This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135372e302f32342d3234203d3e20323731383335.roa
File:                     3230312e3231382e3135372e302f32342d3234203d3e20323731383335.roa (raw, json)
Hash identifier:          8gxcdGAVgjbtjXeYosNPwSnCyYE82sQxQ79bhl56RvU=
Subject key identifier:   0F:CD:A0:45:2F:B6:B1:FE:A1:CE:8A:6F:29:51:95:98:B9:F8:A9:1C
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       27ED439FFD081DCC3039F721474C46CC8D1B6BC0
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135372e302f32342d3234203d3e20323731383335.roa
Signing time:             Tue 06 Jan 2026 19:45:15 +0000
ROA not before:           Tue 06 Jan 2026 19:40:15 +0000
ROA not after:            Tue 05 Jan 2027 19:45:15 +0000
asID:                     271835
IP address blocks:        201.218.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ed:43:9f:fd:08:1d:cc:30:39:f7:21:47:4c:46:cc:8d:1b:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Jan  6 19:40:15 2026 GMT
            Not After : Jan  5 19:45:15 2027 GMT
        Subject: CN=0FCDA0452FB6B1FEA1CE8A6F29519598B9F8A91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:36:5b:36:5b:1d:e3:da:95:33:e4:7f:8e:
                    51:ed:4d:9d:23:da:aa:c8:0a:44:c9:66:7b:d3:fd:
                    82:67:fa:1b:49:47:bc:e6:fd:c4:27:bc:c7:d5:96:
                    21:ce:2e:c0:19:11:a9:cb:65:02:1a:8c:5b:d3:13:
                    1b:b0:1c:7c:75:4e:b2:02:ee:91:ee:50:11:bb:a9:
                    26:cb:bb:aa:98:3f:a5:4c:1e:0b:f8:22:c9:ea:5b:
                    b5:ce:d9:b6:49:5e:dc:4e:d6:e2:55:31:23:c6:9b:
                    70:af:21:39:cf:a5:7f:49:98:6e:90:5c:1c:3c:56:
                    c7:ec:1e:6d:28:0d:d8:18:e3:54:dc:40:85:67:22:
                    ba:cb:40:da:fc:a1:62:d0:f9:cf:3d:ef:89:d9:f9:
                    0b:69:a8:8b:96:1d:fa:82:c4:ba:37:e0:8a:45:52:
                    96:8c:d9:28:98:4b:2b:b4:a9:76:72:2f:86:25:15:
                    e1:ed:22:7d:a2:73:f2:61:b3:f2:cb:01:a2:4e:4a:
                    b4:12:f6:28:59:d0:52:76:c7:60:df:08:de:33:e2:
                    fd:f2:7f:69:11:b3:94:f5:1b:a9:c8:bc:ea:30:76:
                    1b:f3:b3:aa:28:15:7f:c5:f9:f2:87:3f:28:95:9a:
                    fd:54:c5:8c:bb:b8:56:04:29:1c:9c:36:f3:d8:81:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:A0:45:2F:B6:B1:FE:A1:CE:8A:6F:29:51:95:98:B9:F8:A9:1C
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3135372e302f32342d3234203d3e20323731383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:81:ec:f5:1b:01:86:b7:a6:12:45:38:5b:fb:0b:0d:fc:
         41:69:6a:8d:a3:a5:3a:4f:19:57:89:12:10:da:92:f8:e9:7e:
         f9:b3:65:4d:84:56:5d:8c:2e:3c:4f:4b:16:40:4b:57:e9:8e:
         96:3e:10:11:a2:9f:0e:21:99:1a:0a:e8:c4:cc:a9:df:48:6d:
         cf:27:5e:14:d8:00:3e:9a:be:04:ea:e5:be:eb:90:c1:72:37:
         a1:be:a8:83:a3:5e:9a:d0:3a:7e:e6:40:c1:e6:c2:d7:75:1c:
         13:9a:a9:b3:ce:e2:96:12:b4:c0:a1:37:bc:04:9d:f6:53:f7:
         64:2b:a2:23:a8:23:a2:a9:5c:6b:06:e0:cb:b9:9b:9e:18:fb:
         c5:b5:1b:a0:6d:7f:d5:51:fb:58:2d:e6:ff:c6:0d:54:ad:70:
         19:1a:e4:dc:55:fd:81:e0:eb:11:66:4a:76:94:55:39:1c:83:
         5f:b8:83:1a:f3:63:6e:4e:03:ac:af:bb:ab:d8:59:be:02:02:
         57:49:dc:73:ab:a0:c6:fe:9f:c4:12:f9:63:ac:4d:a2:b2:97:
         5c:2d:9d:16:fc:57:70:3a:73:d9:e5:fb:90:30:7b:2a:36:23:
         e6:3f:0c:c5:59:ac:62:6f:61:5c:b6:e7:1e:af:e8:81:1d:e2:
         fe:2f:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:09 2026 by rpki-client