This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
File:                     3230312e3136332e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          ZqQjDyeQfsTok0oDt7i2SVbIpkePTIWGEAntTtHJpRc=
Subject key identifier:   79:7B:56:60:39:EA:74:A2:CE:59:4D:52:D0:BC:E4:5A:6B:B9:DC:DE
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       5EBC51593B68F960BA007BC1A402D2E707A2755A
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:45:02 +0000
ROA not before:           Tue 06 Jan 2026 19:40:02 +0000
ROA not after:            Tue 05 Jan 2027 19:45:02 +0000
asID:                     11172
IP address blocks:        201.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bc:51:59:3b:68:f9:60:ba:00:7b:c1:a4:02:d2:e7:07:a2:75:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:02 2026 GMT
            Not After : Jan  5 19:45:02 2027 GMT
        Subject: CN=797B566039EA74A2CE594D52D0BCE45A6BB9DCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:35:0d:5c:66:cd:1f:b3:10:93:4b:be:69:
                    16:be:cf:53:54:60:19:95:c2:12:e7:be:ce:2f:ea:
                    4e:d9:f0:f3:1d:94:79:48:ba:71:f9:ac:f7:76:27:
                    a3:30:83:ce:fb:f9:18:77:bb:6e:ed:49:ad:95:ce:
                    8f:2a:4c:89:d8:a7:21:7f:eb:54:3b:c5:f8:50:d3:
                    ac:97:a7:7c:12:c3:a5:18:87:2b:24:fd:f0:59:67:
                    c0:45:b9:90:0a:42:c9:15:a5:99:14:f1:a9:44:d0:
                    fd:e8:d3:87:2f:64:d4:49:df:1d:e0:51:ef:48:82:
                    83:b9:2c:38:f2:7c:2f:cf:39:1e:64:91:9b:29:4f:
                    e2:8a:84:f5:ce:68:84:41:2b:e4:17:76:19:80:85:
                    1f:70:c4:e5:85:20:b4:df:ac:ee:19:c8:23:03:36:
                    cb:18:ab:56:81:10:1b:fc:9a:53:2c:b2:14:96:3c:
                    97:2e:32:59:68:94:a9:a9:8e:0d:58:32:f0:e4:83:
                    63:0a:14:ba:69:f1:1a:3d:ab:e0:82:84:6c:1b:d6:
                    b8:83:5c:b8:f3:77:52:61:eb:c7:d5:c0:f6:26:83:
                    dd:30:7c:45:e8:76:8e:d3:ad:c6:5d:34:23:41:45:
                    ef:c9:3c:4e:fa:1d:2c:f4:62:6b:c6:8a:1a:e7:ff:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:56:60:39:EA:74:A2:CE:59:4D:52:D0:BC:E4:5A:6B:B9:DC:DE
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:e5:4b:2b:f0:ce:d3:55:c6:10:ef:2d:fe:71:0d:0c:97:27:
         96:43:d3:0e:8f:44:12:ef:e2:c5:db:34:74:23:11:a2:87:b8:
         32:0c:ab:07:1e:22:fa:6a:ea:da:2a:c1:2e:ad:af:9d:73:0b:
         3d:56:db:91:01:87:8c:6f:88:a0:05:1b:d4:b6:9e:d4:5f:c2:
         e9:e0:bd:98:e1:eb:2a:7f:13:f9:f5:94:7c:9d:cf:85:a6:91:
         23:49:c3:83:3f:db:ac:1b:1f:48:6b:d9:cc:12:da:13:15:33:
         1f:d1:0e:36:1e:59:2e:97:b4:67:60:52:0a:7a:b0:c0:34:e0:
         27:4c:dc:d2:00:2b:5f:d1:da:53:d1:bb:bf:60:71:a1:a1:47:
         78:58:0a:95:07:ab:37:18:7e:6f:56:b5:f7:52:4d:18:b1:fd:
         20:7e:ab:7c:97:0b:df:cb:4d:61:19:c0:f8:36:a1:a7:e9:7a:
         2b:b8:31:d5:5d:25:9a:e9:38:4b:e9:c3:b8:0c:a6:59:d0:ed:
         ca:46:4f:f3:36:cc:9f:0e:98:13:ee:5e:77:1f:46:9c:8c:4c:
         17:61:a9:b1:95:c5:61:46:78:4a:c5:40:8a:25:70:bc:e5:17:
         19:1b:9e:1b:70:5a:08:c6:c1:93:e2:b7:c8:ea:23:ee:bb:af:
         f7:ed:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:31 2026 by rpki-client