This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34342e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          MUjjKrW+KtU3t565wtCqPkp4iHaX/3TFud/Zln8jTcY=
Subject key identifier:   F1:73:A6:EA:13:C3:AB:10:BF:65:FB:22:2C:3C:4B:1A:7C:92:89:DA
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       606EA687BA3BD8DE933D3FEDD157D9E4698F29A5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 08 Nov 2025 23:52:05 +0000
ROA not before:           Sat 08 Nov 2025 23:47:05 +0000
ROA not after:            Sat 07 Nov 2026 23:52:05 +0000
asID:                     27768
IP address blocks:        201.217.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:a6:87:ba:3b:d8:de:93:3d:3f:ed:d1:57:d9:e4:69:8f:29:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  8 23:47:05 2025 GMT
            Not After : Nov  7 23:52:05 2026 GMT
        Subject: CN=F173A6EA13C3AB10BF65FB222C3C4B1A7C9289DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:1d:42:13:ce:1b:91:a3:ab:ca:a0:6d:27:
                    5e:1b:83:0c:ac:80:63:80:4b:d4:b6:cb:ae:0d:f8:
                    83:42:5f:d2:18:36:a8:14:4d:28:fb:a4:26:fe:73:
                    e2:36:98:38:2d:95:3f:c4:2e:09:07:f9:aa:62:39:
                    2b:6e:01:51:85:36:47:1f:86:54:3e:c3:ec:27:9d:
                    bb:a3:5d:5a:1e:eb:3d:85:36:2f:e2:6b:19:60:2a:
                    9c:83:e2:1c:36:76:7e:7c:c4:95:1e:25:cc:b9:e8:
                    46:c7:5b:64:11:ad:8c:6b:a9:20:07:b2:cb:72:9e:
                    19:00:29:5e:49:26:ea:6b:16:97:ef:aa:1c:28:96:
                    42:f7:12:9b:db:79:75:7f:8b:10:a9:b2:c2:2e:7f:
                    36:5d:d4:d8:08:a0:dd:0e:4d:db:dc:f6:54:36:32:
                    fd:29:27:26:2f:2d:4a:93:e8:20:11:09:97:d9:e8:
                    69:6b:7c:b5:5e:55:fd:07:88:f1:f6:d7:78:00:9c:
                    d6:ab:a1:f5:f9:7a:9a:74:5d:a2:b9:a8:0f:41:b7:
                    c3:0d:57:92:f7:f0:5d:be:21:ea:8d:f7:97:51:80:
                    e4:e3:21:bf:7e:ee:a5:8b:55:99:f8:5a:bf:6e:9e:
                    d3:c4:46:c3:af:a8:8f:a2:20:36:d8:55:ab:d2:48:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:A6:EA:13:C3:AB:10:BF:65:FB:22:2C:3C:4B:1A:7C:92:89:DA
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34342e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:bd:dd:ec:c4:4b:d7:7a:f1:b1:de:9c:e1:4a:04:8d:af:
         6a:8d:59:5f:fd:e4:47:9f:1c:31:42:93:a5:bd:be:e9:2c:9f:
         c0:28:59:05:23:0c:08:f9:95:bc:7d:a5:12:d8:33:2a:b7:c4:
         ea:3a:c2:37:d3:1e:42:3d:47:fc:4f:d7:e6:79:ae:86:20:fa:
         de:3b:e9:a6:cc:5b:0f:24:84:72:b9:e3:d0:6c:6e:83:3c:ce:
         f4:f4:42:da:ec:78:57:40:92:63:3d:7e:ce:a1:cc:e6:9e:23:
         2b:aa:ff:9d:13:72:3d:68:4c:f4:56:e8:75:54:95:3e:ae:00:
         a9:6f:a3:22:4d:d0:1b:64:62:8c:8a:fe:93:68:db:cf:ba:27:
         2b:ee:e5:51:2e:60:bc:88:e8:df:16:d3:a0:33:e2:07:a9:0c:
         90:9b:12:6a:7a:4a:2a:1a:fb:2a:b8:21:a3:f1:79:b8:6f:d8:
         89:a4:bd:d4:8c:24:e2:0e:67:ee:13:60:1d:4c:de:16:26:04:
         44:03:bb:ca:e6:93:e2:72:7c:3f:c1:c1:23:ab:3d:c0:42:13:
         dc:8a:a0:fc:c3:4d:02:b0:a4:7b:b6:75:8e:1b:fb:d7:cd:be:
         55:a8:03:26:95:81:aa:c1:86:b3:80:3a:67:d9:d7:31:d3:74:
         d3:63:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:29 2025 by rpki-client