This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323032.roa
File:                     3230312e3233372e302e302f31362d3234203d3e20323032.roa (raw, json)
Hash identifier:          Nqr9SKUWwdQJtEUTLcPey87sMgmNM8ZRpK6BxcqF04g=
Subject key identifier:   C0:27:98:5B:77:0A:16:F6:9F:F5:8A:3F:8D:1A:68:D8:E5:C4:2E:0F
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6F6EEE432432CBF91EFF8544D92DF550FE20DEDF
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323032.roa
Signing time:             Tue 06 Jan 2026 19:30:41 +0000
ROA not before:           Tue 06 Jan 2026 19:25:41 +0000
ROA not after:            Tue 05 Jan 2027 19:30:41 +0000
asID:                     202
IP address blocks:        201.237.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6e:ee:43:24:32:cb:f9:1e:ff:85:44:d9:2d:f5:50:fe:20:de:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:41 2026 GMT
            Not After : Jan  5 19:30:41 2027 GMT
        Subject: CN=C027985B770A16F69FF58A3F8D1A68D8E5C42E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:dc:24:77:6c:52:6a:80:21:46:92:d0:1b:
                    7a:d6:8a:c7:52:6d:65:17:c8:5d:fd:96:4e:87:c8:
                    62:9b:72:7e:f9:9f:77:dd:6e:9e:1d:20:82:bd:f9:
                    df:6f:76:7c:65:91:ba:c8:0c:ed:59:3d:0b:5e:80:
                    b7:d1:13:05:5d:27:09:0a:b8:46:34:6f:ef:9d:e2:
                    08:39:5a:fc:b6:6e:59:82:be:f4:d8:19:d9:07:86:
                    8e:4c:2b:72:e4:27:17:05:92:d8:97:d0:af:d8:52:
                    7d:35:3e:ea:13:e4:6e:34:76:fc:f2:2b:e0:53:82:
                    7b:41:a7:f2:49:59:c6:f1:64:a0:87:d4:e7:6a:de:
                    3c:f2:f9:72:61:46:f9:9e:7e:71:97:d6:d1:fe:04:
                    b5:6f:07:62:ac:15:c2:76:bf:3a:90:65:57:03:23:
                    4f:69:b6:6c:74:2f:e2:c3:e0:e8:6c:63:0d:77:71:
                    fd:1d:0b:74:1d:4c:41:24:c6:cb:16:1c:96:16:72:
                    c2:2e:66:54:d5:e9:29:07:12:5e:a7:3e:77:8c:0b:
                    b5:9a:2f:eb:ae:e6:a6:1a:a5:2d:7b:b2:77:a7:cc:
                    fb:7f:00:93:fb:22:03:14:c9:25:d6:b2:ae:00:d6:
                    94:ed:d3:ad:b1:9f:0e:f3:4f:94:dc:2d:47:32:9a:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:98:5B:77:0A:16:F6:9F:F5:8A:3F:8D:1A:68:D8:E5:C4:2E:0F
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:9e:86:3e:11:cc:f9:6e:76:26:5a:44:94:84:f8:43:6c:1c:
         41:2b:3f:cb:2a:b2:36:aa:dd:73:24:e5:b1:c8:71:1b:41:e6:
         64:b9:1c:0a:61:3f:e5:ff:ed:75:1d:be:51:2c:85:ed:c5:c5:
         b7:0c:fd:cd:50:b3:07:e5:35:83:56:54:b2:d7:e8:79:d6:ab:
         69:b3:07:93:55:05:5e:83:31:72:8d:d6:c2:e7:a0:03:df:fd:
         e4:9d:9e:44:e0:a7:9f:53:dc:2b:af:a2:11:3d:9d:47:33:e1:
         b3:56:6b:c1:87:c1:e1:cd:3e:de:83:2e:4b:35:e7:63:7e:5b:
         58:3f:45:c6:d5:a3:9d:c6:02:68:96:dc:1b:3c:38:10:25:2c:
         0a:8f:e9:0d:05:13:ed:d9:1b:03:14:5e:f3:0d:7d:77:f2:a9:
         5b:dd:e3:d6:ec:19:e6:f0:d2:86:65:8b:e8:00:52:74:46:75:
         30:b3:7d:61:11:d9:dd:88:05:86:3b:c9:b7:31:d0:a1:a7:54:
         45:9a:88:53:e9:cd:39:c2:1d:09:22:93:1b:ea:da:7e:d9:b9:
         26:33:32:b0:e5:6e:e7:80:ce:a6:e9:0c:aa:01:08:b4:4f:8f:
         47:4f:04:e8:b7:0b:bf:f2:73:d4:e5:42:0a:26:f3:dd:f3:cf:
         be:3b:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 14:38:51 2026 by rpki-client