This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/3230312e3133312e3231362e302f32322d3232203d3e203238343430.roa
File:                     3230312e3133312e3231362e302f32322d3232203d3e203238343430.roa (raw, json)
Hash identifier:          K3R709VjSJBRVRJySJMs+dwSaU7aV8EmIlbwgsy3wZE=
Subject key identifier:   41:DE:7B:CF:E6:EF:21:AB:76:6A:3C:FD:AC:D8:44:07:09:F0:7E:88
Certificate issuer:       /CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
Certificate serial:       3F4FAFBA9001563A7051D863A895BD14AD883D4F
Authority key identifier: 6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/3230312e3133312e3231362e302f32322d3232203d3e203238343430.roa
Signing time:             Tue 06 Jan 2026 20:51:55 +0000
ROA not before:           Tue 06 Jan 2026 20:46:55 +0000
ROA not after:            Tue 05 Jan 2027 20:51:55 +0000
asID:                     28440
IP address blocks:        201.131.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4f:af:ba:90:01:56:3a:70:51:d8:63:a8:95:bd:14:ad:88:3d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D10FFF67A506ABC4FE62222995FF6E44B2C1D37
        Validity
            Not Before: Jan  6 20:46:55 2026 GMT
            Not After : Jan  5 20:51:55 2027 GMT
        Subject: CN=41DE7BCFE6EF21AB766A3CFDACD8440709F07E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:6f:3f:3b:53:7c:65:58:14:c6:59:0b:8f:
                    34:60:89:ef:3e:7b:5f:19:14:13:d8:30:8c:69:53:
                    5d:78:18:0e:ff:79:dd:42:e5:48:ba:d1:b6:4d:bb:
                    7a:d9:58:85:b0:c5:0e:89:3e:ed:06:cd:d8:3a:b5:
                    54:31:0b:e0:93:85:53:28:71:f2:ac:af:e9:4f:8c:
                    2a:2e:b0:54:10:ce:6f:da:00:90:0f:51:6c:5e:a2:
                    30:a3:e4:d1:cb:34:a1:70:e6:89:e8:98:78:c5:39:
                    18:b6:36:f9:76:ef:38:98:34:fa:f7:75:37:0e:4a:
                    9e:f6:90:5a:80:9a:f4:de:78:f8:87:44:89:7e:95:
                    1e:28:1a:9f:f6:e2:a5:3f:2b:78:ed:0f:54:ec:e9:
                    db:84:10:99:b2:32:dd:02:1d:62:88:af:46:a7:af:
                    52:39:8b:98:80:c7:e2:eb:80:63:a0:33:63:5d:d9:
                    2e:19:c2:e8:ec:5e:de:bd:bf:b2:b0:50:66:93:7d:
                    c6:0b:5e:d2:ad:27:ce:2f:7e:88:5c:00:78:62:4e:
                    14:38:c2:c0:e3:09:3c:79:c3:54:19:c1:9a:ae:56:
                    e7:8f:ab:53:40:8a:ee:b6:d7:d9:5e:7c:e2:07:f8:
                    a9:6c:c3:80:3f:dc:9f:9a:6b:65:a0:a3:7c:bb:93:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DE:7B:CF:E6:EF:21:AB:76:6A:3C:FD:AC:D8:44:07:09:F0:7E:88
            X509v3 Authority Key Identifier:
                keyid:6D:10:FF:F6:7A:50:6A:BC:4F:E6:22:22:99:5F:F6:E4:4B:2C:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D10FFF67A506ABC4FE62222995FF6E44B2C1D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0679B05F7A75FE44A74A00A4CF4DCD1FA7B09946DFC2568AC51D81BE489384B/0/3230312e3133312e3231362e302f32322d3232203d3e203238343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:71:36:e4:aa:37:b4:99:f6:a9:1a:23:c4:d4:68:5e:dd:bb:
         b5:5c:d6:a2:f5:12:62:3b:77:a6:ed:46:63:02:4d:84:8d:a0:
         01:e0:75:7f:71:73:d1:37:34:36:61:6f:31:7d:e3:d3:c2:a2:
         5c:e2:6c:a2:d9:22:bd:2f:4b:11:5e:a0:86:5f:95:c8:a6:20:
         17:d6:45:7f:49:cf:0f:19:d7:ed:61:8b:e3:58:bb:9d:27:53:
         fd:45:57:5a:19:bb:b7:ce:94:06:82:7b:34:7e:47:90:37:e4:
         6e:f8:b0:42:8a:32:9e:d7:cc:6d:88:6f:b6:53:02:86:23:b7:
         25:00:7b:46:ef:a3:0e:e2:8c:f4:ee:9d:00:9a:23:89:2b:81:
         dd:59:ae:9f:b0:a0:aa:40:5f:85:53:ab:ce:c9:36:f8:74:ab:
         ec:7e:0d:ff:fc:8c:39:8a:1f:aa:08:f4:d6:85:0d:c1:20:98:
         dc:42:09:8a:26:a0:44:09:77:3f:f4:50:e0:25:f8:77:7f:c5:
         fd:e9:e3:6e:39:0d:7f:4e:76:f3:5d:e8:54:c6:3a:bd:5d:54:
         1b:10:dc:32:c1:60:1e:33:af:b5:0a:3a:8c:3d:29:05:c8:fa:
         c7:01:73:58:34:23:92:71:1f:b0:65:84:10:c5:12:04:e4:71:
         f8:9e:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:10 2026 by rpki-client