This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          ls7fHtD+0t+0oWR83fMEzFlE6o1VrdT2rTWsHJxEURE=
Subject key identifier:   0D:63:B1:65:A7:38:CC:B8:2F:69:4A:9A:25:37:B7:3C:75:6F:21:49
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       16614866A379270D6B4BE7FDA9E817A354449B12
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 06 Jan 2026 19:45:07 +0000
ROA not before:           Tue 06 Jan 2026 19:40:07 +0000
ROA not after:            Tue 05 Jan 2027 19:45:07 +0000
asID:                     265615
IP address blocks:        201.151.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:48:66:a3:79:27:0d:6b:4b:e7:fd:a9:e8:17:a3:54:44:9b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:07 2026 GMT
            Not After : Jan  5 19:45:07 2027 GMT
        Subject: CN=0D63B165A738CCB82F694A9A2537B73C756F2149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:cb:65:15:2b:3b:ef:b1:34:af:52:c2:98:
                    7b:bd:f8:9e:cf:08:4b:74:6a:19:d9:a8:73:c6:ca:
                    40:e1:c2:d5:0e:c8:5a:49:02:55:87:b6:c2:7b:e9:
                    ea:cf:35:ee:b3:91:86:c9:df:38:7c:14:e4:0b:e9:
                    1e:df:10:76:7e:30:5c:06:28:9e:12:98:a6:9b:eb:
                    ac:6e:86:8a:a5:70:c5:d5:29:c3:be:fa:0f:84:b9:
                    3e:39:b8:87:c6:53:1d:88:a2:89:85:40:5a:79:dd:
                    9b:e5:cb:b2:00:a5:b0:4b:f9:b1:b0:8b:d1:e9:ef:
                    15:d7:14:b5:d2:09:df:6b:ce:d5:36:98:1e:95:5d:
                    97:0a:47:75:fc:71:95:ce:11:5d:21:d3:33:f3:94:
                    60:08:53:20:5b:81:9d:b2:78:69:1b:43:19:97:7b:
                    0c:88:f4:e3:16:4d:4b:e8:c7:2e:47:5e:fa:28:6d:
                    fc:ad:90:8a:3e:34:37:71:1d:99:48:d5:f1:b0:c6:
                    75:71:f7:51:7c:31:5b:63:89:44:dd:d9:8c:21:fd:
                    69:fc:50:2a:60:f1:af:37:9e:ec:69:91:82:1a:ba:
                    00:c5:a7:1b:6a:37:55:56:09:7e:25:b6:2a:b3:84:
                    b8:e2:87:62:f5:8a:b3:27:ed:17:d9:46:3e:7d:23:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:B1:65:A7:38:CC:B8:2F:69:4A:9A:25:37:B7:3C:75:6F:21:49
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3135312e3135362e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.151.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:7d:90:05:b7:44:6e:57:ea:a7:8e:c0:f4:13:ba:ec:3e:
         1a:53:ee:d8:12:91:ce:87:fc:b3:9c:42:1a:ad:84:6f:23:59:
         12:8e:c9:6d:ac:31:43:6c:74:8a:0e:17:0f:3f:a9:0d:db:f9:
         b9:ab:aa:f4:e6:7e:eb:fa:9a:a4:ef:22:80:1d:40:9d:31:a2:
         53:7a:90:1d:02:97:d5:a5:fb:f8:3b:e3:c1:4f:4e:40:58:e5:
         7b:0e:29:c5:d9:5a:6c:ec:7b:91:b6:52:67:c3:38:b1:1d:1a:
         f3:df:4c:c9:fc:7a:92:41:cb:9e:e8:6e:17:78:ca:7a:04:33:
         0f:bf:89:da:9b:df:e4:b2:a0:2b:74:67:7d:22:34:28:51:bd:
         d5:da:78:94:08:0a:0e:b4:40:8e:7f:d1:9c:67:4b:5e:9e:3a:
         48:83:77:d1:a6:f0:73:62:20:ba:1c:33:c3:52:3c:ea:99:57:
         16:64:8c:b5:2f:50:76:93:78:cb:31:2f:79:7c:1c:17:1e:6a:
         2e:5c:fb:ea:ed:d5:a0:46:25:6e:a4:87:b3:1c:2d:71:55:4a:
         e8:b6:63:9c:cb:32:6c:84:0b:c7:11:97:bb:3b:64:a9:0c:1f:
         db:7d:96:bf:c0:4f:9a:77:23:ae:fc:c9:8e:a5:ca:09:30:67:
         ea:48:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:20 2026 by rpki-client