This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3234392e302f32342d3234203d3e203237393533.roa
File:                     3230312e3233342e3234392e302f32342d3234203d3e203237393533.roa (raw, json)
Hash identifier:          DK6gvmzPvlO+SPxH2Of5dWXuzEOSrqinUNVfND2w168=
Subject key identifier:   FF:9A:90:32:0B:6A:D0:F0:49:BD:93:49:24:BF:8C:C2:1B:73:D5:A3
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       74CE82B389F1E3F0689699BFBBD04C682AB6522F
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3234392e302f32342d3234203d3e203237393533.roa
Signing time:             Tue 06 Jan 2026 19:35:15 +0000
ROA not before:           Tue 06 Jan 2026 19:30:15 +0000
ROA not after:            Tue 05 Jan 2027 19:35:15 +0000
asID:                     27953
IP address blocks:        201.234.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ce:82:b3:89:f1:e3:f0:68:96:99:bf:bb:d0:4c:68:2a:b6:52:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:15 2026 GMT
            Not After : Jan  5 19:35:15 2027 GMT
        Subject: CN=FF9A90320B6AD0F049BD934924BF8CC21B73D5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:6b:db:0c:75:93:57:4b:b3:41:e2:90:42:
                    8c:85:83:57:3d:ff:fa:83:e5:8e:dc:1a:69:f2:66:
                    6e:07:f9:81:be:76:d3:23:0c:fc:f1:c1:8a:e1:7b:
                    a2:b7:82:cd:fd:de:05:4c:e8:37:ab:f5:b3:ef:14:
                    a3:93:e0:e2:f7:b0:1b:bd:30:36:6d:33:4e:68:0d:
                    ad:a1:58:94:64:d3:23:f0:f0:38:20:f8:b7:bf:24:
                    1d:97:39:1e:24:76:86:6a:e3:ac:25:22:00:50:62:
                    d6:5c:95:6a:b8:28:a9:d4:71:dc:c2:33:cf:9f:d3:
                    28:04:43:f7:38:bf:d0:6c:a3:78:d3:a3:b5:32:34:
                    d2:44:2d:17:4d:99:56:56:79:75:fd:af:87:ac:94:
                    ae:a3:a9:22:1d:7f:af:15:0b:01:2b:a0:e7:8d:a1:
                    66:ec:cd:ef:7a:13:ff:a5:69:bc:cf:eb:72:91:c9:
                    78:67:b1:3e:6e:78:12:3d:78:cb:05:6c:ff:67:99:
                    01:49:52:be:51:b1:dc:92:22:54:0d:de:47:ec:aa:
                    da:b5:eb:32:a3:b8:1a:c6:db:6c:4a:64:2d:83:bc:
                    9d:48:a8:ac:ce:75:fd:ee:7d:2b:5d:eb:86:48:53:
                    cd:8b:a4:a2:05:8c:d7:35:84:6b:57:ad:45:d8:8a:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:90:32:0B:6A:D0:F0:49:BD:93:49:24:BF:8C:C2:1B:73:D5:A3
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3234392e302f32342d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:fd:6f:c1:7f:8f:f3:9f:98:fc:08:a0:af:83:d7:8c:cc:
         36:ee:c1:f3:eb:f5:2c:15:30:b6:97:8a:b5:79:ca:d1:97:47:
         0e:15:b5:2c:4d:6c:0f:ab:36:29:0f:f1:0d:9a:44:56:b8:4f:
         49:fa:b3:96:b6:d1:c9:21:2e:c0:b7:78:b4:ca:3b:e6:8f:67:
         fe:f9:f3:f1:a2:cd:b0:ab:bd:1d:cc:be:af:7b:e3:db:ed:61:
         9b:05:cf:64:5e:5e:96:87:2c:8f:9e:27:5a:59:b7:6f:15:74:
         e3:87:e2:7c:fd:9d:12:d3:0c:30:1e:c3:fc:9e:c4:91:17:ab:
         f0:1a:4c:59:f0:82:15:ae:b8:b6:e0:ce:a3:32:f6:4a:9d:c5:
         49:37:54:f2:68:e3:f1:f7:48:da:af:5b:f8:9b:42:b0:b8:2c:
         4f:18:b0:13:1f:bf:49:84:bd:48:63:68:ff:56:55:68:94:28:
         21:ef:35:73:ea:d9:d8:6a:b2:f2:99:19:27:b5:55:17:ea:01:
         fc:b9:b6:47:18:5d:f9:b3:a1:fe:74:82:d7:14:0a:fc:3f:60:
         15:0c:b5:62:b9:6d:4a:cb:45:90:74:a2:27:a9:94:fb:05:a1:
         85:2d:07:a0:36:e4:71:c8:25:3a:9e:5f:0f:d1:94:61:25:d8:
         35:94:ee:51
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdM6Cs4nx4/Bolpm/u9BMaCq2Ui8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAxMDYxOTMwMTVaFw0yNzAxMDUxOTM1MTVaMDMxMTAvBgNV
BAMTKEZGOUE5MDMyMEI2QUQwRjA0OUJEOTM0OTI0QkY4Q0MyMUI3M0Q1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTmvbDHWTV0uzQeKQQoyFg1c9
//qD5Y7cGmnyZm4H+YG+dtMjDPzxwYrhe6K3gs393gVM6Der9bPvFKOT4OL3sBu9
MDZtM05oDa2hWJRk0yPw8Dgg+Le/JB2XOR4kdoZq46wlIgBQYtZclWq4KKnUcdzC
M8+f0ygEQ/c4v9Bso3jTo7UyNNJELRdNmVZWeXX9r4eslK6jqSIdf68VCwEroOeN
oWbsze96E/+labzP63KRyXhnsT5ueBI9eMsFbP9nmQFJUr5RsdySIlQN3kfsqtq1
6zKjuBrG22xKZC2DvJ1IqKzOdf3ufStd64ZIU82LpKIFjNc1hGtXrUXYipL9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/5qQMgtq0PBJvZNJJL+Mwhtz1aMwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMyMzAzMTJlMzIzMzM0MmUzMjM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyer5
MA0GCSqGSIb3DQEBCwUAA4IBAQBPjf1vwX+P85+Y/Aigr4PXjMw27sHz6/UsFTC2
l4q1ecrRl0cOFbUsTWwPqzYpD/ENmkRWuE9J+rOWttHJIS7At3i0yjvmj2f++fPx
os2wq70dzL6ve+Pb7WGbBc9kXl6WhyyPnidaWbdvFXTjh+J8/Z0S0wwwHsP8nsSR
F6vwGkxZ8IIVrri24M6jMvZKncVJN1TyaOPx90jar1v4m0KwuCxPGLATH79JhL1I
Y2j/VlVolCgh7zVz6tnYarLymRkntVUX6gH8ubZHGF35s6H+dILXFAr8P2AVDLVi
uW1Ky0WQdKInqZT7BaGFLQegNuRxyCU6nl8P0ZRhJdg1lO5R
-----END CERTIFICATE-----
Generated at Wed Jan 21 05:41:51 2026 by rpki-client