This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa
File:                     3230312e3139302e302e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          nLlZOPPAVfpJJ98S8MuNv2MssElV+tzRqDQPHYmh+BY=
Subject key identifier:   29:56:1F:8C:44:E2:F5:11:40:32:2D:AD:08:C6:C7:09:6A:39:BE:AD
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       4073B9A9B0BA70EDF48192ECC4DE4D493420BCD7
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:51 +0000
ROA not before:           Tue 06 Jan 2026 19:42:51 +0000
ROA not after:            Tue 05 Jan 2027 19:47:51 +0000
asID:                     14754
IP address blocks:        201.190.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:73:b9:a9:b0:ba:70:ed:f4:81:92:ec:c4:de:4d:49:34:20:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Jan  6 19:42:51 2026 GMT
            Not After : Jan  5 19:47:51 2027 GMT
        Subject: CN=29561F8C44E2F51140322DAD08C6C7096A39BEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:35:6a:33:d9:d9:f3:b1:e9:d2:66:40:4c:
                    81:a5:a7:20:6a:51:ec:31:3a:36:11:83:7a:56:8a:
                    d7:d7:f1:5c:b1:e7:42:13:a2:38:91:bb:c2:58:98:
                    3d:9b:c7:a4:39:71:f8:a1:2b:82:47:aa:f3:2c:cc:
                    84:e7:43:cd:7d:21:8f:7c:81:9f:62:54:39:c4:ab:
                    f5:68:7a:0d:e6:d8:12:05:9a:93:c9:cb:d2:e9:a5:
                    ad:79:2c:d6:9a:f0:bf:dc:56:85:18:9e:27:6d:fd:
                    2b:0e:df:db:e7:f0:1d:b0:ef:cb:93:13:be:44:5b:
                    da:d9:33:83:70:15:f5:6c:72:8d:24:4d:2d:8f:5d:
                    22:dc:53:1b:0d:1a:fe:c4:ab:82:94:7e:4f:cf:a2:
                    6f:ee:c6:d4:b1:e4:d4:af:b5:d9:79:c1:fc:4d:f1:
                    72:31:fc:b9:19:e2:de:34:08:69:e3:f3:93:2e:66:
                    b9:64:5c:cb:44:85:fb:ae:e3:b0:02:8d:aa:07:c0:
                    9c:8f:f8:39:3a:c8:cf:32:0c:8d:e8:6b:ba:b1:e9:
                    50:ac:55:aa:45:0a:2c:4b:ac:a2:57:c6:ee:70:66:
                    12:21:f0:88:13:f2:74:39:6c:56:fe:d2:bd:a0:ae:
                    45:ea:62:f1:fc:46:f0:2b:01:77:90:d0:94:c8:22:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:1F:8C:44:E2:F5:11:40:32:2D:AD:08:C6:C7:09:6A:39:BE:AD
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3230312e3139302e302e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:e3:f4:2b:42:71:d1:e4:45:15:e1:97:8a:ac:7a:64:28:
         d0:11:6c:7a:e0:6a:53:04:b0:11:1c:9e:a0:64:db:ad:93:56:
         4e:a5:69:0c:ec:66:32:9a:d8:fd:29:8d:85:b0:41:56:15:ae:
         a5:99:a7:ab:57:03:ae:45:14:34:ee:32:c7:3b:73:71:97:84:
         5a:50:a5:27:59:0f:3d:33:98:29:2a:db:c8:78:a1:f7:73:92:
         29:e9:af:95:f9:a4:b3:71:b0:12:30:11:1c:e7:41:e1:d7:a1:
         e2:7d:74:72:57:70:9a:01:8a:ad:22:20:5c:9b:72:a9:23:76:
         b8:4d:7c:b6:18:87:50:65:cd:33:cc:48:b0:2a:6e:3c:33:c2:
         cb:2d:19:d9:80:99:e4:d0:c7:3c:dd:f5:79:d1:40:c0:a1:b1:
         d5:20:36:2b:e3:09:98:3d:4a:85:e1:55:7d:fe:62:84:47:a9:
         6f:f1:06:1c:f4:66:be:52:ac:f1:9d:6d:20:a1:5a:62:bd:71:
         05:fe:8d:f7:7a:d7:c6:09:ba:18:6c:67:8a:e6:26:49:12:ee:
         cf:69:f6:54:91:f6:53:d7:22:c6:ff:17:8c:82:3b:66:02:b4:
         39:f1:0a:5a:72:7e:ba:fb:94:fa:85:31:e6:ca:7a:75:a6:aa:
         38:1f:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:56 2026 by rpki-client