This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          f8NqIzRPaGM1+dkmMsTrZdZihG/4BJ4mhwBFqBuQ1bE=
Subject key identifier:   F1:FC:B4:F5:7B:FD:DF:B8:42:90:33:64:6A:F1:AE:06:D9:C0:E7:A2
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7979FC3FB04B237AA9A24827FB5184CD4E0D2FEF
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:50 +0000
ROA not before:           Tue 06 Jan 2026 19:35:50 +0000
ROA not after:            Tue 05 Jan 2027 19:40:50 +0000
asID:                     32098
IP address blocks:        201.174.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:fc:3f:b0:4b:23:7a:a9:a2:48:27:fb:51:84:cd:4e:0d:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:50 2026 GMT
            Not After : Jan  5 19:40:50 2027 GMT
        Subject: CN=F1FCB4F57BFDDFB8429033646AF1AE06D9C0E7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:cb:7f:77:89:2f:3e:d1:72:46:1e:25:b5:
                    e4:c8:9f:8b:5e:f6:a1:52:f4:f7:fe:c2:e4:56:77:
                    f5:55:aa:52:6e:ee:e9:bf:2b:cc:a1:69:14:aa:ec:
                    d6:d4:3b:65:d1:53:b4:cc:3f:ca:f7:d3:cd:85:2e:
                    b4:08:09:f6:ba:1c:ae:a8:8d:a4:89:af:f2:1d:bb:
                    0a:dc:41:a3:67:f9:58:fc:1d:2c:4b:fe:a4:8d:ef:
                    3d:7d:ed:a8:4d:fc:4e:87:e5:0e:4b:29:5f:89:c4:
                    ba:12:b0:32:17:da:2a:07:bf:43:a9:e8:56:39:52:
                    d5:54:4b:c5:15:ae:d5:8e:e9:e3:6c:be:b8:15:c2:
                    5e:fc:cc:23:a5:dd:a6:1d:d4:5a:02:d6:9b:84:71:
                    ad:d9:d7:64:63:ab:73:ff:6f:b4:14:26:b9:79:90:
                    9a:29:37:8e:c0:95:c1:a2:a8:5b:3a:d8:15:5b:c3:
                    9a:f8:fa:0e:64:43:22:f8:c5:ce:a9:71:a3:b8:ff:
                    54:bc:95:0f:27:28:db:4c:ab:c3:85:5c:1c:8e:ae:
                    ef:0b:f9:01:80:b0:41:77:68:ab:5b:1d:51:74:60:
                    79:25:b8:21:8d:54:c8:18:f7:38:eb:00:d8:36:d7:
                    d2:04:d3:8d:6f:ab:3e:96:65:59:c0:45:a2:69:15:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:B4:F5:7B:FD:DF:B8:42:90:33:64:6A:F1:AE:06:D9:C0:E7:A2
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130322e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:23:29:aa:3c:ce:ff:ff:ad:17:80:46:e0:48:f6:28:d6:39:
         af:5c:ea:3a:90:e8:41:41:99:10:a0:ff:95:36:66:9e:c8:cd:
         86:12:05:7b:83:6c:47:24:ef:7b:96:9c:f2:0a:ed:0a:3b:e3:
         99:4b:3b:ac:74:6c:87:e2:07:1c:d7:e6:01:58:d5:56:2d:3b:
         32:fa:a1:25:13:76:64:0f:24:bc:60:c4:da:06:e5:8a:c4:d1:
         ab:35:c9:e5:8e:6b:c8:be:a0:2c:78:4a:9a:89:9b:0f:04:fa:
         f7:c3:8d:59:d4:73:54:7f:00:ce:fe:77:b1:d9:33:97:fc:d5:
         13:a0:e6:68:46:6c:d8:b7:c5:ce:fd:3e:68:11:6f:af:64:21:
         f4:af:d8:b3:f2:d8:fb:2d:66:da:f6:05:0a:cd:04:41:13:55:
         e5:39:e7:fe:d4:43:a6:b5:89:d7:af:fb:a5:93:65:ce:f6:94:
         76:21:3d:28:80:68:f1:f7:12:81:1b:cf:55:b0:6f:91:df:12:
         93:db:1e:ab:4d:bd:52:99:7c:47:ba:70:50:31:a0:48:d3:a5:
         6c:9e:dd:c9:05:6c:34:91:a2:b6:e5:6d:05:27:35:1e:61:40:
         4c:f2:e8:19:5a:51:44:64:3d:9d:9e:93:3c:e5:6f:3e:d6:73:
         51:48:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:20:15 2026 by rpki-client