This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa
File:                     3230312e3138322e322e302f32342d3234203d3e20323635383130.roa (raw, json)
Hash identifier:          Qx3fyTIfOiorP7WAkcNfMvYJQRlpgjvtuiRzl95CLm4=
Subject key identifier:   21:A9:7F:E3:41:66:C5:DF:A7:FD:A6:D5:CB:3D:0B:8C:3A:62:12:DF
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       649BCB360C23A2332EEB5B81B832ABD694359146
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa
Signing time:             Tue 06 Jan 2026 19:40:02 +0000
ROA not before:           Tue 06 Jan 2026 19:35:02 +0000
ROA not after:            Tue 05 Jan 2027 19:40:02 +0000
asID:                     265810
IP address blocks:        201.182.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9b:cb:36:0c:23:a2:33:2e:eb:5b:81:b8:32:ab:d6:94:35:91:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Jan  6 19:35:02 2026 GMT
            Not After : Jan  5 19:40:02 2027 GMT
        Subject: CN=21A97FE34166C5DFA7FDA6D5CB3D0B8C3A6212DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:f3:01:ae:27:87:81:31:98:f7:02:85:8a:
                    6f:35:a8:c6:1f:23:75:7b:d3:77:30:d6:b3:9b:de:
                    a0:f2:f0:e4:c1:63:ee:48:8c:df:8e:69:b0:f1:cb:
                    ea:56:2d:7c:c2:c2:d0:04:9e:48:fc:9a:4a:5e:06:
                    49:44:8d:85:2b:fc:e2:7e:29:8c:1c:e6:b1:23:68:
                    ac:51:f7:68:b2:30:66:11:77:e7:54:39:de:34:8e:
                    60:3f:7a:e3:cb:ec:dd:5f:70:b2:47:a1:9e:37:4e:
                    e5:54:75:29:94:2a:00:1f:f1:d2:a1:a5:08:ed:49:
                    e4:48:d8:de:39:5e:58:d3:1d:7d:c1:11:98:95:99:
                    6a:9a:07:b4:63:ec:e0:c8:93:71:e7:f3:48:64:29:
                    21:b6:a7:b8:62:be:68:ff:07:19:26:67:99:36:46:
                    01:0f:14:23:ce:c0:4d:55:ba:b8:18:be:20:36:dc:
                    1e:d4:0d:42:f9:83:82:8d:0b:a0:dd:29:05:7a:48:
                    31:85:78:5b:b8:38:50:2b:0c:ee:d7:b5:31:12:da:
                    a6:77:b8:5c:b9:1a:d3:55:8e:7f:99:87:2f:27:cf:
                    24:7a:2e:76:f5:6e:5b:3c:3d:be:2b:de:34:02:ec:
                    4b:a2:02:a5:81:a6:06:97:9c:74:60:45:ee:7e:06:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:7F:E3:41:66:C5:DF:A7:FD:A6:D5:CB:3D:0B:8C:3A:62:12:DF
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e322e302f32342d3234203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:8f:33:22:02:96:b3:cb:52:35:f2:d7:f8:f7:1e:d0:54:
         86:ba:01:cb:ba:a9:4d:92:8c:10:9a:9a:e1:3f:e0:cb:03:b1:
         b4:3a:89:7d:d6:aa:25:80:01:66:1c:0a:e4:b2:84:0e:45:c2:
         b5:ea:b9:d9:ad:8f:38:21:a5:ab:d7:81:9d:79:c4:cc:ef:9b:
         41:eb:1b:8e:31:5c:03:90:b0:e1:fe:20:42:d9:68:2b:c9:16:
         76:0a:7e:6b:08:f1:12:df:82:fc:b2:6e:a8:34:27:33:30:2b:
         e9:22:0f:df:ca:ff:56:93:ce:23:c3:b2:ca:ad:47:42:8a:e7:
         1f:ad:1f:66:29:b7:3e:1e:cf:22:76:b6:b5:79:fa:11:54:23:
         2b:0f:06:ee:cf:b3:aa:79:91:31:9b:0c:07:a9:86:d7:00:49:
         06:34:24:54:b8:3a:0b:df:5b:86:d8:3a:fa:4d:f4:0b:f8:96:
         e1:8e:63:91:64:68:24:03:77:05:35:f0:36:b2:d7:a5:9a:32:
         e1:ab:91:94:e9:31:35:e9:ac:59:9f:31:dc:b9:a4:59:44:0f:
         1f:c1:c2:db:34:35:79:47:ec:ba:5a:85:94:c4:22:1e:f8:6f:
         f5:b1:8e:48:40:d5:87:66:ef:fa:7b:b8:88:07:bd:b2:c1:5e:
         91:48:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:17 2026 by rpki-client