This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132382e302f32342d3234203d3e20323731393539.roa
File:                     3230342e3132362e3132382e302f32342d3234203d3e20323731393539.roa (raw, json)
Hash identifier:          gqIFjbt7VKDA9Qukl0pFVI9WvUCeiuigSiJZ2GplqoA=
Subject key identifier:   CD:79:CF:74:BB:9C:F1:6B:0F:C5:F2:6E:98:AC:60:DC:80:BA:62:23
Certificate issuer:       /CN=BE3603614732C3CEFB73F594A7007FB8D849F555
Certificate serial:       118CBD82FCE97CD3319E963AA64B040200DED462
Authority key identifier: BE:36:03:61:47:32:C3:CE:FB:73:F5:94:A7:00:7F:B8:D8:49:F5:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE3603614732C3CEFB73F594A7007FB8D849F555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132382e302f32342d3234203d3e20323731393539.roa
Signing time:             Tue 06 Jan 2026 19:05:30 +0000
ROA not before:           Tue 06 Jan 2026 19:00:30 +0000
ROA not after:            Tue 05 Jan 2027 19:05:30 +0000
asID:                     271959
IP address blocks:        204.126.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/BE3603614732C3CEFB73F594A7007FB8D849F555.crl
                          rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/BE3603614732C3CEFB73F594A7007FB8D849F555.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE3603614732C3CEFB73F594A7007FB8D849F555.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8c:bd:82:fc:e9:7c:d3:31:9e:96:3a:a6:4b:04:02:00:de:d4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3603614732C3CEFB73F594A7007FB8D849F555
        Validity
            Not Before: Jan  6 19:00:30 2026 GMT
            Not After : Jan  5 19:05:30 2027 GMT
        Subject: CN=CD79CF74BB9CF16B0FC5F26E98AC60DC80BA6223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:d0:76:77:c2:63:a1:e1:f4:6a:4a:22:27:
                    79:6f:d7:f0:cb:ad:d4:10:29:0c:38:6e:19:89:ae:
                    7d:a2:9f:54:20:f2:f8:63:fc:97:c1:a9:10:96:cf:
                    b4:cb:10:3b:78:91:8f:f4:f3:10:aa:d4:d0:e7:3f:
                    fa:39:cb:16:d7:f0:6e:a0:77:12:32:81:23:b9:f5:
                    f2:cd:7a:41:15:bc:f2:85:15:7b:f9:d0:dd:c7:5f:
                    ea:33:54:74:c6:11:f6:2e:02:4d:f2:1f:0c:d9:66:
                    b3:69:02:47:2b:1c:6d:4a:44:c1:3c:c7:47:f4:52:
                    f9:43:92:41:45:a4:0d:8b:8f:5b:56:4c:f1:56:ee:
                    a2:b0:d3:36:dd:36:97:50:75:0f:d7:37:42:60:75:
                    63:85:d3:31:74:fb:f6:72:0a:ad:db:89:a2:2b:8c:
                    9d:77:25:97:8d:22:db:d1:55:f9:cb:b2:f2:bf:d5:
                    1b:a0:d5:be:b1:08:2c:98:d9:48:e1:78:30:8a:c4:
                    93:2b:f1:2e:8c:60:9b:ac:07:af:7b:49:a8:e2:e1:
                    a8:f1:4b:f7:ad:ff:ac:da:6a:cd:d0:07:8d:60:8b:
                    20:3b:14:d9:c0:41:af:dd:92:cb:86:d3:91:4c:6f:
                    1d:90:e5:f6:eb:54:e4:2f:44:04:a9:da:e9:18:5c:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:CF:74:BB:9C:F1:6B:0F:C5:F2:6E:98:AC:60:DC:80:BA:62:23
            X509v3 Authority Key Identifier:
