This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34362e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          brCJIJzpZcfO/xm0rtr93lCMPKC3DETudWgUPfnP4KY=
Subject key identifier:   45:45:C2:BE:4F:AC:62:7E:22:E8:74:09:D1:D7:AD:75:FE:C3:61:FD
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       76774FB92482FFEBFFFDA1D1B6CE60286EC06FE5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 08 Nov 2025 23:52:05 +0000
ROA not before:           Sat 08 Nov 2025 23:47:05 +0000
ROA not after:            Sat 07 Nov 2026 23:52:05 +0000
asID:                     27768
IP address blocks:        201.217.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:77:4f:b9:24:82:ff:eb:ff:fd:a1:d1:b6:ce:60:28:6e:c0:6f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  8 23:47:05 2025 GMT
            Not After : Nov  7 23:52:05 2026 GMT
        Subject: CN=4545C2BE4FAC627E22E87409D1D7AD75FEC361FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:c7:99:02:b5:ad:36:e7:83:04:52:39:c1:
                    d1:47:4d:12:be:cc:da:59:fb:bd:12:9f:2e:8e:4b:
                    1b:d2:0d:6e:26:a0:f7:d1:64:33:da:b9:15:04:e9:
                    60:41:85:3f:f5:29:68:a8:fc:5a:50:f1:e8:1a:45:
                    16:b4:ba:aa:52:05:1e:03:7b:ce:ea:a3:7c:e8:e0:
                    1a:dc:52:46:64:8a:aa:e3:23:ab:9d:5f:f1:8b:7c:
                    ca:55:fd:dc:94:22:db:fe:4b:54:33:49:85:25:46:
                    12:0d:3c:cc:42:32:4e:4c:66:17:1f:58:0c:a4:1f:
                    e6:3a:ab:7a:07:68:41:4d:36:16:25:d2:9d:86:c9:
                    64:5f:82:e4:b2:01:67:f7:8d:d0:21:a5:5a:f1:1b:
                    13:8a:22:c1:ad:22:06:72:99:f7:32:5d:5e:04:6b:
                    03:48:6d:be:49:62:01:ce:7b:82:af:ea:be:63:0c:
                    13:55:ed:d8:bd:cd:e7:ef:4b:29:35:25:ee:53:03:
                    b7:f6:6f:c4:56:f6:d6:9d:70:60:62:d8:c6:92:6c:
                    3d:bb:ae:ba:d9:19:13:15:96:b9:f8:7c:46:a9:47:
                    d9:31:62:d1:d4:3b:95:f5:e4:26:f3:52:68:a3:1b:
                    74:ef:84:d1:45:40:3b:0d:9c:f1:38:8d:c1:2e:32:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:C2:BE:4F:AC:62:7E:22:E8:74:09:D1:D7:AD:75:FE:C3:61:FD
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:e6:05:76:25:c4:6b:5a:80:11:c3:46:84:4c:73:86:b9:
         ef:91:dd:89:97:86:ce:3e:1d:f5:3e:21:fc:cf:08:d7:7b:85:
         c5:e4:32:d1:bf:ef:7d:9a:ca:87:db:4c:22:95:15:7b:a0:3a:
         c5:53:e5:45:1a:35:34:0f:e2:05:d8:6e:50:14:81:33:fb:63:
         e7:80:76:a4:8e:a1:2d:60:a1:a3:bb:74:59:29:e4:49:7f:21:
         eb:cd:5d:6c:86:24:bf:53:04:b9:0a:cb:d1:80:24:f5:a9:43:
         55:06:dd:8e:dc:e3:7c:0d:4f:ed:df:3d:25:2f:bd:74:ec:21:
         fa:d0:54:83:a2:88:12:b9:0f:38:1e:f2:c9:a6:32:e5:b8:0d:
         6f:10:17:6f:e4:90:d5:22:5a:10:d0:1f:55:5e:e4:3c:ba:e7:
         1e:75:fc:97:01:91:1e:6f:72:a4:24:08:6b:e8:88:fc:bb:70:
         fe:c1:70:a0:79:9f:e3:c0:49:f8:43:5b:6c:28:22:e3:ae:23:
         e4:62:2e:9c:a7:a2:87:0a:36:13:f0:93:f6:a8:e4:4b:59:87:
         c6:47:09:b4:dd:c5:a3:f7:50:c9:ad:d2:dd:f2:09:99:3e:09:
         83:d5:a5:cd:18:4f:2f:f7:fb:64:86:4a:e7:c3:90:67:da:ee:
         49:c6:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:28 2025 by rpki-client