This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          MsMyGfYWAZq0ZUuNugDEPXzNESD8WIkqrhmIt/Z1GYY=
Subject key identifier:   D3:83:11:70:6E:11:F1:A0:AF:E2:CD:62:99:19:9E:C3:0A:2C:33:DC
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       1867F485B70A36A039A8EA0B42AB44938022D47C
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:51 +0000
ROA not before:           Tue 06 Jan 2026 19:07:51 +0000
ROA not after:            Tue 05 Jan 2027 19:12:51 +0000
asID:                     52328
IP address blocks:        201.159.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:67:f4:85:b7:0a:36:a0:39:a8:ea:0b:42:ab:44:93:80:22:d4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:51 2026 GMT
            Not After : Jan  5 19:12:51 2027 GMT
        Subject: CN=D38311706E11F1A0AFE2CD6299199EC30A2C33DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:43:a3:55:fb:31:1b:3d:84:b5:63:fd:c5:
                    f9:ba:9b:30:10:96:93:7d:a7:07:04:39:12:e7:84:
                    a2:a4:16:2d:c6:a1:02:1e:c9:fe:47:5d:6d:37:ef:
                    cd:9d:f4:3a:fc:9f:40:48:6a:30:f7:f7:32:50:3a:
                    1a:ba:02:29:ea:51:51:20:e2:69:e0:0a:13:64:cc:
                    05:a4:50:39:9e:8f:c0:34:36:77:23:2f:9b:d7:41:
                    fe:ec:0a:aa:35:01:41:64:01:4f:e4:2a:fc:c3:0f:
                    f1:31:12:8b:f0:79:15:5a:d3:ee:a5:68:79:eb:ec:
                    0f:20:2a:e2:61:81:7b:8c:05:71:38:97:1e:36:c8:
                    98:34:96:24:0f:3a:c5:32:4e:9b:13:56:9d:2e:f7:
                    ab:cf:70:6d:14:14:6b:d1:b5:75:dc:d8:fe:8b:58:
                    10:49:82:95:5b:8f:c0:cd:05:4f:ad:73:c0:f4:97:
                    bc:8c:51:d5:a0:c9:54:0c:08:bb:35:ac:02:c0:1f:
                    83:d7:01:77:4a:4f:b4:29:12:94:63:f7:6d:db:7e:
                    43:17:b3:be:fc:af:76:d4:55:fa:4b:36:e2:4c:e2:
                    f4:f6:2a:0f:99:32:da:a9:41:1f:69:c3:e8:5a:b8:
                    6e:82:69:df:55:35:0a:06:92:b4:f6:3d:5a:b8:d0:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:11:70:6E:11:F1:A0:AF:E2:CD:62:99:19:9E:C3:0A:2C:33:DC
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:46:bc:42:5e:af:04:f0:a8:7a:7a:ca:65:86:fb:ec:30:
         84:6b:cf:df:72:b8:1f:96:b2:9b:1b:92:94:98:33:af:64:9c:
         c8:d9:a7:92:1e:dc:c4:22:0e:57:e7:52:28:08:3c:0d:a8:86:
         c0:ad:48:b9:43:76:e1:86:c6:18:8d:f6:a9:f8:3b:aa:78:b1:
         dd:97:51:f2:fb:76:3e:18:96:48:68:94:cb:a1:14:93:8d:a3:
         b4:68:ad:23:79:af:46:c5:23:01:d7:fd:ee:16:86:dc:9a:b8:
         63:1d:4b:7d:ca:13:57:df:d2:2a:93:42:73:9d:e3:84:f4:2b:
         b3:f2:4b:12:73:8e:31:60:c0:3f:cb:42:a9:96:6b:0d:14:e8:
         6d:ac:09:7d:39:ae:b0:9f:bc:e8:7b:81:17:98:c0:df:13:79:
         65:36:51:4c:45:19:a9:90:d6:1f:55:7f:19:93:ab:47:4e:1d:
         37:7b:f9:41:1b:1a:3c:95:3c:a1:12:9b:97:66:37:05:10:30:
         92:50:6a:01:4e:48:f1:db:9a:2d:19:2b:07:c1:f7:10:81:32:
         06:6b:4d:60:aa:b6:f7:34:01:ff:11:82:30:73:4e:32:c9:a0:
         9c:d9:bb:1d:95:2b:cd:83:c8:77:30:ad:8d:ed:7c:de:ac:b0:
         d9:72:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:36 2026 by rpki-client