This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa
File:                     3230312e3136312e36342e302f31392d3234203d3e203139333733.roa (raw, json)
Hash identifier:          WjxrQvWb6vpgPIvbfd1GV/PeiSGLRRajo+YaGWCvZRM=
Subject key identifier:   FF:73:78:71:40:19:B5:08:5B:52:B8:D5:0E:A1:87:BC:D4:93:11:78
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       44442A9B31998F8339EE3BF5781385EFC3681B7D
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:48 +0000
ROA not before:           Sun 18 Jan 2026 07:20:48 +0000
ROA not after:            Sun 17 Jan 2027 07:25:48 +0000
asID:                     19373
IP address blocks:        201.161.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:44:2a:9b:31:99:8f:83:39:ee:3b:f5:78:13:85:ef:c3:68:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:48 2026 GMT
            Not After : Jan 17 07:25:48 2027 GMT
        Subject: CN=FF7378714019B5085B52B8D50EA187BCD4931178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:e1:0e:3b:d5:cc:76:3e:95:5f:e1:38:66:
                    83:ff:ce:b2:ce:b7:5a:43:9e:20:7b:42:ab:72:ab:
                    0d:79:67:cf:44:98:73:e0:cc:f7:cc:10:31:5d:3f:
                    d8:59:c4:7a:d3:3e:5e:a7:b0:95:2f:2a:4b:78:8d:
                    1d:70:db:4a:ac:e3:d6:73:75:de:8b:e4:ec:37:f5:
                    eb:f9:0f:cb:f7:c1:d9:76:0c:0f:f8:46:86:70:d5:
                    60:8a:15:23:15:fa:27:02:9b:25:c7:45:ba:03:2a:
                    e1:18:82:bb:db:ec:b4:5b:f8:77:e7:fe:03:0f:15:
                    70:55:aa:75:87:ae:71:fa:a1:3a:4f:9c:2f:9c:68:
                    45:c1:11:f3:0a:7d:ef:c4:a0:30:c8:4b:a8:0b:5b:
                    03:fb:9d:dc:47:15:60:a7:d7:ca:b8:d2:93:f6:aa:
                    66:aa:ac:37:7e:a7:b8:b5:aa:59:f0:d2:2e:f8:43:
                    45:d4:81:27:03:9d:81:2c:e5:7a:55:9f:a9:d6:b5:
                    b3:bf:3a:9d:2b:35:03:60:ef:b4:2a:18:1c:8f:00:
                    79:c9:19:04:6b:f6:49:bd:ef:22:52:de:6c:df:fc:
                    1a:57:ed:0e:5d:8d:6c:1b:c7:80:94:ef:4f:2e:44:
                    18:c3:90:d8:84:3c:8d:1f:7b:05:cd:70:e0:90:bb:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:78:71:40:19:B5:08:5B:52:B8:D5:0E:A1:87:BC:D4:93:11:78
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e36342e302f31392d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.161.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:50:fd:ce:73:a3:26:00:a6:8d:42:3f:94:9b:5c:f1:05:78:
         c7:9a:2f:8d:ef:a4:01:88:5f:ec:df:5d:42:c1:69:f7:dc:44:
         48:d4:ee:ee:d8:37:4e:9d:d6:49:a8:fb:f1:59:5c:ad:28:d8:
         a4:69:2f:01:bc:f5:cf:8b:91:39:fc:bd:17:ab:b9:4f:bb:21:
         0e:d9:25:66:d3:59:9c:60:92:02:d1:24:6e:c1:0a:c7:c6:92:
         e4:05:b5:57:27:d4:ad:dc:99:18:db:63:72:d5:1a:69:f4:42:
         e2:21:5b:83:d1:75:7e:7b:65:7f:da:e5:a8:6c:6e:e5:3c:0e:
         61:8c:a3:57:e1:64:ac:6b:06:82:49:5d:19:35:55:01:71:1b:
         ce:5e:ea:5d:8a:f6:ea:6c:2f:0d:81:26:38:82:09:bb:b2:e3:
         71:5e:56:dd:e3:d4:ae:f8:04:1c:b0:fa:fe:a7:44:be:a6:fe:
         b3:8a:d6:ef:c4:9d:b4:06:cd:2e:0f:8d:f9:35:93:74:97:ef:
         82:d6:99:4d:2e:8d:2f:d3:6e:29:d9:53:22:b4:d4:9b:db:d3:
         0d:ec:54:a1:2b:35:27:d7:65:ba:bc:76:0e:71:64:ef:6a:5a:
         96:66:0d:52:a4:dc:f4:c9:27:e7:66:c9:b3:2f:2c:9e:3a:0e:
         d5:40:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:37 2026 by rpki-client