This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36332e302f32342d3234203d3e20323635353735.roa
File:                     3230312e3137342e36332e302f32342d3234203d3e20323635353735.roa (raw, json)
Hash identifier:          +DY23QAsJTS0rspku0KiSMbvx0kGWcvxBFraQt1yJ5M=
Subject key identifier:   C7:B1:93:02:24:27:34:17:C4:4A:69:52:44:C2:C2:8D:CC:71:8E:9B
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       3EFA43DCB44754833B506EEB5A08E8B072AA898F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36332e302f32342d3234203d3e20323635353735.roa
Signing time:             Tue 06 Jan 2026 19:40:47 +0000
ROA not before:           Tue 06 Jan 2026 19:35:47 +0000
ROA not after:            Tue 05 Jan 2027 19:40:47 +0000
asID:                     265575
IP address blocks:        201.174.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fa:43:dc:b4:47:54:83:3b:50:6e:eb:5a:08:e8:b0:72:aa:89:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:47 2026 GMT
            Not After : Jan  5 19:40:47 2027 GMT
        Subject: CN=C7B1930224273417C44A695244C2C28DCC718E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:af:2f:e7:49:75:7d:e8:90:c6:85:e8:e4:
                    f3:1f:75:89:9c:6f:a4:f0:2f:cb:50:80:86:ce:7e:
                    5a:a0:13:52:b0:b2:4c:5a:f4:3d:72:38:0b:f3:44:
                    29:80:1c:e0:51:ab:9d:3e:8f:8d:44:4e:f9:3f:db:
                    71:f2:26:25:1f:04:69:c5:75:97:a5:3b:a1:ed:af:
                    f7:0c:ff:70:e6:d0:1c:bc:2b:d1:30:1f:14:c8:2a:
                    1b:ff:c9:66:ad:0a:69:14:0d:93:d0:8d:37:09:05:
                    66:8c:62:04:40:bf:b5:5b:bd:70:71:ca:18:76:08:
                    10:a1:e3:b4:f6:61:fd:d2:97:93:ee:e0:35:e5:9b:
                    a7:6e:4a:65:c0:70:6f:fb:c7:1a:f0:02:4b:f6:27:
                    32:82:16:87:e1:ae:cb:cc:7a:a3:1c:ec:1e:3d:9b:
                    a4:79:c1:01:30:06:84:f2:7a:99:41:d9:86:e2:b4:
                    dd:70:46:1f:40:91:03:3c:a1:1e:88:13:ec:f7:39:
                    b4:10:f9:b3:fe:c8:e9:d3:30:7a:02:b2:40:9c:df:
                    60:14:34:d5:b0:cd:da:24:ea:96:66:70:a5:e0:09:
                    fe:6b:a8:87:d0:06:a7:2e:7a:2b:02:9e:e7:5b:7e:
                    81:79:92:09:2c:3e:cc:89:4f:98:d2:51:4e:0a:e4:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:93:02:24:27:34:17:C4:4A:69:52:44:C2:C2:8D:CC:71:8E:9B
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e36332e302f32342d3234203d3e20323635353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:fb:35:5d:27:11:66:77:6a:9b:a7:62:db:19:df:64:65:
         30:b6:3d:70:ac:e5:19:ec:54:09:43:c0:8a:d1:e5:6f:0b:55:
         2c:26:0b:ed:a1:69:99:af:87:6f:13:c8:0a:b5:d0:01:84:47:
         a0:92:06:f3:ba:6d:d1:b1:cd:50:f2:0a:96:1a:66:d0:c1:b7:
         91:05:af:f5:65:a0:99:83:82:40:0e:47:2b:db:da:61:04:2e:
         ea:82:c0:d2:3f:fe:28:bc:22:4c:f8:12:3a:01:05:e1:8d:f5:
         7b:26:28:ee:91:09:b4:07:9b:5c:20:11:d1:d1:1b:c3:4c:28:
         8e:2a:97:d4:07:2f:5a:78:62:96:98:6f:4e:a2:6d:fc:c5:2d:
         ca:f9:39:5b:fe:08:dd:86:a5:a8:7b:92:a8:13:54:ee:13:ff:
         3c:68:c3:9d:c6:82:bd:f4:6c:a2:74:24:24:5a:5b:b0:59:f7:
         0d:be:89:25:9a:a4:bf:4c:9e:2b:07:d9:30:bc:44:03:73:60:
         f8:33:3a:4c:b0:c9:1e:62:aa:bc:6e:62:9a:78:8e:db:cf:d5:
         5e:14:52:56:ed:dd:f4:69:8d:e1:40:36:42:52:8f:13:e7:ce:
         ff:97:0b:56:70:59:dd:57:0d:8b:a0:7f:77:91:aa:7f:c6:f3:
         06:3a:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:18 2026 by rpki-client