This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32312e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          wz3d0v0ZOiZQtGLpiMuvPhlqyCVC6MCFy1WxcdPmGMY=
Subject key identifier:   20:4B:B3:E1:4E:51:11:86:FE:3D:59:DC:F1:79:70:07:BF:34:51:D8
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       15E92E2CC03AECC2C39FAA2DC49F32502789B541
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:03 +0000
ROA not before:           Tue 06 Jan 2026 19:21:03 +0000
ROA not after:            Tue 05 Jan 2027 19:26:03 +0000
asID:                     27768
IP address blocks:        201.217.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e9:2e:2c:c0:3a:ec:c2:c3:9f:aa:2d:c4:9f:32:50:27:89:b5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:03 2026 GMT
            Not After : Jan  5 19:26:03 2027 GMT
        Subject: CN=204BB3E14E511186FE3D59DCF1797007BF3451D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:4b:bd:e2:2a:24:ad:dd:9a:cb:ab:bb:dd:
                    91:6d:0a:ff:8d:3c:f4:12:25:da:4c:30:53:cd:47:
                    db:3b:d2:5f:4d:17:59:02:ee:a7:4c:45:f3:70:00:
                    5c:2b:6b:08:02:d7:a0:55:ff:95:da:9f:76:a6:52:
                    e9:d2:b6:32:09:a9:3c:7c:1d:1c:44:d2:ef:4a:e0:
                    df:2f:b5:d0:13:fd:f7:45:cb:56:34:48:a7:27:27:
                    77:55:e3:cd:a1:41:00:88:a1:49:b8:0b:21:40:10:
                    4a:36:5c:85:e5:ba:24:44:7a:ef:c2:f2:3a:f7:0a:
                    98:a1:59:d1:7c:0b:7b:d3:a5:2f:45:65:cd:25:f1:
                    0f:37:11:8e:54:77:07:f0:3e:80:16:39:06:ab:b9:
                    34:7e:81:14:42:5e:28:1c:ff:84:d8:c5:7c:33:5e:
                    d6:f2:a6:b9:0c:c6:68:c8:f5:d0:b6:ce:a5:89:5a:
                    c7:e3:36:4a:22:05:27:6f:36:27:f7:c6:cf:78:ae:
                    6d:df:a0:34:cf:ff:13:e1:72:e6:66:b4:df:f2:56:
                    5e:0b:fc:38:ab:da:09:3e:65:62:aa:12:f3:8e:93:
                    38:c6:d2:23:19:05:ff:b4:17:1e:aa:7d:45:08:b7:
                    94:65:9e:a5:f8:a2:d7:9b:61:4a:20:a4:b3:58:44:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:B3:E1:4E:51:11:86:FE:3D:59:DC:F1:79:70:07:BF:34:51:D8
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32312e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:d7:61:53:18:10:16:bf:21:4c:95:b8:7d:3c:5e:30:f3:
         a6:39:b5:aa:34:1b:79:05:ed:b0:0f:4d:42:eb:66:82:c2:3a:
         3f:0f:05:b9:5c:21:e9:36:7f:33:8b:64:9f:5e:25:5e:de:c0:
         67:57:b1:31:4c:44:5d:4d:69:63:fd:8d:a7:e8:c7:b3:d0:85:
         f0:6a:73:a7:b5:1c:b2:54:a8:0c:d2:c9:41:f9:22:e6:24:cc:
         f8:dc:95:bd:97:36:eb:b0:ff:42:73:76:c9:f3:6f:e2:9e:53:
         e3:7b:a3:4d:ce:a3:ca:0b:62:7c:68:62:77:10:94:1b:92:49:
         81:e1:4a:97:11:8f:1c:28:d6:fb:1b:70:e9:a2:19:73:46:48:
         3d:2c:5b:da:cc:f5:ed:d1:4d:76:4c:b8:9e:18:b9:50:62:5a:
         25:b9:33:14:ba:aa:aa:b3:c0:9a:19:a1:98:0b:55:85:5c:de:
         20:f3:db:d5:0b:1b:06:06:fe:e3:2d:c9:7c:31:49:30:e2:98:
         29:7b:ee:ff:3b:63:8e:db:b1:29:3d:ad:18:23:a6:c1:38:00:
         13:5e:7e:c2:6a:58:e0:d6:8e:29:8d:e6:fe:e3:f8:79:da:69:
         2f:d8:cb:12:25:9b:01:ea:42:52:cf:f6:90:91:3c:55:e3:2a:
         94:23:35:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFekuLMA67MLDn6otxJ8yUCeJtUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjAxMDYxOTIxMDNaFw0yNzAxMDUxOTI2MDNaMDMxMTAvBgNV
BAMTKDIwNEJCM0UxNEU1MTExODZGRTNENTlEQ0YxNzk3MDA3QkYzNDUxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Uu94iokrd2ay6u73ZFtCv+N
PPQSJdpMMFPNR9s70l9NF1kC7qdMRfNwAFwrawgC16BV/5Xan3amUunStjIJqTx8
HRxE0u9K4N8vtdAT/fdFy1Y0SKcnJ3dV482hQQCIoUm4CyFAEEo2XIXluiREeu/C
8jr3CpihWdF8C3vTpS9FZc0l8Q83EY5UdwfwPoAWOQaruTR+gRRCXigc/4TYxXwz
XtbyprkMxmjI9dC2zqWJWsfjNkoiBSdvNif3xs94rm3foDTP/xPhcuZmtN/yVl4L
/Dir2gk+ZWKqEvOOkzjG0iMZBf+0Fx6qfUUIt5RlnqX4otebYUogpLNYRDuxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIEuz4U5REYb+PVnc8XlwB780UdgwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZFTAN
BgkqhkiG9w0BAQsFAAOCAQEAUdHXYVMYEBa/IUyVuH08XjDzpjm1qjQbeQXtsA9N
QutmgsI6Pw8FuVwh6TZ/M4tkn14lXt7AZ1exMUxEXU1pY/2Np+jHs9CF8Gpzp7Uc
slSoDNLJQfki5iTM+NyVvZc267D/QnN2yfNv4p5T43ujTc6jygtifGhidxCUG5JJ
geFKlxGPHCjW+xtw6aIZc0ZIPSxb2sz17dFNdky4nhi5UGJaJbkzFLqqqrPAmhmh
mAtVhVzeIPPb1QsbBgb+4y3JfDFJMOKYKXvu/ztjjtuxKT2tGCOmwTgAE15+wmpY
4NaOKY3m/uP4edppL9jLEiWbAepCUs/2kJE8VeMqlCM1Ew==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:42 2026 by rpki-client