This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32322e302f32332d3234203d3e203237373638.roa
File:                     3230312e3231372e32322e302f32332d3234203d3e203237373638.roa (raw, json)
Hash identifier:          B8j9WMIAYPjn3Yjdzr5FgMA5m+caakK/uVw2qHmviNI=
Subject key identifier:   1F:54:CA:BB:CE:F9:EC:63:73:69:38:75:D8:BD:6B:53:2F:08:D9:A0
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       0CEA0B310302708A39BF1AA848DD197D13D5D7A6
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32322e302f32332d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:02 +0000
ROA not before:           Tue 06 Jan 2026 19:21:02 +0000
ROA not after:            Tue 05 Jan 2027 19:26:02 +0000
asID:                     27768
IP address blocks:        201.217.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ea:0b:31:03:02:70:8a:39:bf:1a:a8:48:dd:19:7d:13:d5:d7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:02 2026 GMT
            Not After : Jan  5 19:26:02 2027 GMT
        Subject: CN=1F54CABBCEF9EC6373693875D8BD6B532F08D9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:5d:cf:99:94:99:52:4b:53:b5:c5:c1:1d:
                    e8:66:07:f1:b5:20:42:70:ad:a3:bc:6c:07:9e:78:
                    01:f8:aa:0a:f3:a9:ed:16:f8:a9:b0:ae:4f:d7:e5:
                    b5:8c:c8:2a:78:54:7c:08:cc:7b:ad:c6:2f:c6:7c:
                    eb:9b:ac:61:0e:ae:ca:df:7b:77:d2:ec:62:db:37:
                    bd:a1:1e:72:4e:ce:b4:84:07:88:01:02:9c:b9:f6:
                    28:77:07:d2:d7:18:79:ff:ad:71:ce:84:c3:a8:8c:
                    7c:89:3e:3b:8e:e3:7e:35:0c:e6:2d:b4:28:3c:bc:
                    51:cb:8a:b6:5a:30:2a:31:18:39:78:f9:36:9c:91:
                    27:bb:b0:59:e2:39:30:90:e5:63:82:55:53:27:e8:
                    44:ea:92:2d:22:c0:53:4b:a9:dc:50:00:4b:80:8e:
                    49:fd:7f:a7:72:3a:44:c2:44:de:54:9c:a0:51:a6:
                    ed:d5:36:7e:65:b2:ec:c8:85:61:ff:56:64:d3:7c:
                    7e:23:c5:f5:0f:b2:69:ac:fd:ce:c7:b6:14:27:4e:
                    70:66:30:a5:8f:52:2b:bb:15:52:e1:c4:e9:3b:bd:
                    35:bd:76:f5:f2:5f:12:a8:78:f3:c4:62:38:20:33:
                    8a:10:a3:64:77:59:df:62:7c:c6:2d:03:03:1f:66:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:54:CA:BB:CE:F9:EC:63:73:69:38:75:D8:BD:6B:53:2F:08:D9:A0
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32322e302f32332d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:34:66:e7:3c:9e:7a:7c:9c:b8:6e:3e:70:0c:50:9c:31:28:
         68:e5:4c:e1:5d:a2:6b:35:94:4a:3f:d9:ca:9e:6c:20:c1:63:
         eb:37:ee:f6:39:b8:0d:8b:e9:56:c1:84:97:c2:02:8b:f8:71:
         ab:c1:47:3f:dc:29:af:19:2b:f1:da:ac:44:5c:74:99:d0:ca:
         4d:ec:04:75:4d:e2:f7:b4:88:fa:68:17:16:db:35:ae:2a:a4:
         fd:e2:c0:2a:30:b5:2e:f7:90:1e:d7:4b:f0:80:28:63:74:4a:
         8d:01:7b:d8:5f:e7:81:21:0d:e5:e3:bd:28:74:fc:e7:7c:a5:
         82:2e:d9:71:e2:45:19:29:16:9c:52:c5:c3:86:23:41:a2:85:
         a9:c3:3d:37:4b:ff:20:e4:b1:44:33:06:83:cd:13:05:5e:15:
         6c:f8:ff:46:65:26:03:1b:af:c7:bf:13:b8:55:a7:4c:94:cd:
         20:7b:a1:97:79:52:c3:db:4c:65:75:57:4c:bc:1f:dd:e3:83:
         b9:68:95:52:a0:b1:1c:9d:7c:6c:9e:8b:63:82:1a:35:08:5f:
         59:ef:0f:46:95:01:6a:ca:ca:cb:d4:f0:d7:ef:14:49:13:db:
         13:96:1d:cb:44:9c:3f:db:74:d5:9c:38:34:b2:a8:04:ca:c3:
         7a:08:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:35 2026 by rpki-client