This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3230362e302f32342d3234203d3e203139353832.roa
File:                     3230312e3233342e3230362e302f32342d3234203d3e203139353832.roa (raw, json)
Hash identifier:          3b160ozg3mdbcVKNmwKm3hioSt1rku0PWrV7yEKtl8A=
Subject key identifier:   8D:C3:A3:68:8B:A7:F7:92:8E:36:02:57:1B:62:CD:F6:F0:65:27:11
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       7199F9E370AF93AD8917F142DCAEE82F384A4838
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3230362e302f32342d3234203d3e203139353832.roa
Signing time:             Tue 06 Jan 2026 19:35:18 +0000
ROA not before:           Tue 06 Jan 2026 19:30:18 +0000
ROA not after:            Tue 05 Jan 2027 19:35:18 +0000
asID:                     19582
IP address blocks:        201.234.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:99:f9:e3:70:af:93:ad:89:17:f1:42:dc:ae:e8:2f:38:4a:48:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:18 2026 GMT
            Not After : Jan  5 19:35:18 2027 GMT
        Subject: CN=8DC3A3688BA7F7928E3602571B62CDF6F0652711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:45:8b:02:ac:55:50:99:12:c1:88:14:a5:34:
                    2e:21:d7:69:2a:40:c5:de:5d:7b:e0:9f:21:9e:82:
                    ed:51:a9:65:16:21:f9:04:8a:cc:a8:63:10:52:bf:
                    24:b7:19:64:47:2e:22:bf:10:2d:2c:9d:96:50:67:
                    c9:60:81:e7:56:6c:68:e3:b5:61:3e:96:d8:0a:4e:
                    4c:1a:da:47:5e:15:39:a8:15:95:b6:1c:25:d6:b2:
                    17:17:32:8f:a3:ee:08:6a:5e:5d:9f:be:cb:62:b9:
                    40:ce:d1:93:b2:ef:f9:aa:c8:11:43:60:55:99:55:
                    1e:89:c1:47:ee:5f:fc:77:a4:5f:11:75:62:a4:f1:
                    af:08:88:48:23:20:bf:59:f4:a5:ea:ea:56:0d:2b:
                    40:48:ed:f1:f1:9f:e8:1a:13:ed:1f:47:b4:41:4e:
                    41:7b:a7:53:ce:2d:bb:35:e4:8b:08:86:61:c1:50:
                    54:50:85:12:ad:82:a3:be:d0:79:eb:54:96:f0:70:
                    aa:dd:6a:83:d9:51:3f:fa:c7:a0:f5:61:49:31:93:
                    22:ec:07:4e:24:a2:3f:41:0e:8a:34:89:3e:93:fb:
                    04:bc:c7:39:75:0e:87:6a:b8:82:4c:ea:71:5f:38:
                    aa:8d:21:ea:18:7f:eb:0b:cb:97:47:15:aa:c2:af:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:A3:68:8B:A7:F7:92:8E:36:02:57:1B:62:CD:F6:F0:65:27:11
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3230362e302f32342d3234203d3e203139353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:d2:05:73:4f:7d:53:0b:a3:03:08:fa:c2:87:e1:8e:8f:
         33:eb:d2:0e:13:cb:59:b0:39:1c:d3:9c:ab:66:69:04:2d:4e:
         ed:ac:bb:09:f0:07:5f:d4:11:e1:07:a7:83:6e:db:40:ff:21:
         18:a2:5f:3a:96:3f:cc:10:fc:71:7c:cb:6e:88:eb:97:83:50:
         a2:74:71:6c:02:9d:24:60:b8:20:3b:91:56:20:16:72:40:1f:
         6d:d8:12:ca:2d:17:16:3b:6e:14:9c:b0:a3:75:e4:f3:15:5e:
         64:2e:b7:37:a9:e3:bc:90:83:74:98:41:2a:54:a0:02:0a:6d:
         bc:ca:78:ad:4a:0a:39:73:e1:08:40:04:15:ac:79:a7:9c:d5:
         d3:97:52:2c:b7:0d:6d:ee:22:d9:7e:2b:47:2c:70:36:46:7e:
         82:9e:aa:4b:ec:33:bc:12:8e:47:7b:d6:3e:21:a7:25:84:91:
         6b:83:df:bd:f4:25:30:45:c5:38:af:1d:38:a9:ee:38:0a:82:
         d9:bd:d1:7f:d7:9a:68:9a:21:8e:2c:f2:74:23:98:fd:72:c4:
         78:f4:4c:d5:34:29:99:95:0a:46:81:dd:60:ef:c7:30:48:a6:
         5e:a4:98:7b:ad:42:33:99:17:4f:54:c4:14:fd:dc:ad:99:dd:
         d0:44:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:41:09 2026 by rpki-client