This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa
File:                     3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier:          a1bX+GwyKQKk4RLjrncH/grA4GNvKBI6wYkRr1buGlg=
Subject key identifier:   90:91:D2:D4:EB:38:B7:35:51:44:F4:D0:FE:C2:CC:D8:A0:F3:89:E0
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       75B43EEF700D0BAE8BD0A976E6A311D3C999750B
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:18:02 +0000
ROA not before:           Tue 06 Jan 2026 19:13:02 +0000
ROA not after:            Tue 05 Jan 2027 19:18:02 +0000
asID:                     22368
IP address blocks:        201.221.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:3e:ef:70:0d:0b:ae:8b:d0:a9:76:e6:a3:11:d3:c9:99:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:02 2026 GMT
            Not After : Jan  5 19:18:02 2027 GMT
        Subject: CN=9091D2D4EB38B7355144F4D0FEC2CCD8A0F389E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:33:68:5e:bf:57:58:c4:be:df:a3:45:28:
                    19:ab:bf:78:9e:c5:a7:92:47:e2:5d:af:84:00:b9:
                    8a:7b:c8:b5:87:39:43:8c:b0:9b:08:2b:cb:72:75:
                    0b:51:d9:64:6b:3b:ce:17:53:d5:fb:f4:eb:81:58:
                    93:24:f9:6d:a7:1e:e5:cf:de:5b:19:92:76:12:eb:
                    df:ff:a4:2b:3b:56:e8:10:65:6a:dc:33:e5:b3:d3:
                    ac:b1:aa:3b:b9:94:bc:f2:01:9b:00:7c:1a:c3:7d:
                    11:ca:ae:0f:6a:08:6f:8d:36:f6:5b:86:5b:31:e9:
                    11:27:93:55:06:73:2a:9f:91:84:df:69:2c:b2:e1:
                    0c:fe:dc:35:2e:59:99:fe:68:12:f3:92:0d:bf:65:
                    06:28:5c:22:38:01:54:8a:f8:9f:10:ee:d7:68:01:
                    f8:17:0b:8e:e0:55:3e:78:2d:5c:75:65:9b:a6:bc:
                    c3:35:e5:43:67:fb:a8:6f:a1:e9:3a:16:e2:b9:d4:
                    a5:8f:93:8c:c6:a8:25:ad:6d:a3:30:ae:4a:99:61:
                    a6:af:f1:a2:04:bd:d0:3a:e7:9b:6b:4c:1e:6d:57:
                    32:ed:e7:24:46:90:fd:95:4a:77:16:b3:64:e3:24:
                    d2:7b:1e:b3:52:79:7c:5b:85:c6:89:b2:22:19:cf:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:D2:D4:EB:38:B7:35:51:44:F4:D0:FE:C2:CC:D8:A0:F3:89:E0
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:be:e8:07:9d:89:ed:67:2d:e9:0b:0f:4b:4f:3c:e3:31:
         f5:69:83:14:36:35:84:9f:1a:7b:15:21:5e:ea:b8:c0:39:45:
         e3:e6:59:c6:c5:7a:3f:bf:51:5c:be:8c:3f:ad:52:62:53:53:
         ae:93:d6:fe:06:04:1f:4c:14:86:19:57:80:2b:16:7c:e7:18:
         13:7e:b0:4e:f2:7e:f5:01:15:d1:63:6a:a9:48:69:27:09:1d:
         05:96:0e:2d:bb:07:13:b5:0a:02:87:2d:e2:c2:6e:d8:05:ae:
         c1:11:7a:16:e4:70:fa:95:e6:fd:00:c7:e8:9c:3f:71:a8:c5:
         39:65:c1:71:85:ab:ac:da:aa:e7:9a:aa:77:e3:2d:1e:f5:78:
         13:11:3d:7c:1e:d3:f1:56:42:7d:d0:38:54:97:c7:70:d2:34:
         8c:e6:cd:20:9d:de:cd:65:1b:29:7a:d9:93:f6:76:2e:9a:a5:
         ac:ab:14:5a:1e:f4:98:32:12:88:6b:42:58:d1:47:67:17:3d:
         5b:8c:7d:29:f6:f6:69:d4:c9:d0:9a:19:2b:f5:55:ab:d2:cb:
         e2:32:e3:1d:1c:66:6f:6e:c9:50:df:7b:d7:e5:77:92:19:ce:
         46:a1:b0:ea:5e:30:d0:5c:6f:0b:c7:de:e7:45:5d:6a:ef:d7:
         72:4e:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:30 2026 by rpki-client