This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          Mg7wiU+Ts4lM4kciQoOD63W6E0958koyD0paCTN3HjQ=
Subject key identifier:   CF:1F:51:38:FE:AB:BE:23:FD:AF:5C:68:4A:DA:67:4A:34:86:0A:59
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       2D739F243F5A2EBFD86DB7BF295B67814E39352E
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:01 +0000
ROA not before:           Tue 06 Jan 2026 19:21:01 +0000
ROA not after:            Tue 05 Jan 2027 19:26:01 +0000
asID:                     27768
IP address blocks:        201.217.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:9f:24:3f:5a:2e:bf:d8:6d:b7:bf:29:5b:67:81:4e:39:35:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:01 2026 GMT
            Not After : Jan  5 19:26:01 2027 GMT
        Subject: CN=CF1F5138FEABBE23FDAF5C684ADA674A34860A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:59:5c:08:c8:97:79:28:e5:8e:27:33:2b:
                    88:a9:71:ee:24:30:b8:84:19:ec:f0:23:dc:bf:57:
                    74:de:c0:72:b1:d2:52:6a:46:3f:9d:55:96:c1:d0:
                    e1:b2:c9:3c:e5:a8:d1:b8:ec:80:e3:91:a9:24:18:
                    4e:3a:ee:0e:4e:ec:b9:85:68:27:41:53:69:03:47:
                    46:9b:d8:6a:3e:0f:69:29:0e:5c:ff:55:a4:4c:67:
                    cf:21:83:98:f7:51:34:60:00:5e:ed:a0:1d:d9:5d:
                    69:c6:13:db:16:ef:5c:16:88:c8:36:9e:09:b4:92:
                    fe:b4:fb:ef:37:86:3d:84:78:de:52:b1:f5:06:6d:
                    44:08:1e:e2:00:d2:06:65:99:f5:94:23:a2:7f:ad:
                    e8:14:3d:a3:9e:52:bb:85:39:1b:9c:a7:69:78:8e:
                    f1:f0:b8:56:a2:1a:ba:54:4e:5c:8a:d1:6f:85:62:
                    ca:c5:49:4b:76:3a:e8:62:d7:e9:0d:38:8e:6a:9a:
                    fd:67:01:38:ab:99:15:39:c1:85:d7:9a:51:55:17:
                    95:d8:26:84:01:3b:20:9b:34:be:18:49:19:2a:8f:
                    cc:23:ca:6d:03:61:ab:c2:4e:50:55:f0:90:84:67:
                    54:72:70:54:09:7b:84:62:27:c0:ac:35:65:41:46:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:51:38:FE:AB:BE:23:FD:AF:5C:68:4A:DA:67:4A:34:86:0A:59
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:79:f7:95:13:78:f5:ef:3a:ec:d5:2d:c6:d1:4e:d9:d3:
         d6:20:39:1e:b7:47:98:73:9f:01:3a:b5:c7:d6:ac:22:2f:8c:
         01:b9:c2:18:ee:8d:33:92:25:ba:89:8e:d8:1e:70:87:37:6f:
         a0:a9:69:3d:6d:f7:0d:47:52:3d:1d:24:fe:15:af:28:3c:68:
         4c:9f:9e:04:c2:41:b4:3b:8f:75:15:94:9e:64:37:7f:54:27:
         25:66:9a:c6:65:f9:04:80:b3:72:24:c4:fc:c8:93:99:69:d4:
         f7:e2:0d:c1:e9:9c:54:bd:1b:67:ed:85:73:54:05:01:69:b4:
         bc:60:f6:9a:6e:4e:bc:63:42:f4:cf:88:98:61:fe:32:ff:35:
         26:06:3e:64:df:09:a6:3b:e8:ce:37:3a:9e:5e:63:5c:ff:3e:
         4e:72:e6:94:b4:d9:8d:b8:9c:49:b8:df:cd:ca:5a:16:f8:6d:
         43:56:ed:ee:1e:4c:11:45:df:e7:4a:e5:f1:a8:a2:1a:c0:5a:
         a9:b7:62:bd:86:09:81:af:ee:ca:3e:e1:86:17:d7:d7:18:0d:
         4f:01:0a:f7:ce:10:c3:f2:80:d5:64:84:d2:b0:84:ab:ab:8d:
         22:0a:39:84:ec:34:f4:0a:61:e3:13:1b:dd:85:72:7e:85:d5:
         00:e1:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:26 2026 by rpki-client