This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
File:                     56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json)
Hash identifier:          9nyP7+JJv9dsQVSDnGOqt4X7mFIy70A6ElsR/8TWEnM=
Subject key identifier:   14:46:3E:38:BE:F6:E8:9E:6F:96:EA:07:BA:58:4A:B2:E1:4E:F4:37
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       276382AF3E0FEB9D635AD06ACB2285C476B68E3B
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
Signing time:             Fri 05 Dec 2025 00:00:12 +0000
ROA not before:           Fri 05 Dec 2025 00:00:12 +0000
ROA not after:            Thu 05 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        191.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 19:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:82:af:3e:0f:eb:9d:63:5a:d0:6a:cb:22:85:c4:76:b6:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Dec  5 00:00:12 2025 GMT
            Not After : Mar  5 23:59:59 2026 GMT
        Subject: serialNumber=fdf353ac308c8702e93f80fa658666ecfa4de399bad667fedc873665a3368b47, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:b9:95:41:32:36:f3:2a:85:fd:6d:c2:84:
                    2d:3d:49:3c:e5:01:00:35:6b:71:c2:f3:a5:33:f8:
                    38:1b:a5:6c:9a:a4:9a:04:39:c6:a6:30:7c:bb:6d:
                    02:49:85:55:86:e7:4c:60:96:f8:6f:9c:c6:43:27:
                    51:41:5a:9e:44:fd:82:02:25:6f:bd:17:5e:ab:73:
                    37:73:73:e5:33:8b:74:6a:2b:12:66:88:11:a3:3f:
                    20:64:4f:6e:dd:7e:8e:c8:e1:ae:70:d8:7a:be:3c:
                    08:de:a2:e1:e7:f0:77:8c:17:76:3b:94:dc:f4:3c:
                    36:30:72:5a:27:01:1c:7a:6a:8f:d6:36:bc:94:34:
                    66:e7:6c:d1:4c:10:c0:55:c6:61:61:47:54:85:9d:
                    88:4e:03:96:dc:0c:70:0f:52:01:51:77:0a:f0:09:
                    8e:b8:45:1a:1a:ec:3f:94:03:e8:a3:64:b3:93:a6:
                    98:aa:a0:53:8a:9c:1d:e9:24:bb:4c:7d:cc:be:ab:
                    49:9a:84:1b:34:bb:67:fe:e9:d7:0f:68:33:7f:a2:
                    02:88:ef:f1:31:7a:92:67:37:28:b8:49:ee:9d:4c:
                    33:79:b8:04:cc:79:5d:ae:56:e9:f7:b6:ec:f3:0a:
                    d7:7f:1f:04:e8:ab:16:56:57:57:b5:2f:7b:11:6c:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:46:3E:38:BE:F6:E8:9E:6F:96:EA:07:BA:58:4A:B2:E1:4E:F4:37
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:66:94:d8:9b:ce:2e:4d:04:2d:f6:3a:da:d7:6a:0b:aa:
         08:9a:e7:16:d8:d0:8c:03:a3:f6:19:9c:a3:1e:7f:cd:5c:b7:
         94:4c:17:0d:75:3c:00:8c:98:07:eb:e5:f7:31:d4:61:4e:9e:
         20:3c:98:4d:8b:a0:9a:68:7c:9a:9c:87:4e:80:42:50:b9:23:
         f3:53:ad:80:42:50:e6:e1:e5:09:53:12:4d:48:95:0c:8d:eb:
         6a:41:ea:53:78:08:6a:90:6f:53:f7:fc:b9:25:38:32:8c:86:
         9a:d3:9e:ce:24:53:59:1b:95:95:e0:9e:40:12:9d:6c:67:44:
         94:21:2f:5d:b0:d6:97:4f:c9:32:96:70:7e:67:eb:69:ed:6b:
         29:97:36:90:8a:27:8e:8a:52:b8:6b:b7:5a:71:c4:91:22:6e:
         ac:94:95:88:57:80:61:c3:7f:24:b8:92:f7:91:ff:b9:fa:81:
         c9:b0:15:b4:76:52:ea:a3:79:08:32:d5:9c:6b:5f:06:00:21:
         0a:f9:61:54:f1:54:9d:83:08:57:76:eb:7e:1f:79:88:8d:bc:
         94:87:fc:bf:c6:b0:59:b1:b3:0e:53:7f:d5:de:c0:10:aa:94:
         34:0f:54:b5:db:85:b3:4f:c6:13:08:7a:d7:df:14:0e:72:c8:
         d7:e7:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:28 2025 by rpki-client