This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa
File:                     3230312e3139312e302e302f31362d3234203d3e20323032.roa (raw, json)
Hash identifier:          5sDerDP83NyS80TCVEaoemrfXJgbxzZUxHHMqC7bnzk=
Subject key identifier:   74:85:BB:92:78:C0:85:E7:AC:33:44:C6:F4:AC:E0:0D:C6:AA:4F:54
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       665CFAFDC06FEAA2876AA8BC2BCB2449DCFDB33E
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa
Signing time:             Tue 06 Jan 2026 19:30:43 +0000
ROA not before:           Tue 06 Jan 2026 19:25:43 +0000
ROA not after:            Tue 05 Jan 2027 19:30:43 +0000
asID:                     202
IP address blocks:        201.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5c:fa:fd:c0:6f:ea:a2:87:6a:a8:bc:2b:cb:24:49:dc:fd:b3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:43 2026 GMT
            Not After : Jan  5 19:30:43 2027 GMT
        Subject: CN=7485BB9278C085E7AC3344C6F4ACE00DC6AA4F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:3a:ac:24:3d:fc:d4:44:1a:90:b7:26:7e:
                    dc:ae:a4:66:90:9f:7b:62:c1:1e:84:eb:45:2e:48:
                    c1:5c:05:25:ed:a5:e2:72:a2:aa:b3:dc:b7:ba:4d:
                    9f:a9:61:2b:e0:68:1a:2f:96:fb:df:0b:33:bc:95:
                    e4:64:c3:cd:41:fe:df:b7:28:a0:a6:6d:81:3e:24:
                    6e:95:9a:a4:d1:44:8f:f0:66:2d:4a:00:00:4d:68:
                    ee:31:fb:f9:f8:42:2e:b9:55:8f:40:d4:ad:f2:ae:
                    14:b1:7e:7c:64:02:a2:25:9a:26:e4:0a:6e:79:e1:
                    3f:23:43:79:ac:ab:ab:f2:ae:41:3e:a6:7e:bd:9e:
                    03:fa:e6:7e:b1:ac:87:f2:2a:5c:4e:69:8b:c3:10:
                    2b:3a:74:55:dc:1e:fb:a6:2d:81:1c:8e:eb:de:67:
                    b9:70:0d:80:63:2d:4d:9a:a4:c4:b8:ad:f2:30:0c:
                    73:55:2e:58:8f:34:8e:92:6a:5c:cb:39:49:01:e7:
                    83:4c:d4:45:08:63:7b:72:ef:18:4e:92:ec:ad:98:
                    b6:eb:5b:66:24:1f:ce:7b:17:9a:70:57:be:da:06:
                    de:cc:29:a7:cb:6e:59:98:40:57:eb:a5:4d:9e:38:
                    20:76:d5:eb:a1:5c:25:ac:b9:32:80:c6:ed:ca:8f:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:85:BB:92:78:C0:85:E7:AC:33:44:C6:F4:AC:E0:0D:C6:AA:4F:54
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3139312e302e302f31362d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:8c:9b:79:42:8c:5a:69:58:58:a3:64:41:39:d2:85:bc:
         57:4a:b7:2d:8f:9e:f9:67:24:9b:49:a5:60:4e:3a:68:b7:6e:
         d6:12:e9:6f:61:d3:08:09:84:c1:96:9f:7e:82:00:fa:6f:91:
         a6:e0:ea:74:e8:c9:9e:d2:71:f9:ae:65:87:37:09:b5:d9:9e:
         23:8d:2c:8c:8d:50:5a:13:14:17:03:73:4d:fa:4b:d6:79:02:
         65:0c:9b:5a:4c:33:68:38:3d:88:21:40:ec:04:47:6d:74:9b:
         02:fc:95:6f:0d:fa:4a:25:00:95:fb:31:0a:17:81:4c:c0:43:
         66:b7:9f:66:05:9a:0d:3b:ee:10:94:19:a0:e4:bd:ea:c8:7f:
         6b:78:d1:4a:54:a0:3b:67:9f:76:50:d0:2c:50:52:2f:c5:58:
         2f:f1:27:cf:91:09:62:8f:94:e6:da:ed:b2:4e:e0:0c:15:43:
         c3:54:15:cd:19:94:8c:b4:08:29:33:51:30:1c:01:40:37:e1:
         15:19:e6:6c:17:3b:44:e1:38:68:fc:25:3c:0b:6e:0e:16:b8:
         8e:83:67:06:50:52:f4:4e:07:c7:fe:8a:09:28:e6:76:58:e6:
         47:5c:2c:ad:db:96:e8:12:02:39:6b:ea:7e:e6:01:9a:be:67:
         4f:43:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:37:39 2026 by rpki-client