This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e332e302f32342d3234203d3e20323635383130.roa
File:                     3230312e3138322e332e302f32342d3234203d3e20323635383130.roa (raw, json)
Hash identifier:          uZm0IEH61YFKL9nN74BeW8KWj+p2CTqN4FwfQGPsUS4=
Subject key identifier:   61:45:5B:2E:0B:CB:ED:C0:E6:53:66:7D:31:57:25:86:37:95:51:BA
Certificate issuer:       /CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
Certificate serial:       4D2A2A8AB6682FE2B8C38E6C79BFD044F7E89117
Authority key identifier: 19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e332e302f32342d3234203d3e20323635383130.roa
Signing time:             Tue 06 Jan 2026 19:40:02 +0000
ROA not before:           Tue 06 Jan 2026 19:35:02 +0000
ROA not after:            Tue 05 Jan 2027 19:40:02 +0000
asID:                     265810
IP address blocks:        201.182.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2a:2a:8a:b6:68:2f:e2:b8:c3:8e:6c:79:bf:d0:44:f7:e8:91:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196213DAEB5B1D8D5E669BE2FDCAFCD83B986883
        Validity
            Not Before: Jan  6 19:35:02 2026 GMT
            Not After : Jan  5 19:40:02 2027 GMT
        Subject: CN=61455B2E0BCBEDC0E653667D31572586379551BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:ae:bc:2e:c0:a9:4b:33:4c:8c:bd:5f:cf:
                    b2:d8:de:4a:7d:6a:e4:18:fe:a8:23:1d:29:29:dc:
                    28:38:65:1b:7c:05:71:11:65:78:4a:62:ca:d6:a7:
                    55:f0:17:14:81:08:77:48:02:9d:86:95:c1:08:f1:
                    94:10:3d:d1:e1:d4:70:f9:b3:bb:cb:f7:3f:43:51:
                    c4:80:b7:a3:a2:dd:bd:51:08:93:fb:46:a6:ca:64:
                    ff:53:67:59:a9:65:5c:dc:8c:66:91:4f:fa:20:38:
                    f0:31:10:ac:7f:9a:91:31:2c:16:32:d9:14:d3:93:
                    a3:67:48:b6:3f:07:c3:96:0d:0b:46:58:3c:17:e3:
                    4b:b6:ae:e3:f3:8d:47:f4:5b:71:ee:bb:f0:f5:2f:
                    9d:62:03:f1:76:21:59:35:1b:5e:61:49:f9:5d:83:
                    34:0e:ad:6d:25:c9:53:d5:e7:a4:c1:f0:38:36:1d:
                    27:2b:b7:bc:66:54:35:0b:83:89:7b:28:4c:8a:62:
                    d7:3c:73:5d:5e:cf:12:ff:60:fb:c0:1e:50:20:1f:
                    d6:9d:0d:7a:ed:2d:5f:9d:bb:cc:96:93:ff:63:1f:
                    05:c5:88:29:bd:c5:d3:26:72:54:9c:ec:f9:df:29:
                    3e:d9:04:75:c2:71:e2:aa:b5:4e:0c:4d:14:f9:2f:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:45:5B:2E:0B:CB:ED:C0:E6:53:66:7D:31:57:25:86:37:95:51:BA
            X509v3 Authority Key Identifier:
                keyid:19:62:13:DA:EB:5B:1D:8D:5E:66:9B:E2:FD:CA:FC:D8:3B:98:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/196213DAEB5B1D8D5E669BE2FDCAFCD83B986883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6403E429D834D7BFC1329F9170CAEC9868C964B8E3ECFA9967B33466A994C07A/0/3230312e3138322e332e302f32342d3234203d3e20323635383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:13:7d:a4:b1:9a:68:e8:05:59:17:4e:2f:d3:88:f2:15:46:
         d9:57:8d:86:f0:d1:5d:f2:23:37:57:b2:11:2e:47:a2:65:6b:
         9b:92:e6:71:19:99:1b:f6:85:cd:17:aa:d4:59:1b:f7:72:29:
         4d:a4:db:70:61:05:61:26:7f:4b:a6:a1:3b:0c:4f:e5:a7:de:
         c9:7a:97:ef:7a:02:9d:ce:ba:70:c7:b7:7a:a8:1a:07:7b:f1:
         4b:a1:d4:51:99:23:c5:74:2a:d5:02:ec:85:64:a3:9b:4d:63:
         e0:2a:ac:6a:65:a9:9f:33:53:8b:96:68:89:10:7b:90:a2:de:
         2b:03:bf:ef:78:8b:2d:f9:32:7d:4b:3b:24:8c:27:60:d1:6e:
         f1:04:1a:aa:26:ab:79:61:fa:18:00:b5:52:03:30:5d:8d:c2:
         2b:42:24:fb:5c:8d:bc:d7:7e:dd:7c:9c:b9:48:81:75:2f:66:
         98:47:ac:19:1c:bc:7e:b8:81:9a:9c:ff:aa:79:df:57:3d:ac:
         ee:17:05:e6:27:7c:6e:e3:32:7e:d7:71:74:66:40:ed:6d:46:
         dc:4b:ab:b1:7d:22:5a:28:8f:77:79:95:43:df:cd:ce:0a:e5:
         a0:5d:c0:0c:29:4d:b3:9a:ba:45:da:b9:49:73:1d:e4:e5:90:
         1d:1c:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:00 2026 by rpki-client