This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e35302e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          otZaM4DXjI3tzmWw63uVPfKm50AOok+PqD8YC1x7kbE=
Subject key identifier:   FA:A2:BE:0C:E1:60:58:CB:F3:16:93:F6:AF:0F:34:CF:E0:3B:3B:C4
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       21822CADD15D8421001EA6D1818654213711D26E
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:02 +0000
ROA not before:           Tue 06 Jan 2026 19:21:02 +0000
ROA not after:            Tue 05 Jan 2027 19:26:02 +0000
asID:                     27768
IP address blocks:        201.217.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:82:2c:ad:d1:5d:84:21:00:1e:a6:d1:81:86:54:21:37:11:d2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:02 2026 GMT
            Not After : Jan  5 19:26:02 2027 GMT
        Subject: CN=FAA2BE0CE16058CBF31693F6AF0F34CFE03B3BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:4e:a1:5a:d8:be:cf:00:ca:e4:70:ec:bd:
                    82:83:17:6a:aa:d9:7b:37:7b:ad:b4:1f:50:bf:6c:
                    0e:36:92:d1:f1:76:db:6d:f5:bd:f0:3b:9b:54:e5:
                    13:97:41:38:9b:64:6c:53:e5:94:dc:95:b1:0e:f5:
                    9c:74:d6:4f:f4:f7:d7:22:85:53:36:97:20:96:72:
                    b1:b1:fc:05:74:cd:3d:39:8f:8e:93:7e:42:a9:f5:
                    25:25:80:63:7a:e8:66:f8:a1:aa:b8:c3:cf:92:b8:
                    ed:90:4a:c6:e4:91:33:25:65:87:d0:4e:9b:3e:87:
                    5e:4c:35:c8:a4:fd:8f:c8:e9:66:63:bd:0e:00:5d:
                    89:17:67:62:aa:a9:df:b2:7b:e8:22:a9:a0:a4:3a:
                    14:06:9c:0e:27:6d:14:36:4c:5d:f6:b9:b4:a0:ee:
                    0e:7e:5e:de:4c:d9:38:b6:b9:c3:90:bb:02:1d:fa:
                    73:2f:6a:8b:61:ba:94:c3:6c:86:6f:52:a4:41:b2:
                    05:73:d4:cb:49:d1:b8:ce:fa:82:13:78:72:41:c9:
                    1f:09:9a:40:25:c1:fe:30:50:70:d1:1f:05:98:84:
                    b7:0e:2e:88:49:78:42:71:b9:34:b5:b2:7d:57:24:
                    4c:81:5e:33:f3:77:9a:2f:cf:2c:ca:89:7c:52:13:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:BE:0C:E1:60:58:CB:F3:16:93:F6:AF:0F:34:CF:E0:3B:3B:C4
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35302e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:06:dd:52:b0:75:79:a2:39:9e:cf:5f:e1:73:e3:14:48:
         0e:68:4b:84:f7:38:fc:a5:41:a3:d8:97:58:b5:f5:18:69:51:
         e8:23:c9:9e:bf:c5:55:34:76:56:15:24:5e:18:16:30:73:5c:
         22:47:c2:ac:d3:60:c1:59:d3:08:d3:da:87:e0:28:92:7d:28:
         42:70:5a:44:8a:37:d4:6d:6c:39:ad:2c:dd:65:ff:38:36:df:
         f8:4b:ac:2c:66:fa:8f:21:ab:b6:d8:f8:f0:71:e3:b1:15:4b:
         01:1a:34:a7:63:70:97:d7:ba:3e:c6:cc:4e:18:72:22:1a:e0:
         8d:25:fc:07:cf:33:f5:4e:06:8a:86:60:cb:a9:8e:46:34:d8:
         7b:e8:7d:c6:d0:d7:89:2e:eb:df:14:c5:72:6c:f3:ab:f3:f6:
         15:5a:c2:85:44:e7:4d:db:98:d8:6c:bb:89:ec:0c:57:65:79:
         81:7f:3d:06:68:bc:aa:ea:c1:fa:37:69:e5:2b:9f:2d:6b:5f:
         b6:ee:f4:52:7c:ae:ab:4a:d1:c6:bb:78:b5:00:cf:4a:a9:88:
         83:1f:3e:82:b4:08:71:3a:e5:b9:c6:31:6d:1d:b0:df:d7:b6:
         c5:53:ba:6a:93:26:e7:08:fb:df:8b:05:ba:73:9e:47:c0:d8:
         92:0a:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:45 2026 by rpki-client