This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa
File:                     3230312e3231392e39362e302f32302d3234203d3e203134323332.roa (raw, json)
Hash identifier:          jr5opZjGgvSxpQ5g+PtXL7JMVOTA5IqCFASDIspjPFI=
Subject key identifier:   CD:0C:D5:61:7C:4E:34:01:86:37:97:1D:AD:A0:82:F4:FF:4D:FD:4B
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       1F169E7CC98AB93B41024BFF27DA91D4D688D9BB
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa
Signing time:             Tue 06 Jan 2026 19:24:32 +0000
ROA not before:           Tue 06 Jan 2026 19:19:32 +0000
ROA not after:            Tue 05 Jan 2027 19:24:32 +0000
asID:                     14232
IP address blocks:        201.219.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:16:9e:7c:c9:8a:b9:3b:41:02:4b:ff:27:da:91:d4:d6:88:d9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Jan  6 19:19:32 2026 GMT
            Not After : Jan  5 19:24:32 2027 GMT
        Subject: CN=CD0CD5617C4E34018637971DADA082F4FF4DFD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:ae:eb:e0:43:0d:e9:14:91:fe:3c:3c:b6:
                    37:8c:a0:ad:e5:01:58:cc:eb:0c:1d:e1:ba:1a:9e:
                    41:82:81:8b:21:16:a8:09:4f:96:71:f0:19:0e:78:
                    01:54:18:b2:c6:95:1d:ba:a6:bd:fd:83:49:86:7c:
                    2f:e9:0f:75:df:58:74:7a:07:32:2d:f7:a9:6e:5c:
                    f7:7f:a3:ae:18:e4:c8:a7:99:50:1c:4f:f1:b3:26:
                    26:e8:5a:54:d4:7a:43:bc:20:78:22:72:3e:0d:66:
                    8d:cf:ac:87:1a:af:2d:83:19:d5:62:52:84:9a:2f:
                    81:c2:6d:18:e0:00:b0:6e:0b:f8:ff:39:b6:24:2e:
                    b3:fd:c7:2e:ec:71:35:c8:8e:02:9c:b4:85:0a:55:
                    69:36:83:c8:cd:9a:d9:0b:63:be:c5:a8:6e:81:23:
                    50:97:e1:bb:27:0b:ce:30:5b:b2:9e:22:28:c9:cc:
                    ad:e9:4e:3e:6c:26:bf:94:0d:d9:4e:a5:06:75:9c:
                    0a:b8:2c:fb:a2:88:75:a1:78:25:72:cf:ea:f8:96:
                    3b:38:b7:ad:c7:5e:84:91:2b:b1:5d:bd:e6:83:d2:
                    49:e9:84:ba:ab:52:13:f0:f9:31:d8:7c:38:29:9a:
                    2a:00:03:05:0e:c3:24:63:12:87:28:ca:c1:01:21:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:D5:61:7C:4E:34:01:86:37:97:1D:AD:A0:82:F4:FF:4D:FD:4B
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3230312e3231392e39362e302f32302d3234203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:4f:20:1d:e0:1a:9c:ed:e4:a6:87:5e:ef:01:c6:0c:10:e0:
         6e:b9:52:02:9d:d5:f9:b1:46:eb:0a:3e:33:cc:7a:20:16:b1:
         8d:43:bf:b5:78:01:5d:3b:91:44:bf:24:10:16:f1:47:d6:28:
         75:05:88:54:29:ff:b7:e2:03:f4:a2:83:b8:96:22:71:eb:4d:
         d0:94:57:93:bf:88:9e:47:18:4d:73:a1:00:31:1a:9c:78:ce:
         d5:9e:3b:8c:a5:d5:f5:05:01:4d:8f:dc:41:4a:70:ba:22:ac:
         b9:d9:7c:77:7b:4e:fc:52:e7:fc:b2:2b:7c:65:09:2b:94:1c:
         3f:b7:7f:29:f7:74:27:86:73:78:8b:be:9e:c3:19:35:5e:4a:
         1a:85:a8:d0:88:3b:49:3c:59:ff:6c:38:12:ab:5a:95:0b:4d:
         9d:f6:ed:5d:df:2c:9d:f0:30:e8:f3:cb:14:8d:0d:26:0e:3b:
         7b:41:5e:0b:82:21:ef:82:2b:ba:29:d5:cf:29:86:d3:61:d8:
         90:12:aa:ea:e5:8d:8f:ff:b8:c5:d8:4a:11:00:5d:9c:27:64:
         de:3b:54:4f:0e:91:7e:13:1f:f2:37:27:5c:6c:f9:41:c0:7d:
         1f:4b:2e:57:38:88:3b:d3:36:70:5c:fc:0d:13:6c:dc:7f:9b:
         36:c1:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:00 2026 by rpki-client