This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
File:                     3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          sUuMRpIvTUDSteZZfvEc+QReXvQ1hviZ0mvoozoPNVg=
Subject key identifier:   25:D9:FE:10:BC:72:31:13:16:BA:2C:FB:88:CA:84:54:78:EE:40:62
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       2BD320A05C36B796F91FB9A4541BE928238EAD0E
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 06 Jan 2026 19:45:06 +0000
ROA not before:           Tue 06 Jan 2026 19:40:06 +0000
ROA not after:            Tue 05 Jan 2027 19:45:06 +0000
asID:                     265615
IP address blocks:        201.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d3:20:a0:5c:36:b7:96:f9:1f:b9:a4:54:1b:e9:28:23:8e:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:06 2026 GMT
            Not After : Jan  5 19:45:06 2027 GMT
        Subject: CN=25D9FE10BC72311316BA2CFB88CA845478EE4062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:1d:87:3d:76:0a:eb:7e:56:95:f6:b8:e5:
                    4c:ea:3c:62:83:fd:c6:37:22:78:7c:19:4d:09:25:
                    73:72:83:88:4a:29:62:e6:c6:c0:72:de:c2:a5:cd:
                    4d:ee:bd:98:14:f3:be:6d:17:c8:e3:6e:e8:ad:57:
                    e1:e9:4a:49:54:43:dc:b2:46:63:65:51:58:f7:07:
                    e1:78:fd:22:af:78:a5:4c:9f:8c:7f:6f:8f:73:6c:
                    65:1d:7d:40:cc:73:a3:ed:08:10:95:0d:a5:1c:c9:
                    02:65:96:9e:f5:8e:10:db:9a:39:f2:1b:46:68:19:
                    83:f7:c3:35:38:94:62:e9:27:70:32:c5:e9:5c:fd:
                    f3:83:68:77:10:c6:75:2b:e8:58:d7:b9:c8:62:9d:
                    15:e8:06:f0:fe:59:00:13:14:b7:b3:16:1d:79:9e:
                    b9:0e:06:9d:07:fa:93:36:24:53:20:66:f9:39:56:
                    75:ce:ab:f4:69:04:40:27:11:7e:df:63:fa:68:dd:
                    f1:7c:2b:7d:59:91:75:aa:76:31:87:55:60:85:32:
                    db:29:07:b8:42:78:41:ad:fa:64:c0:7e:2e:a6:30:
                    92:f6:e8:8c:4c:fe:8f:ec:53:3b:2c:a6:d3:de:e9:
                    f0:f7:f5:11:d3:8d:f1:ac:20:58:7c:43:6c:1d:2e:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D9:FE:10:BC:72:31:13:16:BA:2C:FB:88:CA:84:54:78:EE:40:62
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230312e3136332e39362e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.163.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:21:23:d7:63:09:ac:75:13:46:1d:5d:0b:5b:0e:d7:a7:46:
         4b:fb:b5:54:d7:d7:8d:74:1a:95:a8:6b:13:fa:e3:eb:b2:13:
         ce:61:c9:f5:d2:94:53:21:cb:83:ca:39:24:3e:e7:67:3b:5c:
         c3:c0:00:5b:6f:4f:08:40:f6:72:83:f9:ef:8c:90:b7:b5:ee:
         e5:8e:b9:ad:98:ae:a2:7a:02:21:14:06:20:a5:d6:1d:83:83:
         86:e7:8f:61:94:93:05:49:ff:e9:ac:50:67:cd:9d:94:a6:82:
         40:cb:18:cd:da:ef:16:1d:70:4f:70:34:3c:5c:1b:25:be:45:
         54:2e:cc:b6:e2:69:d7:e7:c4:46:3e:a0:82:2c:c8:1d:1e:21:
         b1:d0:64:42:29:d1:57:df:bd:31:fb:0f:a0:f4:ea:2f:a0:4d:
         2f:78:c7:7a:4c:61:cd:d9:eb:f8:ad:78:4b:2f:7e:4d:8d:16:
         24:a1:0a:96:c4:63:74:49:77:e5:d5:03:23:02:21:47:8d:d3:
         12:03:ae:eb:42:d4:68:68:28:a8:ef:9d:c2:35:f6:0c:e5:79:
         0c:19:07:a0:60:a9:d1:fd:bd:e1:7b:25:4b:f8:be:9e:dc:4c:
         65:37:60:8c:11:5a:c6:8e:12:36:31:de:cd:f7:2e:1e:7b:b4:
         ae:d3:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:31 2026 by rpki-client