This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
File:                     3230312e3231372e33322e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier:          +8RZLzHv9CY83x1jGtuVdRg230T5iNzO3DXN9gu++eM=
Subject key identifier:   D7:32:0B:D0:77:F3:AB:F2:C9:57:22:C6:59:EF:34:72:11:A7:BC:19
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       07722962B80527852C8EC965AEDB731107BD8558
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:00 +0000
ROA not before:           Tue 06 Jan 2026 19:21:00 +0000
ROA not after:            Tue 05 Jan 2027 19:26:00 +0000
asID:                     27768
IP address blocks:        201.217.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:29:62:b8:05:27:85:2c:8e:c9:65:ae:db:73:11:07:bd:85:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:00 2026 GMT
            Not After : Jan  5 19:26:00 2027 GMT
        Subject: CN=D7320BD077F3ABF2C95722C659EF347211A7BC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:a2:b3:80:21:38:ba:c3:71:ea:9b:c5:9c:
                    3f:69:56:1c:01:d3:4e:15:0b:0c:d4:ef:1d:f3:a7:
                    eb:10:59:e2:e4:4e:4f:3a:7b:6e:5d:11:57:0b:cb:
                    81:be:05:0c:65:a1:0a:2b:1f:bc:81:3f:b0:83:2e:
                    ad:96:ca:08:2d:a8:67:bd:68:31:1c:35:53:1d:a5:
                    1e:14:72:c1:80:f9:6d:24:ff:1e:7a:39:16:30:97:
                    8b:5d:b3:08:39:73:67:53:4d:2a:6b:27:b3:cd:cc:
                    52:d9:12:71:45:63:ad:28:0b:6c:d9:d8:b8:c2:ee:
                    29:89:82:d4:0a:01:f6:ae:23:4d:69:db:8a:c8:cb:
                    4a:eb:73:dc:75:2c:cf:1e:37:b2:2b:de:64:4b:e2:
                    02:2e:b3:ff:06:58:52:a8:0e:ab:0e:3f:17:55:23:
                    fb:62:2f:5e:81:66:e7:9b:aa:b5:9b:75:0d:23:7b:
                    29:d2:3b:5b:ee:da:93:c1:4d:77:b5:35:c0:78:28:
                    4c:05:66:a0:c6:b0:96:d6:0d:43:c9:cf:bc:4d:fa:
                    d6:0b:1b:28:03:6a:c1:93:ee:4d:45:5a:66:d0:d6:
                    89:52:7d:22:e4:ea:0c:ed:7d:8f:ed:98:7f:7d:2b:
                    a1:02:cb:6c:3f:fd:e0:82:b8:c7:f7:f2:15:ca:0c:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:0B:D0:77:F3:AB:F2:C9:57:22:C6:59:EF:34:72:11:A7:BC:19
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:5f:10:3a:b7:1d:75:37:17:2f:a8:ba:5a:e0:c5:38:60:
         50:ba:af:0f:98:7e:cb:85:94:30:69:3a:3f:28:76:35:11:56:
         3b:3f:56:71:17:dc:b3:73:d6:ad:3b:74:2c:19:9f:6d:6f:99:
         96:43:de:62:43:0a:c7:23:c4:41:8a:e2:a3:3c:88:76:97:b5:
         12:02:24:59:67:74:89:5b:39:5e:92:63:1f:95:f5:92:8b:66:
         87:cb:bb:e0:77:61:a3:b6:05:d0:92:69:75:2d:4d:b6:58:b5:
         70:f6:a8:25:66:52:dc:9f:c2:72:23:77:e2:6d:ef:f5:4f:f9:
         b2:6a:8f:9b:72:78:01:01:e3:84:5b:d5:64:a9:ee:4d:da:09:
         d0:ae:53:52:3c:c7:d1:d7:ae:e1:e8:2d:b2:f1:0f:b0:ce:17:
         ca:a2:49:12:f6:e7:8a:c6:d4:57:33:f4:e0:1f:de:1c:c7:a6:
         3f:16:c4:d7:f1:37:36:ab:0b:8b:a0:94:95:78:ec:dc:88:cd:
         5e:e1:bf:2c:5d:36:27:58:a4:cc:66:26:ec:09:b6:b9:cc:81:
         bd:35:30:e6:6f:0f:0c:18:3d:97:e4:95:18:21:fe:91:d6:b2:
         eb:34:34:21:11:9a:fd:8f:a8:86:93:fb:4e:88:bd:bb:17:7e:
         cf:2d:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:21 2026 by rpki-client