This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e35392e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          /fwYNIy6mI4jvYGWQR7IFZh7XfeqWVS9KduDTRjL3Ng=
Subject key identifier:   F2:E2:12:ED:17:A3:A0:BA:69:2C:08:3A:92:03:C2:78:EF:D2:F3:E1
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       041B4F09A9EDE87A8A82843EEE051B13E6ACAF13
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:26:02 +0000
ROA not before:           Tue 06 Jan 2026 19:21:02 +0000
ROA not after:            Tue 05 Jan 2027 19:26:02 +0000
asID:                     27768
IP address blocks:        201.217.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1b:4f:09:a9:ed:e8:7a:8a:82:84:3e:ee:05:1b:13:e6:ac:af:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:21:02 2026 GMT
            Not After : Jan  5 19:26:02 2027 GMT
        Subject: CN=F2E212ED17A3A0BA692C083A9203C278EFD2F3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:33:cd:cd:90:31:3f:f1:cf:15:6a:0f:28:
                    51:0a:d2:a8:4f:86:5a:ee:5b:ce:bc:d1:8d:49:7c:
                    2c:98:a5:9b:3d:3e:6d:6d:9a:2f:87:34:a1:3f:11:
                    75:a6:93:d5:a0:01:c3:72:93:5d:86:9e:6d:6c:e0:
                    e3:02:ac:30:4b:87:5d:f1:4a:55:ee:3a:7f:09:f5:
                    1f:de:19:e4:68:c0:b8:61:90:02:cc:72:70:98:9e:
                    ff:a5:99:35:62:83:23:3a:c3:1d:d3:ed:21:ac:60:
                    99:30:52:c4:48:24:ae:b4:98:eb:b2:15:32:4c:1a:
                    ae:d5:ea:9b:c8:5c:6b:02:55:3c:50:cd:7f:d4:79:
                    4f:da:20:e1:aa:20:be:d7:22:bb:0d:8c:cf:82:13:
                    63:29:a8:4e:09:b0:cf:bb:62:2a:d9:fb:fb:99:83:
                    99:68:70:94:d9:fe:c9:4f:55:db:49:ee:01:2c:59:
                    15:72:f2:1e:49:78:ec:f8:3f:dd:05:eb:8e:c9:3d:
                    80:4f:07:7e:c9:2e:a0:74:ff:01:8d:b3:80:39:df:
                    a9:b1:2a:ac:40:98:61:72:f2:25:20:c3:83:52:b8:
                    b4:e9:48:66:a6:a6:4a:1d:c6:b4:3d:6d:2f:3f:c9:
                    51:9a:52:9b:5b:21:95:9b:bf:ff:62:d3:68:dd:ba:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:12:ED:17:A3:A0:BA:69:2C:08:3A:92:03:C2:78:EF:D2:F3:E1
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35392e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:f1:38:53:db:67:85:51:9b:8d:0c:0b:3c:34:8c:a5:25:
         04:a2:bb:be:7e:d9:81:91:bd:d9:44:32:d5:53:35:86:d4:9d:
         5a:01:06:37:f0:b5:19:3f:f7:6a:03:51:6a:59:d1:c8:fd:dd:
         85:08:09:88:77:f1:76:9b:11:11:47:42:fe:15:3b:62:aa:93:
         e8:be:84:1b:05:37:53:a9:ae:a0:b6:56:5c:15:2c:f9:5f:1a:
         a2:74:82:93:44:84:2b:70:df:b2:f5:2e:0a:92:43:e7:40:f8:
         46:96:bd:27:48:65:6b:cd:77:d8:ce:15:d3:7f:2a:b9:8e:fc:
         62:55:be:eb:83:19:66:75:d8:15:10:9b:82:d8:8b:ea:96:9e:
         01:c7:5e:fd:29:06:4a:07:69:09:60:92:44:c7:a4:cf:7e:a1:
         33:07:61:fb:3b:eb:44:90:8b:5e:f4:ac:0a:97:d1:e9:98:91:
         7f:c2:fb:cb:12:8d:4c:ad:2b:57:95:ca:41:4b:0b:1b:c9:7f:
         01:06:a6:9c:3d:5e:4b:fb:1d:5c:67:95:b3:6b:86:94:ff:56:
         f0:11:6c:14:5e:07:66:31:a5:cb:85:ff:51:fe:3e:13:a8:22:
         a5:91:9e:21:0d:f9:40:ea:d7:1b:6b:6d:25:e4:ab:c1:48:ae:
         33:fa:b7:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBBtPCant6HqKgoQ+7gUbE+asrxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjAxMDYxOTIxMDJaFw0yNzAxMDUxOTI2MDJaMDMxMTAvBgNV
BAMTKEYyRTIxMkVEMTdBM0EwQkE2OTJDMDgzQTkyMDNDMjc4RUZEMkYzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFzPNzZAxP/HPFWoPKFEK0qhP
hlruW8680Y1JfCyYpZs9Pm1tmi+HNKE/EXWmk9WgAcNyk12Gnm1s4OMCrDBLh13x
SlXuOn8J9R/eGeRowLhhkALMcnCYnv+lmTVigyM6wx3T7SGsYJkwUsRIJK60mOuy
FTJMGq7V6pvIXGsCVTxQzX/UeU/aIOGqIL7XIrsNjM+CE2MpqE4JsM+7YirZ+/uZ
g5locJTZ/slPVdtJ7gEsWRVy8h5JeOz4P90F647JPYBPB37JLqB0/wGNs4A536mx
KqxAmGFy8iUgw4NSuLTpSGampkodxrQ9bS8/yVGaUptbIZWbv/9i02jduk23AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8uIS7RejoLppLAg6kgPCeO/S8+EwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzNTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZOzAN
BgkqhkiG9w0BAQsFAAOCAQEAnxDxOFPbZ4VRm40MCzw0jKUlBKK7vn7ZgZG92UQy
1VM1htSdWgEGN/C1GT/3agNRalnRyP3dhQgJiHfxdpsREUdC/hU7YqqT6L6EGwU3
U6muoLZWXBUs+V8aonSCk0SEK3DfsvUuCpJD50D4Rpa9J0hla8132M4V038quY78
YlW+64MZZnXYFRCbgtiL6paeAcde/SkGSgdpCWCSRMekz36hMwdh+zvrRJCLXvSs
CpfR6ZiRf8L7yxKNTK0rV5XKQUsLG8l/AQamnD1eS/sdXGeVs2uGlP9W8BFsFF4H
ZjGly4X/Uf4+E6gipZGeIQ35QOrXG2ttJeSrwUiuM/q3Ew==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:29 2026 by rpki-client