This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
File:                     3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          5StSN9WlV9ic3Pr3L0fjCpYGCBWo2bERqLJOCa3kBwg=
Subject key identifier:   51:78:0A:5A:B1:C8:89:03:86:C7:D9:9F:ED:E5:A4:5C:94:B1:9D:33
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       5930441DA23C020EAFF09AD6771D7F7BFD35661B
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa
Signing time:             Tue 06 Jan 2026 19:15:19 +0000
ROA not before:           Tue 06 Jan 2026 19:10:19 +0000
ROA not after:            Tue 05 Jan 2027 19:15:19 +0000
asID:                     269822
IP address blocks:        103.219.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:30:44:1d:a2:3c:02:0e:af:f0:9a:d6:77:1d:7f:7b:fd:35:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Jan  6 19:10:19 2026 GMT
            Not After : Jan  5 19:15:19 2027 GMT
        Subject: CN=51780A5AB1C8890386C7D99FEDE5A45C94B19D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:cb:50:b4:a6:21:cc:1a:78:9b:db:d5:4e:
                    ab:b0:78:b7:1a:c5:48:39:c2:84:30:97:a9:19:ef:
                    e7:01:d1:33:a1:53:d4:91:6f:92:a4:37:78:c1:72:
                    66:56:6b:7a:89:9f:c2:44:1f:ec:5f:ef:56:39:24:
                    d7:35:de:9b:d5:f3:14:bb:a9:45:ff:59:27:83:aa:
                    97:e4:6d:0f:5c:92:e7:78:51:42:05:63:fa:85:af:
                    a4:bf:06:e9:31:f6:6e:b2:3f:a1:1e:08:6b:71:0f:
                    34:3a:72:2e:0a:0f:eb:a5:c1:69:8f:ea:42:9a:cb:
                    d5:c5:b2:89:de:12:07:6e:31:44:ee:53:32:34:c0:
                    7b:8a:69:11:fb:2c:03:5d:36:e5:33:4f:c0:c1:e0:
                    df:f4:6c:47:c7:50:b5:f8:0c:01:c8:70:1c:55:a2:
                    c2:23:bd:7b:5f:24:c6:71:83:1e:7c:2e:05:d1:cd:
                    1d:8f:fe:37:8c:65:f1:f7:a6:eb:54:32:8c:8a:70:
                    99:62:1d:df:94:3a:91:68:3e:57:48:7d:0e:b5:42:
                    ca:e6:19:64:4b:32:b7:2f:2b:ef:85:12:64:02:1c:
                    27:79:50:88:f0:3a:d6:4e:e6:55:a2:64:37:02:22:
                    61:c6:77:5a:40:4c:94:94:d5:8c:86:bb:20:1f:ba:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:0A:5A:B1:C8:89:03:86:C7:D9:9F:ED:E5:A4:5C:94:B1:9D:33
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231392e3233342e302f32332d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:68:56:cf:c2:6c:50:15:c8:35:85:48:d1:86:84:fb:c0:
         08:c3:94:ab:56:94:c0:25:61:bf:f3:ba:77:f5:78:02:52:a2:
         22:50:0b:af:1f:0b:83:5e:68:02:8a:3a:12:f2:f6:6f:20:26:
         75:db:70:cd:8b:db:c8:a7:10:f5:81:1c:fe:ec:b1:ca:ff:ce:
         01:8d:09:ce:b7:06:99:20:30:60:69:8e:67:e8:63:7e:21:35:
         1a:7c:28:98:7e:7a:c0:e4:83:10:a8:1a:39:c0:19:5f:64:bb:
         39:47:5e:eb:f1:1b:f5:5d:96:02:76:e6:25:4f:1f:2f:7a:8e:
         9f:8b:7c:b3:0e:42:3d:01:f5:4d:da:f8:fb:8e:a4:11:53:08:
         e7:37:cb:1f:ea:a0:cc:a1:34:d2:99:cd:8f:ef:4c:d2:e9:99:
         df:87:52:10:22:d2:d1:28:5e:62:e9:9c:ea:33:c0:97:78:ea:
         3f:4d:2c:28:b6:9e:dc:2c:4d:4b:8c:a7:d5:f1:81:01:d6:24:
         81:60:6e:6d:ed:c2:9f:1e:94:37:5b:5d:dd:70:b0:9d:fa:d4:
         93:42:58:55:91:27:49:98:8a:f3:4a:db:cf:5e:4f:c0:79:f0:
         3b:b9:0d:e9:8e:2e:a1:da:35:e8:83:08:4c:b7:bf:33:b5:f7:
         a7:cc:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:42 2026 by rpki-client