This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa
File:                     3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa (raw, json)
Hash identifier:          qeEzBKxUzD8bEiARksMpg48/OB2NoQZNNjVOQRM/Peo=
Subject key identifier:   2B:00:B0:00:AB:15:29:CE:20:31:C7:DB:2D:FE:4B:14:E0:2C:54:DE
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       457C4CC7AC569D09135B9F88EAD3B1998CF26015
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa
Signing time:             Tue 06 Jan 2026 19:35:02 +0000
ROA not before:           Tue 06 Jan 2026 19:30:02 +0000
ROA not after:            Tue 05 Jan 2027 19:35:02 +0000
asID:                     27953
IP address blocks:        201.234.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7c:4c:c7:ac:56:9d:09:13:5b:9f:88:ea:d3:b1:99:8c:f2:60:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:02 2026 GMT
            Not After : Jan  5 19:35:02 2027 GMT
        Subject: CN=2B00B000AB1529CE2031C7DB2DFE4B14E02C54DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:8f:8b:3a:f2:bd:ce:7a:3c:e5:02:5e:97:
                    db:0a:43:6d:9c:57:45:bc:fa:f3:1a:c0:08:e4:8c:
                    c3:06:fa:b8:2a:75:80:0f:9c:b2:82:dd:f1:df:43:
                    64:62:3d:8a:de:11:e8:ad:cc:bb:ac:a2:6c:87:53:
                    ea:0c:38:e9:2f:e7:98:a3:9b:00:13:03:03:32:74:
                    d6:55:8e:36:e0:f6:26:fd:96:7e:98:cc:18:76:f0:
                    96:03:5d:be:a9:dd:4e:2d:b0:59:51:1a:1d:21:6a:
                    5c:3b:35:e3:f1:d9:46:a8:05:13:8c:54:96:31:aa:
                    f2:f7:cb:40:cd:a7:0e:17:8a:9c:49:d7:c1:ef:f0:
                    34:b1:da:c4:b3:57:bc:7b:6b:48:68:f8:33:39:0a:
                    b4:ba:8b:fb:c6:79:11:a1:eb:71:80:a3:23:67:54:
                    c9:05:15:4d:b5:bc:71:f5:6c:c8:28:63:b3:c7:89:
                    51:d1:95:60:c8:41:48:96:d6:8f:be:4c:5e:2f:87:
                    0a:59:5e:67:5a:79:ed:9d:15:d0:3e:0c:e9:4d:ed:
                    c9:9a:d8:c2:b7:3e:2b:b7:b5:eb:cf:bc:fc:b8:7c:
                    f8:19:f7:24:95:a4:89:ce:28:f0:d6:d7:bf:21:41:
                    71:ab:89:15:40:00:bc:a7:48:f7:32:8c:f6:17:7c:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:00:B0:00:AB:15:29:CE:20:31:C7:DB:2D:FE:4B:14:E0:2C:54:DE
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3235312e302f32342d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:6c:57:83:da:64:de:61:2f:a9:45:37:b2:9b:48:85:47:
         dd:4a:75:78:b2:09:1a:5f:8e:44:8f:7f:c7:3c:a4:55:13:47:
         7b:25:c7:46:1c:56:0c:0d:c9:ed:47:47:36:2a:7c:d6:96:cd:
         8f:f5:6c:aa:6b:14:3b:39:c2:01:49:23:9e:76:41:68:a3:52:
         ee:f1:bb:f4:a0:97:df:1d:a2:6b:87:0a:32:d3:07:7a:36:65:
         e5:e9:58:25:ab:13:6b:db:44:33:69:40:e5:1d:0a:bc:11:08:
         da:b0:7b:72:9e:15:92:9c:2a:3d:aa:c5:f9:50:c6:26:19:bb:
         d4:34:61:54:d6:1e:b2:70:25:ab:7f:c3:cf:f8:77:4a:5b:70:
         d6:3d:b2:f4:89:4d:0e:1c:9c:2b:c6:2b:04:07:0c:cb:6b:94:
         7a:c7:c5:a8:60:aa:6b:c8:76:1f:43:a3:88:b7:30:d6:ce:ad:
         a0:b3:ca:21:86:9d:f1:28:db:2d:07:88:ce:64:73:92:44:27:
         46:b0:41:23:ad:ed:9b:b2:a5:43:f0:ca:b1:89:11:6e:14:df:
         bf:c6:e7:de:38:d6:42:ab:90:9f:67:2c:e6:7f:e5:e1:81:11:
         15:24:35:f9:15:45:21:34:fe:2f:c0:f2:46:30:89:2b:e6:b8:
         d9:00:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:40:53 2026 by rpki-client