This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
File:                     3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          zxZ1xmkEgZD4jbOnrtWWjhIsAFE4qd96roS92nJe8UY=
Subject key identifier:   D3:2D:36:C7:13:DA:63:D4:04:A0:19:76:0B:BC:F0:A1:F9:D1:55:7C
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       6320A93B12ECD222DE3E57BE6E77E5821C5F4135
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:51 +0000
ROA not before:           Tue 06 Jan 2026 19:07:51 +0000
ROA not after:            Tue 05 Jan 2027 19:12:51 +0000
asID:                     52328
IP address blocks:        201.159.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:20:a9:3b:12:ec:d2:22:de:3e:57:be:6e:77:e5:82:1c:5f:41:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:51 2026 GMT
            Not After : Jan  5 19:12:51 2027 GMT
        Subject: CN=D32D36C713DA63D404A019760BBCF0A1F9D1557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:e9:a7:2c:d5:ce:a1:a0:da:42:e5:48:51:
                    8e:60:06:43:67:7a:dd:8b:34:d0:90:6b:da:9f:66:
                    84:41:b2:df:e8:34:6f:62:f6:f0:b1:f3:52:ea:51:
                    35:8e:e4:bf:6a:c1:19:15:59:e1:c4:5f:47:40:d9:
                    fe:57:82:39:d5:5c:25:1e:1f:70:42:5f:ae:6b:a5:
                    3a:8a:0d:45:ea:fe:33:a5:97:83:d2:8d:18:11:4a:
                    79:c4:56:7f:a8:3a:bc:05:b7:b6:86:f5:0a:d8:7a:
                    d5:b2:c7:d1:53:6d:ad:4f:fe:57:8a:32:59:6c:3f:
                    52:10:1b:a9:85:8d:9f:6a:aa:82:74:8b:68:c7:5e:
                    40:c6:f8:f1:ac:c8:fa:0e:bc:7c:79:b2:f2:74:a2:
                    d0:ab:21:7c:75:81:13:36:f7:1d:8a:97:c8:56:cc:
                    23:76:33:a5:25:03:9c:9d:db:95:f8:9f:13:bc:d9:
                    2c:2b:08:35:77:2a:4e:73:61:98:3c:07:48:e8:95:
                    86:b7:19:89:91:13:c8:de:0b:0b:c4:c3:58:d4:a8:
                    2b:ed:92:06:50:1e:5c:0a:3a:b2:61:fc:87:60:f6:
                    be:13:13:1a:18:0b:0b:0c:0e:09:20:aa:84:5f:95:
                    6d:bb:bf:be:32:4e:98:23:1c:c4:bd:72:94:37:f2:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2D:36:C7:13:DA:63:D4:04:A0:19:76:0B:BC:F0:A1:F9:D1:55:7C
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:1b:4f:b0:4d:d0:a3:09:1a:26:4e:78:9c:29:cd:3d:a2:
         34:e3:5f:61:fa:73:25:87:f6:de:53:5b:31:c8:ed:d3:50:c5:
         bf:6b:45:c1:5b:84:24:64:2a:75:ec:d1:1d:60:4b:c4:3f:8e:
         c7:33:05:12:e8:b8:f1:78:71:32:11:f2:cd:67:46:70:ab:4b:
         71:f0:33:da:5e:98:39:25:b5:e2:5e:a4:0f:82:f7:76:eb:23:
         33:41:bb:b9:69:e8:a3:90:da:53:63:1a:92:30:5e:13:1b:31:
         ed:9e:a6:58:7c:fa:b8:1d:d7:ea:c6:b9:d4:34:52:44:63:47:
         b0:48:6f:22:8d:cc:73:7d:2e:6e:ae:38:af:bd:82:d4:e1:37:
         e3:63:84:65:9e:de:d6:5c:83:a4:39:3d:5f:6a:fb:f3:19:e2:
         54:88:c2:d9:be:07:bb:8f:86:1a:46:92:77:86:18:86:97:4f:
         a7:a6:c7:8a:89:f9:0e:ab:e8:31:fc:a7:35:3e:c2:ba:77:e2:
         a4:58:f8:0a:98:69:80:50:6f:4d:17:bb:2b:26:39:cc:bb:46:
         10:c4:d5:6c:5d:7a:f7:ed:b9:2e:5a:79:9b:bb:b7:bf:1c:b8:
         bc:4f:a0:55:43:83:aa:9c:f1:78:14:a8:b8:99:25:45:e0:ef:
         b0:6f:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:17 2026 by rpki-client