This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32362e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          Y89gnG6RbkyZaBpgy06k0doL2IeImORQVXR1cKkw+Zo=
Subject key identifier:   A7:07:84:70:91:41:28:AB:94:08:B7:C9:E1:E2:0F:85:DD:42:9B:80
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       28D94903EC1A24BD0609ACFB6407D26DB445717A
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 08 Nov 2025 23:52:04 +0000
ROA not before:           Sat 08 Nov 2025 23:47:04 +0000
ROA not after:            Sat 07 Nov 2026 23:52:04 +0000
asID:                     27768
IP address blocks:        201.217.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:49:03:ec:1a:24:bd:06:09:ac:fb:64:07:d2:6d:b4:45:71:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  8 23:47:04 2025 GMT
            Not After : Nov  7 23:52:04 2026 GMT
        Subject: CN=A7078470914128AB9408B7C9E1E20F85DD429B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:a1:79:69:c6:cd:f0:5f:d5:4d:0b:61:81:
                    70:47:53:fe:2e:30:dd:13:c4:8d:83:4e:47:30:07:
                    3c:39:3c:93:98:da:12:15:a2:be:39:3e:ca:34:f3:
                    47:b0:41:79:97:28:38:ff:53:e2:92:2e:ae:ab:b3:
                    be:25:a0:1b:e1:c2:f6:48:e7:1e:a3:5d:66:76:c4:
                    e2:08:64:29:f8:36:60:6d:d0:f1:81:29:88:3e:21:
                    11:cc:6c:43:04:2b:00:0c:42:39:66:71:3c:8b:9a:
                    28:c3:ec:38:8c:67:8a:f7:ac:23:c6:9a:7d:92:dd:
                    a8:7c:08:cb:02:82:8f:aa:77:89:25:47:26:30:aa:
                    69:fc:75:0c:c5:14:8d:c2:24:76:61:f5:92:6c:1c:
                    0d:2c:c4:ac:41:92:2f:cd:0e:7c:40:4f:c4:1b:2b:
                    46:31:95:e7:2f:39:ab:89:20:97:88:38:4f:53:20:
                    41:0e:44:3d:bc:79:4f:40:b8:66:23:44:26:5c:e3:
                    57:5a:1c:41:78:7c:db:03:24:05:f6:69:3d:84:73:
                    1c:63:51:97:cd:d6:6f:fa:8a:6d:80:36:c2:98:c0:
                    ca:dd:05:8b:af:03:bf:8e:5e:64:c9:55:69:a0:48:
                    f7:47:94:dd:8e:29:3e:32:93:0f:35:72:9a:18:29:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:07:84:70:91:41:28:AB:94:08:B7:C9:E1:E2:0F:85:DD:42:9B:80
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32362e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:32:a7:d7:07:9d:5a:4f:ae:91:fa:17:20:fa:99:37:70:
         78:55:8e:eb:8c:88:e6:c7:88:23:f2:ff:44:d7:ef:a7:37:ca:
         5e:e3:93:b9:8a:67:9d:69:d6:cc:8a:16:fd:ff:de:c8:3d:69:
         ad:8a:5d:94:68:f0:f2:46:9f:38:4a:8d:46:e6:b0:55:53:dd:
         9e:28:81:55:a7:e8:99:68:4b:b4:35:c9:4a:df:98:35:fd:b5:
         ad:f9:b5:5c:a2:59:eb:2e:6e:5e:7f:c2:71:df:0a:c6:58:1e:
         62:40:7b:19:2d:4e:4d:44:52:4a:24:b8:50:d4:6c:80:46:9b:
         70:95:4c:a9:3d:d3:b5:9a:94:32:b6:96:f0:ac:29:70:c4:88:
         35:06:5f:da:aa:70:24:47:ee:7f:84:8e:0f:1a:52:83:92:19:
         ae:a8:f3:2e:d5:e5:28:4b:d5:4d:25:2c:08:be:d9:04:dd:2e:
         20:85:53:d9:0f:32:30:d9:5f:ea:c6:9e:f7:4a:41:ed:d3:74:
         39:2a:a1:bd:e9:f3:bf:d8:9d:2f:37:12:58:60:56:5b:54:06:
         95:02:2e:e0:da:40:4d:73:09:59:d7:5d:17:3d:fd:e4:05:99:
         25:e3:2d:2e:35:c8:2c:f9:c9:3c:43:06:a3:15:ba:bc:19:cc:
         fa:d2:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:27 2025 by rpki-client