This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa
File:                     3230312e3135312e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          ul993UGrUtq7Jf6zQ/a6RwDV4yw/c2Ac/Nise/g1sxg=
Subject key identifier:   81:DB:FD:59:22:16:8E:0A:AC:36:CB:1D:E9:02:94:E1:3C:77:A4:15
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       7EC32AB7F5829AD8974B92FE67EC3C45D6A7AE9F
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:45:00 +0000
ROA not before:           Tue 06 Jan 2026 19:40:00 +0000
ROA not after:            Tue 05 Jan 2027 19:45:00 +0000
asID:                     6503
IP address blocks:        201.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c3:2a:b7:f5:82:9a:d8:97:4b:92:fe:67:ec:3c:45:d6:a7:ae:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:00 2026 GMT
            Not After : Jan  5 19:45:00 2027 GMT
        Subject: CN=81DBFD5922168E0AAC36CB1DE90294E13C77A415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:f4:dc:e1:08:f1:96:8a:dd:26:05:15:11:
                    94:0a:f8:b7:7b:3f:72:34:98:7c:29:98:a2:cf:8f:
                    c3:72:99:e4:b0:a9:25:d7:c9:b9:3b:bb:d8:4b:7e:
                    2e:89:a4:ab:1e:2f:e6:2f:61:d2:87:e6:b2:04:04:
                    fc:9d:9d:e0:1e:49:f2:e3:0f:f0:36:f5:f9:ec:b6:
                    95:d8:ff:9e:1d:e3:25:4d:eb:7c:e5:61:e6:e8:2a:
                    0c:42:54:d4:88:b0:95:2f:c4:10:ca:2e:4a:99:77:
                    c8:1c:48:8c:79:00:e4:e4:39:9a:56:36:97:f6:54:
                    ee:37:d1:ba:9e:75:fa:86:4d:cf:4e:40:30:f1:9b:
                    8e:2d:31:37:47:8f:d9:c3:b8:e2:04:c3:c5:2c:69:
                    d1:8b:15:00:c8:83:9a:97:72:e0:9f:44:a0:01:3e:
                    8d:c5:90:9a:a3:ba:a8:47:09:8f:ea:da:72:14:89:
                    cb:aa:08:47:07:07:a5:34:0a:28:fd:57:9f:88:7b:
                    3b:2a:7d:d6:b1:36:1b:d4:98:d8:c1:7c:cc:5d:60:
                    c4:2a:40:1b:21:51:63:d9:26:27:79:1c:4c:3f:c2:
                    07:f0:8e:85:b1:6f:3f:08:7f:17:78:26:36:31:a7:
                    db:d3:f5:d3:ab:7f:c3:9a:9b:5e:ac:8e:9c:93:ed:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:FD:59:22:16:8E:0A:AC:36:CB:1D:E9:02:94:E1:3C:77:A4:15
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:da:e4:7a:9b:75:88:30:4e:2d:45:d7:82:6b:ff:79:a9:46:
         7d:3f:04:d9:4e:82:b0:a7:6f:4c:e8:5a:ff:ff:7b:f2:df:55:
         d9:98:6c:e0:69:12:1f:e9:cd:7c:ad:2f:6b:e3:6d:16:3c:d6:
         e7:12:2f:79:11:e8:7c:c3:a2:03:e4:0b:2c:99:f9:4e:a6:13:
         f6:45:ce:1c:ed:9f:ee:90:e4:db:b5:d2:a2:d7:4f:90:26:9a:
         9a:35:a9:8c:48:ac:64:18:44:77:bf:33:dd:8a:65:43:9d:5d:
         b4:b7:50:84:f3:e5:8e:14:9b:cc:27:f7:51:0d:80:cc:5a:37:
         ea:92:fd:bf:22:7a:44:ba:05:2e:3d:8d:1d:cf:e5:99:9b:0e:
         e7:b4:d4:c9:3a:1f:72:9e:fb:90:1f:1b:8f:92:ab:ef:b0:0b:
         55:d9:c5:ff:ca:56:d5:07:4c:07:f6:f3:a6:28:1e:2b:98:bf:
         8d:b4:99:df:1c:58:7f:4a:4c:7f:c6:c0:ed:c1:34:5b:2c:b7:
         d0:3f:0b:ac:be:6d:44:dc:42:75:6e:5d:73:f7:20:d1:c1:73:
         6e:b0:33:4e:08:4f:dc:41:96:53:18:6c:e1:b4:f1:b3:66:78:
         af:69:b7:f0:2a:2f:8c:23:a6:13:7e:29:5b:5f:6d:eb:c0:a7:
         2b:c4:6f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:26 2026 by rpki-client