This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa
File:                     3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa (raw, json)
Hash identifier:          e4W3CYwq0H9Su+5FogKI0sugsWizWF/fcb5QNdAcrTY=
Subject key identifier:   87:56:14:34:FA:21:72:05:7C:C0:97:8B:BC:46:A3:23:DB:F4:5B:55
Certificate issuer:       /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial:       2D106DA74FD5083E4FC5A29F74FBE6AF2FAC18CE
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa
Signing time:             Mon 19 Jan 2026 20:26:09 +0000
ROA not before:           Mon 19 Jan 2026 20:21:09 +0000
ROA not after:            Mon 18 Jan 2027 20:26:09 +0000
asID:                     273965
IP address blocks:        201.158.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:6d:a7:4f:d5:08:3e:4f:c5:a2:9f:74:fb:e6:af:2f:ac:18:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
        Validity
            Not Before: Jan 19 20:21:09 2026 GMT
            Not After : Jan 18 20:26:09 2027 GMT
        Subject: CN=87561434FA2172057CC0978BBC46A323DBF45B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:a2:c9:29:22:61:e1:92:56:ca:94:6c:c0:
                    13:8f:53:82:82:1b:58:ea:2d:6b:4f:a6:eb:15:1f:
                    c3:cc:74:fc:0f:10:52:2b:b2:6a:af:93:9b:10:19:
                    03:50:87:04:c1:41:aa:40:e6:2f:3e:15:6d:5c:f2:
                    fd:51:3f:9e:69:01:25:de:16:41:42:61:94:f6:2e:
                    7b:00:8c:57:f2:d7:b6:7b:6d:e5:36:50:ca:c6:69:
                    d4:2d:a6:2c:1d:a5:f9:00:c3:e5:e6:07:eb:44:8b:
                    ee:33:b1:75:18:24:a2:1d:8b:1b:54:20:a2:66:27:
                    58:98:ce:2d:51:5f:0c:d9:2c:71:91:68:21:6a:e2:
                    db:0e:a8:5a:67:8d:8a:57:ea:64:61:2a:fd:bf:8d:
                    19:93:1f:9f:55:26:97:46:cb:53:60:35:bb:50:ea:
                    60:09:cf:c2:50:68:3b:c9:03:8b:81:5b:e1:10:fa:
                    14:cc:5f:85:54:03:78:67:57:eb:2d:ee:c6:59:ab:
                    69:f1:a5:19:b0:58:c8:49:9e:93:e5:ae:e7:af:f4:
                    81:f0:3c:42:a1:c5:e3:96:02:5e:75:a8:91:8c:fb:
                    34:1b:6f:39:ad:37:a1:71:51:1d:94:7b:f8:54:b1:
                    f2:c7:62:8a:f3:83:10:63:ee:27:4d:f4:82:d3:22:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:14:34:FA:21:72:05:7C:C0:97:8B:BC:46:A3:23:DB:F4:5B:55
            X509v3 Authority Key Identifier:
                keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39372e302f32342d3234203d3e20323733393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:19:08:6a:de:4a:ac:9b:78:57:60:6a:6b:e5:98:bb:b0:
         45:3f:3c:b8:92:3f:8a:c2:58:b9:5c:19:7a:d8:22:38:69:55:
         34:fe:3a:7b:e6:6f:d8:c8:e6:4c:c9:5a:6a:e7:87:5f:f7:2a:
         02:7f:b2:c5:a3:a4:2a:e9:8d:18:b0:99:63:9d:b6:64:69:3e:
         1e:9f:3c:3e:7f:ca:fa:bf:ef:c6:71:6c:21:3b:b9:ee:07:54:
         bd:5e:e0:69:2d:4e:af:3f:82:00:36:69:34:31:71:2c:02:31:
         02:88:52:0b:04:4a:41:2a:0c:25:d1:83:67:70:50:67:aa:3b:
         4d:ae:79:45:0b:23:a3:44:3d:a4:f6:1d:fb:8b:ee:52:aa:86:
         67:5f:b1:fd:45:83:0a:da:07:d2:f0:45:fd:8d:e7:68:32:05:
         bb:c1:84:8c:11:d9:ca:0e:69:73:e9:34:8e:03:25:5c:1d:4a:
         2d:3e:64:a6:9a:46:d5:32:01:ff:fe:d0:d9:f1:7b:e3:80:49:
         7f:e3:41:ab:8b:d8:a5:86:69:ae:30:4e:90:5f:2e:2c:a9:7a:
         40:ea:96:a7:fb:1a:ca:97:cd:12:16:0a:07:91:48:6d:f6:a0:
         8e:29:af:ec:09:a9:6c:66:10:b0:f9:d0:09:91:c2:2d:36:4a:
         b5:e8:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:10 2026 by rpki-client