This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa
File:                     3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa (raw, json)
Hash identifier:          sp+A+aAU5o8T+ReDUwYvH/EBLaPhPoD9MVeV4qBMbGQ=
Subject key identifier:   24:E9:F8:9B:C9:B4:E0:F0:A3:D6:14:AF:A2:24:F5:9D:B3:9E:FF:77
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       36979EDC6F7B5D1DEA9C258CC37685DD466E32DD
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:45 +0000
ROA not before:           Tue 06 Jan 2026 19:35:45 +0000
ROA not after:            Tue 05 Jan 2027 19:40:45 +0000
asID:                     32098
IP address blocks:        201.174.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:97:9e:dc:6f:7b:5d:1d:ea:9c:25:8c:c3:76:85:dd:46:6e:32:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:45 2026 GMT
            Not After : Jan  5 19:40:45 2027 GMT
        Subject: CN=24E9F89BC9B4E0F0A3D614AFA224F59DB39EFF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:77:4d:26:eb:95:f2:7f:20:7e:25:f3:07:
                    bf:34:74:eb:ed:3c:0b:25:0a:d3:a8:22:54:d1:73:
                    47:da:b1:2b:4a:05:0a:cf:cb:0a:b3:ff:b1:1b:90:
                    be:65:87:03:1c:9e:0d:c9:1e:5f:4e:ff:ce:d7:c8:
                    6f:55:4c:a7:97:9f:86:5f:37:b3:e1:be:11:62:5a:
                    58:3e:a6:63:48:63:74:30:44:0e:c0:7a:28:5c:0e:
                    10:5b:12:30:fc:56:9f:60:11:3b:69:43:be:e4:c1:
                    99:c5:9d:24:4f:26:08:24:b3:a4:9e:af:71:31:42:
                    f1:ff:fa:46:aa:65:78:e6:b9:b1:c6:dc:de:6e:c8:
                    da:3b:35:99:38:13:12:fc:df:46:10:0f:2f:96:ba:
                    bc:58:68:0c:0e:b7:5b:19:12:95:9c:4a:25:1a:72:
                    4c:dc:19:89:1a:3d:0b:98:e8:7c:f1:e2:e1:f3:5b:
                    c5:8b:53:27:92:71:74:b2:6b:69:14:26:d1:29:3d:
                    ab:56:1b:23:80:c7:00:76:fe:3b:49:df:d6:67:db:
                    31:f6:a9:7e:2a:87:d9:16:ba:f2:5b:5e:d0:61:77:
                    e6:9f:52:8c:7c:64:b6:f4:6a:bb:73:4c:f5:21:43:
                    78:b6:8e:38:2f:84:0a:bd:01:eb:61:43:50:44:12:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:F8:9B:C9:B4:E0:F0:A3:D6:14:AF:A2:24:F5:9D:B3:9E:FF:77
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3132382e302f31382d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:d5:99:1d:67:f8:2f:65:9b:67:cc:53:dd:f8:68:dc:10:
         bf:59:f2:83:17:50:3b:93:4b:fe:b1:a5:03:24:72:5e:54:4e:
         94:94:87:c5:e8:44:a8:46:d6:12:b4:a0:38:1b:eb:2d:de:f7:
         d1:7f:dd:72:f7:85:22:b9:cb:0c:8d:d2:81:2d:51:57:18:88:
         b9:55:46:fc:67:4e:99:88:ca:f2:a0:9e:70:dc:fd:12:11:d3:
         f7:4e:05:43:5a:fe:93:48:0a:dd:bc:bd:6d:93:e0:16:a9:21:
         67:5d:a1:cc:e1:83:03:e7:da:ea:94:31:a7:cd:d8:1a:a8:12:
         c0:44:8d:74:1d:6c:3a:0f:41:a1:4a:7f:aa:62:5e:65:66:0b:
         9e:00:9f:c7:15:74:b5:2a:dd:62:18:1a:aa:9d:d8:98:57:48:
         e4:63:b4:86:87:27:c7:f5:07:bb:72:cb:8f:15:7c:97:aa:11:
         3e:9c:8e:7d:05:1c:40:7f:b5:c9:dd:0e:26:93:55:7d:41:b0:
         5a:7b:14:7b:2f:b7:ee:ae:cd:1d:36:cd:b1:69:a1:6f:99:99:
         6b:e7:74:06:23:07:23:ee:f7:53:e0:90:32:63:72:48:ba:61:
         72:90:9b:1c:d1:95:b7:b6:89:47:41:3d:91:b8:c1:1e:c7:8c:
         cd:30:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:49 2026 by rpki-client