This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa
File:                     3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          1h+98C6ejUuVtTl68Wm09T/z6R/bfa1gVRN7pY8FSD8=
Subject key identifier:   03:9B:26:0B:4F:62:F0:C4:85:50:B2:D4:91:1B:1D:98:82:87:2F:EE
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       557DA637A5EDB375D90032F09FE950170DD7D0B2
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:18:04 +0000
ROA not before:           Tue 06 Jan 2026 19:13:04 +0000
ROA not after:            Tue 05 Jan 2027 19:18:04 +0000
asID:                     22368
IP address blocks:        201.221.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7d:a6:37:a5:ed:b3:75:d9:00:32:f0:9f:e9:50:17:0d:d7:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:04 2026 GMT
            Not After : Jan  5 19:18:04 2027 GMT
        Subject: CN=039B260B4F62F0C48550B2D4911B1D9882872FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:aa:fb:86:fb:f0:ee:5d:b7:a5:cb:fc:f3:
                    00:59:05:e7:aa:46:1c:fc:9f:1b:b8:7f:78:7b:14:
                    98:60:16:14:c8:61:0c:2a:36:42:37:b5:66:66:87:
                    6b:b1:a2:de:32:36:2f:41:de:30:85:1a:f4:8c:36:
                    fe:04:9e:ee:0d:a9:76:6f:ce:72:3e:64:d1:2f:8f:
                    c3:db:89:0b:fa:aa:6d:76:9d:35:0b:03:a6:3d:17:
                    a9:ea:53:50:34:97:bb:8d:e3:0a:a1:10:b2:b7:46:
                    13:bf:d0:7d:55:f3:03:3a:e3:1f:cd:50:41:e6:fc:
                    29:ff:b5:e8:13:4d:a6:87:e4:56:28:89:a1:75:64:
                    f3:d4:ee:20:f0:ca:35:68:96:e2:4f:0d:f8:f6:80:
                    91:85:e0:1b:5b:56:98:fe:2c:9c:a5:74:f7:16:86:
                    02:54:53:55:e6:a5:52:40:2f:97:40:3e:60:93:e8:
                    3c:c5:14:c9:32:d2:67:84:6e:ee:96:14:ac:ec:43:
                    74:03:a9:3e:de:33:e0:5e:c9:93:a6:67:0b:55:84:
                    6a:2a:a2:dd:29:64:8d:d5:4f:8b:f7:cb:68:6f:45:
                    e6:06:6d:79:fd:3b:a4:58:d0:ce:eb:bd:28:62:bc:
                    90:96:11:d9:de:c3:5d:7a:aa:5d:33:86:89:dd:ff:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:26:0B:4F:62:F0:C4:85:50:B2:D4:91:1B:1D:98:82:87:2F:EE
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3132382e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:91:59:e4:eb:d0:a7:ba:c3:64:63:fc:9a:31:f1:0b:f8:f5:
         54:38:59:f8:69:7e:83:f8:1b:8c:67:73:d2:dd:a3:5c:ea:cf:
         ae:3b:d7:ae:aa:56:67:49:ec:91:31:91:41:bc:df:20:c3:54:
         a2:38:f6:bb:60:f2:f4:e2:aa:97:4c:4d:48:66:1e:5a:8f:37:
         49:da:42:6b:1c:19:a9:bc:01:15:8c:e2:37:4a:24:65:3f:e9:
         04:3e:84:33:eb:c9:5c:0a:c8:0a:a0:de:55:87:34:b9:af:13:
         2e:0a:02:6a:a7:bd:83:3a:af:93:15:19:e9:7f:2c:69:4f:e2:
         2c:87:98:bc:19:87:d4:76:be:0e:40:1e:55:e4:1b:c2:2c:69:
         e3:5e:08:18:dc:23:b2:69:1e:9c:0a:8b:0a:99:53:f8:1c:7c:
         69:61:ae:21:db:80:37:fb:22:b7:ac:22:39:ee:c0:09:15:c4:
         f5:7a:4d:d7:7f:bc:9a:bc:62:96:91:d5:af:7e:8e:d9:e0:23:
         30:fa:07:a5:78:b8:af:d3:5d:bf:ff:6f:2e:5e:a2:17:73:f4:
         43:08:b9:7e:fe:1a:bc:95:50:7d:6b:8d:69:17:63:5d:07:be:
         a8:6a:86:0d:e5:a3:2d:8d:95:52:da:cd:b2:e3:14:c0:be:07:
         97:d5:df:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:36 2026 by rpki-client