This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa
File:                     3230312e3233392e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          Qj+e+r6dK6QEN4eid6ocYzJK+ymLiwUHr4YpHIweCIQ=
Subject key identifier:   E4:88:0D:7E:8E:B3:23:F2:7B:30:33:86:21:21:DB:94:5D:B7:AC:07
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       28749FF3569D0B7D9C5E9B81ED5164C2A07041AF
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:12 +0000
ROA not before:           Tue 06 Jan 2026 19:10:12 +0000
ROA not after:            Tue 05 Jan 2027 19:15:12 +0000
asID:                     22047
IP address blocks:        201.239.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:74:9f:f3:56:9d:0b:7d:9c:5e:9b:81:ed:51:64:c2:a0:70:41:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:12 2026 GMT
            Not After : Jan  5 19:15:12 2027 GMT
        Subject: CN=E4880D7E8EB323F27B3033862121DB945DB7AC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:39:18:e9:21:f4:94:00:1d:ca:f7:85:a9:16:
                    58:f6:9c:55:3c:ba:b6:ab:5c:c4:d5:aa:97:83:9c:
                    0f:dd:22:10:13:43:0c:f3:b1:8b:68:25:f6:58:d9:
                    a7:70:bc:6f:dd:d9:d8:45:8e:bc:87:dc:5e:73:19:
                    32:ad:bd:9d:e1:c5:50:f4:91:10:e5:65:70:31:37:
                    ef:a9:d6:00:4f:85:34:58:3f:58:36:be:4a:aa:4d:
                    6f:07:d0:1f:e8:c6:25:2e:ce:4f:68:89:2f:9a:54:
                    9d:46:89:d3:90:ed:cb:c5:e5:4d:d3:67:0c:07:c1:
                    37:f0:c1:15:30:b0:f4:57:41:67:60:86:f9:9f:f5:
                    37:b1:01:6e:3b:6d:0e:22:b1:fd:fc:17:70:10:a6:
                    0f:5d:40:a7:ac:0c:20:b8:0a:10:35:34:1f:22:51:
                    d2:12:45:29:c4:3f:b8:4a:56:f4:c8:b9:7f:8a:4a:
                    db:7a:f5:24:b9:45:90:29:e2:f8:49:17:91:b5:4a:
                    61:94:1e:09:b2:3e:ce:3a:19:be:e7:4a:44:5b:02:
                    ce:78:fb:91:a0:02:21:21:89:95:bd:16:db:98:aa:
                    9b:da:b9:0b:10:2f:7c:b9:3f:4d:48:d8:e4:7e:3c:
                    7b:99:a4:3a:f5:3c:22:f1:7f:4b:7c:1c:4c:e8:c9:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:0D:7E:8E:B3:23:F2:7B:30:33:86:21:21:DB:94:5D:B7:AC:07
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230312e3233392e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.239.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:c0:7f:b3:5f:75:15:50:b3:f0:a8:16:2b:4c:ac:23:93:
         88:21:0f:42:e9:63:30:fe:5f:ed:67:c0:57:cd:d3:8f:b4:2f:
         b9:e1:66:03:7b:3a:bd:0d:db:c3:92:83:df:2e:a8:16:0c:fe:
         04:58:d5:4e:11:47:31:f5:87:62:92:9d:a5:a1:4a:6d:11:3d:
         36:d9:6a:ae:be:ea:66:8e:75:52:5d:52:51:e3:fa:1e:ff:87:
         91:1e:67:a5:f2:04:50:39:6e:42:a0:29:43:44:27:34:b9:18:
         ef:76:eb:34:3a:8f:f5:7d:1a:cf:c4:fc:f2:f5:99:e5:12:4f:
         12:ea:86:d8:69:63:f9:5d:cd:cf:dd:5d:bb:d1:7b:3b:a5:51:
         e4:90:9c:76:b9:5c:a7:7d:d9:23:1c:bb:3f:c7:d9:0d:f3:c1:
         81:ac:c1:91:13:5a:2b:eb:64:c1:ef:8a:4c:59:73:d8:57:c1:
         02:6a:42:b7:fb:a3:9c:7c:20:56:81:83:29:36:ff:44:7e:7f:
         85:5a:83:bb:7e:58:f8:e4:c5:4d:67:96:3e:96:ed:a7:45:01:
         dc:1c:22:aa:4d:d9:e8:4b:df:54:42:df:5e:9f:ba:d5:4e:04:
         6a:b6:19:a2:07:10:f5:04:35:a6:f7:11:8c:71:3c:b7:fe:14:
         d1:b2:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:56 2026 by rpki-client