This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa
File:                     3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa (raw, json)
Hash identifier:          beTNzcRlmQSU3C6NHXN+AEGDzfnFN+o2k1igdmaCr0w=
Subject key identifier:   B8:7B:0F:04:B5:21:CA:C6:9D:3E:6E:CA:48:17:8A:E4:75:07:D4:0A
Certificate issuer:       /CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
Certificate serial:       3F7AE1ACB42637A0006763128C1C8572475A8685
Authority key identifier: EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa
Signing time:             Tue 06 Jan 2026 20:56:54 +0000
ROA not before:           Tue 06 Jan 2026 20:51:54 +0000
ROA not after:            Tue 05 Jan 2027 20:56:54 +0000
asID:                     52373
IP address blocks:        201.217.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:e1:ac:b4:26:37:a0:00:67:63:12:8c:1c:85:72:47:5a:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D
        Validity
            Not Before: Jan  6 20:51:54 2026 GMT
            Not After : Jan  5 20:56:54 2027 GMT
        Subject: CN=B87B0F04B521CAC69D3E6ECA48178AE47507D40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:8d:fc:91:29:70:0a:96:02:92:3f:c7:c9:
                    89:2b:2c:71:0d:26:41:d2:6f:96:0e:7d:5f:bd:79:
                    03:53:bd:cf:9c:a6:2c:bb:d8:0a:f7:c5:e4:90:65:
                    da:c9:d1:a1:b6:79:2b:c2:82:19:2d:4a:52:fc:12:
                    42:31:00:d7:1b:65:7e:95:72:24:5c:c2:47:2e:9e:
                    c3:7d:f3:48:1d:52:71:5e:59:7e:02:d8:4a:24:49:
                    40:ba:d8:58:d1:23:38:4b:49:b4:6e:30:f3:fc:77:
                    30:32:15:98:9d:cb:50:67:19:8a:e1:8d:0b:a2:69:
                    ce:98:5e:2a:7e:cf:13:a8:a0:ed:0f:83:9e:f4:63:
                    d4:9f:a0:9a:b3:28:c8:44:08:64:14:be:5e:26:7d:
                    13:0d:18:87:ae:bc:4a:cf:3c:0a:62:cb:6d:a7:ea:
                    d1:fe:df:97:4b:c2:0d:35:69:11:d8:49:4a:d2:5b:
                    73:eb:e8:93:51:3c:87:5b:71:b9:9c:dc:ee:39:84:
                    28:3b:32:a6:dc:1c:3f:54:22:5c:7b:56:4d:94:42:
                    1f:5f:f7:7b:d5:32:21:4f:c3:01:59:93:6f:83:43:
                    c0:f5:78:58:ba:f4:3b:55:91:04:88:df:0f:28:0f:
                    6d:03:cf:0a:57:ab:e9:d9:c2:68:4f:0d:93:52:ae:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7B:0F:04:B5:21:CA:C6:9D:3E:6E:CA:48:17:8A:E4:75:07:D4:0A
            X509v3 Authority Key Identifier:
                keyid:EA:1C:EE:BD:E0:D9:E5:EE:AD:92:FA:F2:24:46:85:80:A4:C6:F1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA1CEEBDE0D9E5EEAD92FAF224468580A4C6F16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D26354B8ED4F12AEA07DCFE68B70B9F342373AE1317FA544AD8058F4679906AD/0/3230312e3231372e3234342e302f32322d3234203d3e203532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:78:e7:64:81:a7:6c:10:ef:07:c9:89:13:ea:0e:2e:00:f5:
         ed:7d:08:98:77:ef:4a:e4:bb:ee:4a:b3:0d:fc:84:f9:61:27:
         69:cb:00:52:f5:01:48:90:d7:0e:1c:7b:1f:a0:f3:79:20:61:
         e2:de:55:c1:c3:ae:c8:75:f8:da:ac:e2:0b:a3:a3:53:5c:23:
         dc:1f:eb:5e:e2:47:d6:05:87:b0:d9:06:c2:1b:ad:c9:68:ef:
         15:7f:43:b5:b8:8b:c8:98:d3:05:3c:a5:b5:8c:db:41:52:6d:
         a3:49:17:2a:e1:f9:1a:97:af:9a:ab:06:a4:8f:ed:4a:a2:93:
         f5:d7:f6:95:12:21:8b:a9:46:fe:51:ee:10:48:3d:b0:53:37:
         e6:94:68:aa:7c:d6:b0:c2:27:e5:f9:e6:23:9c:6d:75:fd:63:
         cd:98:cf:df:62:a4:66:4f:1c:08:4d:b7:a3:29:e3:1a:b9:fd:
         30:00:56:af:91:df:db:0b:4a:9a:4b:b3:b0:79:22:fa:a7:59:
         5f:b7:0b:b3:e4:5b:4d:ea:d3:f4:7a:c0:cb:29:0d:df:7d:56:
         be:37:7e:b6:83:23:8b:5e:8f:9b:a9:f6:cd:cd:02:d4:e5:0b:
         5d:f3:02:ab:5a:a2:91:89:f2:fd:b0:9e:71:b5:29:e6:50:03:
         63:ce:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:08 2026 by rpki-client