This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e302e302f31372d3234203d3e203332303938.roa
File:                     3230312e3137342e302e302f31372d3234203d3e203332303938.roa (raw, json)
Hash identifier:          ZSdTpjCwXtH5vxShCeSYPhM8jw3vovfdwdcH6tahdmk=
Subject key identifier:   65:6A:34:78:1B:DE:65:09:96:C7:6F:24:F5:1F:1F:42:E2:2F:25:E6
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       23EC6002A87D7F7F99F60EBA81F0F42E15BB7C25
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e302e302f31372d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:44 +0000
ROA not before:           Tue 06 Jan 2026 19:35:44 +0000
ROA not after:            Tue 05 Jan 2027 19:40:44 +0000
asID:                     32098
IP address blocks:        201.174.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:60:02:a8:7d:7f:7f:99:f6:0e:ba:81:f0:f4:2e:15:bb:7c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:44 2026 GMT
            Not After : Jan  5 19:40:44 2027 GMT
        Subject: CN=656A34781BDE650996C76F24F51F1F42E22F25E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:9b:c1:71:ef:d4:e3:b1:d5:03:ce:34:d0:
                    09:7e:1f:02:64:ff:6e:76:f0:1c:72:1e:a4:fb:33:
                    1c:6b:30:c7:e3:ff:a5:9d:f6:fd:94:cf:bd:c0:15:
                    fa:12:51:de:45:93:f4:c8:57:60:3e:1e:5c:2b:cc:
                    35:0d:cb:03:3b:31:08:3d:a2:af:ea:a6:92:c7:ec:
                    62:b5:87:c7:49:f8:3e:77:6c:11:b6:1b:c1:61:fc:
                    06:2b:21:64:a7:11:c8:b3:74:a2:e3:37:0e:75:3d:
                    15:a8:94:90:09:a8:8f:d4:c2:a1:d3:77:0b:a9:99:
                    57:2f:6d:b1:23:dd:33:f7:e4:d2:49:55:ea:80:91:
                    9e:10:48:9c:61:54:60:98:61:df:e0:e9:8e:33:75:
                    8b:4b:06:63:84:41:3d:c3:a5:ed:75:3c:56:2f:34:
                    87:49:f4:5a:8b:0d:be:b3:80:66:a8:34:e8:19:7c:
                    59:ed:ff:02:0c:e9:45:16:95:5b:ec:6e:41:2f:68:
                    ff:0d:24:5d:2a:da:32:dc:1e:50:c2:1e:0e:0d:ad:
                    0e:53:19:88:71:f1:97:5a:73:c9:fa:9c:68:15:c4:
                    cf:ce:78:d7:d0:fe:7e:10:55:72:4a:d1:72:4f:9e:
                    c7:21:e3:f6:88:cd:9b:1d:5a:e4:d4:ef:e5:1e:c9:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:34:78:1B:DE:65:09:96:C7:6F:24:F5:1F:1F:42:E2:2F:25:E6
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e302e302f31372d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:ad:dd:4b:32:e9:d7:09:cc:ea:f7:d1:55:e9:d9:06:4a:
         2a:31:8f:d1:e6:b4:83:42:39:9c:57:1b:3e:ad:14:90:b5:5b:
         8a:a4:ad:87:ab:49:29:2c:c1:ad:40:17:7d:5c:36:89:78:7c:
         38:54:8f:df:72:3c:67:d2:ef:a4:b4:ee:a9:75:35:d0:1f:47:
         82:68:1a:71:80:f2:b2:38:21:5b:53:cb:5b:86:1b:be:ab:86:
         d9:a0:95:67:f0:4f:56:4a:70:e1:52:68:92:c4:da:e9:42:12:
         db:7e:09:70:3f:e9:f5:8d:0c:84:a1:54:60:c6:71:f8:54:fa:
         94:48:a5:95:e7:60:31:d2:57:e9:a2:53:21:24:74:b5:93:65:
         30:39:a9:85:9d:2d:cb:b8:a2:fe:fe:01:9f:c1:61:73:fd:90:
         b1:a4:bc:a0:be:76:52:5a:20:e5:62:d5:8e:76:a1:de:7a:72:
         d4:27:fc:04:ad:c6:03:7c:66:c1:ef:21:22:42:cc:53:88:b5:
         38:5a:9e:1c:07:47:c0:cf:f0:04:3a:a2:86:fb:68:72:96:91:
         fe:45:1d:88:e7:da:37:30:50:fb:93:cb:4b:12:9d:5d:bd:eb:
         d8:00:91:cd:55:64:8d:e8:a5:de:8c:09:81:02:88:9e:d6:9a:
         a4:bd:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:15 2026 by rpki-client