                keyid:BE:36:03:61:47:32:C3:CE:FB:73:F5:94:A7:00:7F:B8:D8:49:F5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/BE3603614732C3CEFB73F594A7007FB8D849F555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE3603614732C3CEFB73F594A7007FB8D849F555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/057EAF32395A5E9D6CFECAE3D605F76020D90CA7B5F6D2CF75C7D5DF639D2EE3/0/3230342e3132362e3132382e302f32342d3234203d3e20323731393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:c4:c3:9a:94:93:7a:12:7e:59:1d:ab:fb:36:d3:bc:a6:
         2f:82:df:f8:35:fb:cd:c5:fe:ce:f0:b9:65:44:b6:96:b3:ff:
         0e:c0:95:3a:05:13:4c:8f:98:ec:9a:c5:e6:a0:40:53:d9:5f:
         a8:e4:b7:0f:a9:51:6d:13:28:26:12:b9:fd:cf:e2:ee:8a:d5:
         9f:d4:fd:83:f2:96:6c:5d:6c:ba:36:07:27:c3:a9:d3:d7:90:
         33:a6:2d:40:27:a9:94:55:51:ab:5d:ae:68:85:cb:76:db:6c:
         f9:6c:f3:5c:b4:a0:33:2f:a7:f8:97:95:32:a8:f2:63:46:b6:
         60:93:37:ca:1e:dd:49:49:ba:d4:b3:e2:88:50:bd:db:31:7f:
         ac:cf:d4:c0:a8:d7:70:d4:e8:99:0a:60:71:84:86:86:bf:25:
         e3:9d:1c:97:67:f7:46:aa:38:58:91:0f:6a:ad:f6:69:d6:cc:
         2d:e0:ee:67:3f:64:8c:45:b8:9b:9e:40:da:b8:3e:d9:0c:6a:
         36:dc:cf:89:c0:5e:bd:22:56:b1:6c:81:1c:f1:93:8d:0a:1c:
         a0:09:8c:af:2e:43:9a:39:e0:bf:b1:6a:37:80:18:d5:06:5a:
         41:b8:2f:52:e5:cc:cc:d8:08:cf:4a:ee:25:ae:6e:c4:07:09:
         c8:b7:b1:a9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEYy9gvzpfNMxnpY6pksEAgDe1GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzNjAzNjE0NzMyQzNDRUZCNzNGNTk0QTcwMDdGQjhE
ODQ5RjU1NTAeFw0yNjAxMDYxOTAwMzBaFw0yNzAxMDUxOTA1MzBaMDMxMTAvBgNV
BAMTKENENzlDRjc0QkI5Q0YxNkIwRkM1RjI2RTk4QUM2MERDODBCQTYyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2S9B2d8JjoeH0akoiJ3lv1/DL
rdQQKQw4bhmJrn2in1Qg8vhj/JfBqRCWz7TLEDt4kY/08xCq1NDnP/o5yxbX8G6g
dxIygSO59fLNekEVvPKFFXv50N3HX+ozVHTGEfYuAk3yHwzZZrNpAkcrHG1KRME8
x0f0UvlDkkFFpA2Lj1tWTPFW7qKw0zbdNpdQdQ/XN0JgdWOF0zF0+/ZyCq3biaIr
jJ13JZeNItvRVfnLsvK/1Rug1b6xCCyY2UjheDCKxJMr8S6MYJusB697Saji4ajx
S/et/6zaas3QB41giyA7FNnAQa/dksuG05FMbx2Q5fbrVOQvRASp2ukYXGAtAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUzXnPdLuc8WsPxfJumKxg3IC6YiMwHwYDVR0j
BBgwFoAUvjYDYUcyw877c/WUpwB/uNhJ9VUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTdFQUYzMjM5NUE1RTlENkNGRUNBRTNENjA1Rjc2MDIw
RDkwQ0E3QjVGNkQyQ0Y3NUM3RDVERjYzOUQyRUUzLzAvQkUzNjAzNjE0NzMyQzND
RUZCNzNGNTk0QTcwMDdGQjhEODQ5RjU1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTM2MDM2MTQ3MzJDM0NFRkI3
M0Y1OTRBNzAwN0ZCOEQ4NDlGNTU1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU3RUFGMzIzOTVBNUU5RDZDRkVDQUUzRDYwNUY3NjAyMEQ5MENBN0I1
RjZEMkNGNzVDN0Q1REY2MzlEMkVFMy8wLzMyMzAzNDJlMzEzMjM2MmUzMTMyMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzOTM1Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADM
foAwDQYJKoZIhvcNAQELBQADggEBAIh8xMOalJN6En5ZHav7NtO8pi+C3/g1+83F
/s7wuWVEtpaz/w7AlToFE0yPmOyaxeagQFPZX6jktw+pUW0TKCYSuf3P4u6K1Z/U
/YPylmxdbLo2ByfDqdPXkDOmLUAnqZRVUatdrmiFy3bbbPls81y0oDMvp/iXlTKo
8mNGtmCTN8oe3UlJutSz4ohQvdsxf6zP1MCo13DU6JkKYHGEhoa/JeOdHJdn90aq
OFiRD2qt9mnWzC3g7mc/ZIxFuJueQNq4PtkMajbcz4nAXr0iVrFsgRzxk40KHKAJ
jK8uQ5o54L+xajeAGNUGWkG4L1LlzMzYCM9K7iWubsQHCci3sak=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:35 2026 by rpki-client