Jan 2026 19:40:16 +0000
ROA not after:            Tue 05 Jan 2027 19:45:16 +0000
asID:                     272848
IP address blocks:        201.218.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:ae:cd:30:ff:af:05:40:d8:a6:58:28:6f:e2:6b:eb:a9:5b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Jan  6 19:40:16 2026 GMT
            Not After : Jan  5 19:45:16 2027 GMT
        Subject: CN=3914B193844665F161A65573F4AD525B003B17BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:36:40:e1:b1:85:11:87:8b:c7:fc:9d:91:
                    c5:02:9a:73:77:aa:8a:f7:7b:2f:e4:55:95:8f:e2:
                    03:3e:de:f1:cc:10:58:95:1e:98:58:aa:19:13:90:
                    21:9d:4e:00:21:48:14:ec:46:ad:3a:d5:d3:f1:77:
                    4d:9b:78:ba:2d:14:d5:70:a7:d1:40:6b:05:1a:a9:
                    66:1d:08:5e:85:7a:e0:3b:31:f5:b8:46:cb:45:76:
                    91:d3:47:ac:aa:82:4c:a9:d1:2d:70:aa:52:20:91:
                    18:d5:8b:c1:84:0d:23:46:14:bb:d3:4b:c4:1e:5a:
                    e4:ef:7a:34:d5:62:31:0e:43:d9:8a:4d:15:7b:f3:
                    ff:ed:51:fb:fb:0c:bd:67:56:1c:0d:a1:43:6a:83:
                    6c:1f:57:53:bf:41:d6:55:c4:51:c1:ff:60:f9:1a:
                    bd:f0:00:7f:df:9d:bf:4d:d6:7a:db:d1:e2:1a:b3:
                    9e:40:d6:df:25:ea:0f:7d:77:3c:21:05:4a:05:75:
                    57:bf:2f:b7:50:71:37:33:a6:7a:53:2c:cb:8d:14:
                    87:4d:c8:61:e5:4a:52:12:17:5d:d1:5e:ea:9f:c2:
                    10:25:1e:db:df:ab:e1:b0:fe:b2:ab:a0:92:11:ad:
                    98:75:9d:c9:cc:42:82:53:e3:02:a4:3c:83:49:88:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:B1:93:84:46:65:F1:61:A6:55:73:F4:AD:52:5B:00:3B:17:BB
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3133332e302f32342d3234203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:98:27:41:1a:96:b5:ae:3d:f7:d3:5a:28:b0:4d:0a:e0:bd:
         91:c6:9e:c5:63:ed:9e:0e:a2:4d:50:58:11:bb:d8:52:65:6f:
         f7:49:14:27:7a:c4:db:27:0b:ce:87:bd:52:b3:a3:f9:2e:42:
         8f:ca:ba:00:7f:06:7e:f3:9f:4c:54:f8:f9:88:1a:b0:cc:d2:
         85:e7:94:af:a3:11:b2:a9:7a:c7:e7:aa:ef:6a:ba:65:89:7e:
         58:f8:dd:1a:8d:71:30:c7:98:d4:51:5f:1f:67:ea:cc:dc:7a:
         1d:8b:00:3a:63:1f:d8:51:f4:d5:af:84:4e:2e:57:5b:31:e6:
         09:8e:11:47:cf:43:79:11:88:a8:75:16:89:17:9e:d7:6a:82:
         bc:92:33:b1:3a:48:63:64:bc:ac:f1:3c:77:80:8a:ef:ff:ee:
         d5:31:89:bb:af:d4:15:60:3e:2f:97:6a:c6:af:b1:aa:2b:f1:
         e6:d2:c3:53:c9:26:12:52:ea:19:c8:0a:a5:c1:4d:dd:b3:be:
         b7:a2:ab:f7:84:d2:36:43:90:a0:84:00:58:e6:47:d9:3a:21:
         a5:6c:8f:14:55:e9:8a:96:b6:43:cb:02:60:c2:92:6a:67:87:
         6e:d3:0b:a8:ff:46:f9:5c:95:8a:1f:ef:0c:f6:ce:90:ca:0c:
         f5:15:8f:b2
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUAMGuzTD/rwVA2KZYKG/ia+upW3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNjAxMDYxOTQwMTZaFw0yNzAxMDUxOTQ1MTZaMDMxMTAvBgNV
BAMTKDM5MTRCMTkzODQ0NjY1RjE2MUE2NTU3M0Y0QUQ1MjVCMDAzQjE3QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUzZA4bGFEYeLx/ydkcUCmnN3
qor3ey/kVZWP4gM+3vHMEFiVHphYqhkTkCGdTgAhSBTsRq061dPxd02beLotFNVw
p9FAawUaqWYdCF6FeuA7MfW4RstFdpHTR6yqgkyp0S1wqlIgkRjVi8GEDSNGFLvT
S8QeWuTvejTVYjEOQ9mKTRV78//tUfv7DL1nVhwNoUNqg2wfV1O/QdZVxFHB/2D5
Gr3wAH/fnb9N1nrb0eIas55A1t8l6g99dzwhBUoFdVe/L7dQcTczpnpTLMuNFIdN
yGHlSlISF13RXuqfwhAlHtvfq+Gw/rKroJIRrZh1ncnMQoJT4wKkPINJiMHvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUORSxk4RGZfFhplVz9K1SWwA7F7swHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMyMzAzMTJlMzIzMTM4MmUzMTMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM0Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ
2oUwDQYJKoZIhvcNAQELBQADggEBABGYJ0EalrWuPffTWiiwTQrgvZHGnsVj7Z4O
ok1QWBG72FJlb/dJFCd6xNsnC86HvVKzo/kuQo/KugB/Bn7zn0xU+PmIGrDM0oXn
lK+jEbKpesfnqu9qumWJflj43RqNcTDHmNRRXx9n6szceh2LADpjH9hR9NWvhE4u
V1sx5gmOEUfPQ3kRiKh1FokXntdqgrySM7E6SGNkvKzxPHeAiu//7tUxibuv1BVg
Pi+Xasavsaor8ebSw1PJJhJS6hnICqXBTd2zvreiq/eE0jZDkKCEAFjmR9k6IaVs
jxRV6YqWtkPLAmDCkmpnh27TC6j/RvlclYof7wz2zpDKDPUVj7I=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:59 2026 by rpki-client