This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa
File:                     3230312e3232312e37322e302f32312d3234203d3e203237373839.roa (raw, json)
Hash identifier:          68z7eRHvwVSRaatY17luKHfrJe/KiDcXBRxSXRe/97I=
Subject key identifier:   58:2E:05:06:5E:66:6D:05:7D:4F:46:CA:66:C1:B4:9B:17:48:5F:16
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7A41E1C8749E7318E8E75BC74797EFF73E4285F9
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa
Signing time:             Tue 06 Jan 2026 20:58:49 +0000
ROA not before:           Tue 06 Jan 2026 20:53:49 +0000
ROA not after:            Tue 05 Jan 2027 20:58:49 +0000
asID:                     27789
IP address blocks:        201.221.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:e1:c8:74:9e:73:18:e8:e7:5b:c7:47:97:ef:f7:3e:42:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan  6 20:53:49 2026 GMT
            Not After : Jan  5 20:58:49 2027 GMT
        Subject: CN=582E05065E666D057D4F46CA66C1B49B17485F16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:fd:c2:99:04:ac:f2:1c:a7:1c:36:b0:20:
                    af:f6:ec:a6:17:a6:16:c0:3f:d1:11:ea:96:91:c0:
                    13:ff:6f:96:c5:5f:cc:1e:9b:f5:eb:34:e1:e9:f1:
                    f5:db:e8:8a:23:a2:06:55:27:60:82:36:28:ec:37:
                    91:2b:ee:7f:fc:8b:6b:1e:91:38:e6:50:35:9f:a7:
                    51:0c:0f:e2:3f:b6:ca:84:71:c7:25:8b:23:34:61:
                    34:6d:75:a6:5c:dc:8f:bb:59:65:8f:1e:dc:a1:7f:
                    8d:cc:57:95:f7:b9:73:d7:e3:68:14:7d:15:c9:7f:
                    b1:de:ba:60:03:a1:a0:06:c4:da:79:61:51:ff:e6:
                    71:d9:86:f5:5a:5f:f2:01:f7:97:a9:1e:1d:a8:ce:
                    16:85:68:21:14:8d:b6:a7:4b:f9:fe:3a:41:04:13:
                    f8:2d:be:b3:1d:fd:5d:6b:93:94:d7:7e:e7:7e:40:
                    92:56:68:77:82:07:5f:38:f8:b2:d3:aa:85:1c:d7:
                    40:95:95:ca:ac:27:b7:61:79:24:6e:87:30:67:95:
                    e5:44:07:3c:0c:b9:84:64:d5:a5:46:12:e6:f1:4a:
                    f7:8f:fa:5c:17:d5:b5:ae:51:36:c0:41:8d:83:38:
                    31:19:68:7d:0a:7b:d0:80:34:86:67:b7:1f:32:09:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:05:06:5E:66:6D:05:7D:4F:46:CA:66:C1:B4:9B:17:48:5F:16
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e37322e302f32312d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:b1:82:5e:56:40:4a:40:f6:a1:fd:16:ef:59:d7:cb:ef:
         79:d7:fc:75:aa:8d:7f:25:63:cd:33:d0:83:6b:a5:db:a6:9b:
         c3:16:91:cd:3d:d3:5c:88:43:32:8b:74:35:50:43:3f:9e:d9:
         aa:2d:13:b2:ec:ac:bf:4c:36:fc:28:80:a6:c9:08:14:3c:c8:
         eb:c5:fc:ef:77:23:07:a1:e2:3c:0e:fc:a9:99:a2:15:6c:04:
         3a:b4:78:de:cc:25:7a:bf:da:05:82:74:99:f8:5a:38:7d:30:
         6a:f8:e0:4f:31:13:bf:0b:a5:1d:5e:22:ff:9b:a6:30:d6:bc:
         00:be:e9:63:c2:e9:cd:ad:e7:3f:db:0f:60:4c:e8:e2:f7:e6:
         34:2c:2a:68:3b:e0:6d:e4:7a:d1:4e:3c:77:9e:9a:f6:98:56:
         1b:ca:60:e8:00:1f:d9:21:e4:ff:ab:ff:86:24:fb:f3:28:db:
         a0:1e:ed:b7:78:8b:33:90:f0:fc:06:2c:b5:4b:30:22:f2:38:
         66:d3:7d:de:4f:6d:27:37:a2:61:64:b0:de:27:d3:d7:ba:3d:
         98:72:f1:0b:55:ae:c6:0c:c2:fd:d6:5d:8b:06:2c:34:8f:24:
         80:19:a9:26:8e:07:0e:58:98:4b:6a:75:69:28:15:b4:a3:c1:
         50:9d:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:27 2026 by rpki-client