This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa
File:                     3230312e3232312e38342e302f32332d3234203d3e203237373839.roa (raw, json)
Hash identifier:          +5ymxQBto4mLhR8uK1UJKaHEqXN2TpBECiPW+depUl0=
Subject key identifier:   41:E5:93:F0:08:A5:BE:4D:E4:9F:42:8C:57:44:37:B1:50:10:63:42
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7610885402DBA50DA62A4DC612D874E6C5AE20F9
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa
Signing time:             Tue 06 Jan 2026 20:58:46 +0000
ROA not before:           Tue 06 Jan 2026 20:53:46 +0000
ROA not after:            Tue 05 Jan 2027 20:58:46 +0000
asID:                     27789
IP address blocks:        201.221.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:10:88:54:02:db:a5:0d:a6:2a:4d:c6:12:d8:74:e6:c5:ae:20:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan  6 20:53:46 2026 GMT
            Not After : Jan  5 20:58:46 2027 GMT
        Subject: CN=41E593F008A5BE4DE49F428C574437B150106342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:67:b7:d1:36:7e:f7:9c:c0:18:a5:a9:db:
                    46:c7:e3:a0:29:35:5e:cd:d2:38:40:3b:94:20:58:
                    3c:29:aa:17:3d:82:76:23:0e:8f:5d:a6:55:d2:e6:
                    15:e0:b0:cb:13:03:a0:48:25:ec:70:2c:0d:91:65:
                    6e:bf:36:be:22:6f:fd:cc:d6:f0:22:ff:73:c3:5b:
                    a2:72:8e:f6:63:25:9e:49:1b:29:e6:92:3e:7a:22:
                    c5:b3:72:5b:f9:03:41:a3:b6:5f:e9:16:05:b7:2d:
                    73:89:10:58:79:c1:65:05:6d:a3:46:62:28:bb:3c:
                    60:76:63:0b:60:bf:d5:c6:f4:4a:5a:7b:e7:3f:40:
                    d6:88:82:76:4c:d7:9f:23:06:65:20:d4:f2:8d:b9:
                    83:21:ea:85:ca:f8:24:d3:1a:e0:aa:6f:30:28:6e:
                    f2:d5:94:16:bf:28:12:cf:6a:6b:23:68:89:36:e5:
                    04:fa:f1:74:c5:38:b8:8a:e4:42:83:e3:cc:9d:15:
                    e5:c1:40:c7:66:2f:a1:b0:bb:0c:74:fe:13:5d:48:
                    4d:3a:2a:59:4e:68:d7:79:18:55:dc:4e:60:1a:1f:
                    da:e5:a4:41:d0:b4:63:54:92:29:dd:09:87:16:b9:
                    83:87:3d:ab:2a:2a:f1:29:5d:ea:42:4c:af:9d:9d:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E5:93:F0:08:A5:BE:4D:E4:9F:42:8C:57:44:37:B1:50:10:63:42
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e38342e302f32332d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:42:75:9c:64:60:91:02:6f:a4:71:bf:1d:7e:3b:3b:01:
         ab:e7:70:9f:6d:c8:0a:da:20:d5:d2:54:f0:51:9e:9f:ba:56:
         00:47:18:0d:da:e1:5a:58:a3:bd:4e:5d:ed:7f:9f:7f:f2:bc:
         52:b6:47:e9:4d:33:bf:83:c8:98:d3:e4:f8:2c:e0:99:0f:d8:
         04:78:04:cb:fd:38:ec:12:5f:7d:46:f3:27:65:0b:b2:2b:73:
         1b:a7:43:c8:e9:60:7c:e2:b5:37:58:ed:3a:8a:d7:9a:89:88:
         6a:d4:f1:04:25:27:f2:0a:06:fa:35:2e:27:08:bf:5b:72:be:
         f8:66:46:90:c0:cb:5c:11:9a:ea:f5:25:da:3c:d8:23:c7:95:
         68:44:76:5c:06:bf:3e:0c:6c:64:ff:a3:61:6c:e5:1e:bf:4e:
         3b:0e:6d:53:28:ff:71:03:a8:62:f0:f3:1f:de:ea:76:1b:72:
         8b:7e:ab:77:d9:9f:ae:42:59:42:32:9e:3d:3f:e1:25:79:e1:
         62:13:28:b7:88:cf:0c:97:3c:d8:8a:f3:7b:bd:98:28:8b:0e:
         a8:cc:c4:cb:e1:c6:a5:90:e5:46:1b:f9:2b:03:be:df:cb:b1:
         a1:1e:d2:85:a3:49:41:d8:3d:c6:75:dd:d3:5c:3d:bb:47:d3:
         2e:fb:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:03 2026 by rpki-client