This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
File:                     3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          dyWbHuzrRZnk4XOOPj654cV2cDkAZGmUFu5js2C8NUo=
Subject key identifier:   9A:16:A6:44:B7:9F:2B:F3:32:76:1D:86:65:32:CF:BD:56:DE:1E:C0
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       343A1C800C66C9F9904731ABFF5AD00FD156FBA6
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:52 +0000
ROA not before:           Tue 06 Jan 2026 19:07:52 +0000
ROA not after:            Tue 05 Jan 2027 19:12:52 +0000
asID:                     52328
IP address blocks:        201.159.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:1c:80:0c:66:c9:f9:90:47:31:ab:ff:5a:d0:0f:d1:56:fb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:52 2026 GMT
            Not After : Jan  5 19:12:52 2027 GMT
        Subject: CN=9A16A644B79F2BF332761D866532CFBD56DE1EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:f3:c6:db:92:12:55:02:61:6f:09:f1:18:
                    82:70:61:63:57:41:22:3c:d6:2f:1e:57:43:04:81:
                    80:3b:7a:a9:50:cb:ac:fd:9e:1e:eb:81:1e:54:4b:
                    36:37:cb:5b:05:c0:84:d3:c7:d5:36:40:75:f7:82:
                    41:e3:ec:48:fc:ad:b9:d4:58:25:9e:93:fb:cf:9b:
                    77:6a:a5:ea:14:c9:54:08:59:74:8d:53:52:bc:d5:
                    05:ad:ba:3d:bd:9c:11:9d:61:45:bc:5d:c1:09:75:
                    38:ac:2f:9f:9f:af:6c:be:97:aa:a7:05:47:95:43:
                    34:0e:d7:d9:90:ba:07:2f:9c:fb:1a:0a:22:c8:ee:
                    1b:51:4e:ec:48:62:43:e3:02:e6:9e:14:da:3e:a4:
                    7f:f8:22:68:06:c4:58:d3:9d:a4:4b:eb:89:d9:a9:
                    af:f2:1a:b0:fe:02:9a:e7:9c:3d:96:be:dc:67:bb:
                    e2:75:dd:62:1f:64:af:cb:ed:0f:67:cb:f5:50:d4:
                    32:84:8a:2c:4b:70:35:f5:05:60:53:09:5c:04:2c:
                    f5:ea:02:a6:67:24:e3:49:8e:7e:2b:b5:f2:f6:9f:
                    50:bf:b0:8a:3d:0a:00:a4:23:f5:41:72:92:0b:39:
                    67:81:91:16:e1:8a:08:67:44:d1:2d:84:74:1d:9b:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:16:A6:44:B7:9F:2B:F3:32:76:1D:86:65:32:CF:BD:56:DE:1E:C0
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:92:c3:25:33:66:b9:8f:e8:e3:a3:c0:3c:67:38:b8:95:
         48:aa:37:e7:01:3c:81:ed:b6:1d:28:4a:f1:94:ca:11:17:c9:
         7e:00:06:56:74:e6:a3:8b:05:07:ca:12:72:51:bd:b9:9d:b3:
         ac:c6:da:8e:49:49:68:25:00:51:2e:1f:36:bb:a0:7e:4d:8e:
         1d:28:6e:0e:a7:b1:06:ee:bf:a0:0a:c8:e4:53:80:b1:d9:54:
         14:f4:a3:16:fb:5c:e9:4d:ef:12:7c:88:99:bb:9b:24:9c:97:
         98:08:2c:23:2b:c8:a8:49:46:69:53:5a:1b:df:88:30:73:58:
         39:2a:6b:c8:97:77:b9:cb:4c:a8:c3:b8:b8:db:26:ac:76:06:
         9d:55:01:46:55:7e:7d:e9:d6:7b:f9:43:27:c3:c7:c6:dd:bc:
         a1:f0:78:6b:b4:d8:6b:24:48:bb:57:8c:4a:57:8c:1f:bc:45:
         38:6f:11:8c:78:9e:90:11:ad:0f:67:1a:a3:5a:ad:02:19:f5:
         1b:25:a6:e1:42:51:4d:6b:68:60:f1:a2:2f:69:cf:75:34:91:
         e7:75:97:2e:dc:d2:a6:6f:0c:ef:a6:de:b6:6f:d8:ce:5e:28:
         0e:be:e9:92:ad:e3:1f:6b:7b:56:ff:12:35:53:0e:3b:a9:c9:
         56:1c:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:04:10 2026 by rpki-client