This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa
File:                     3230312e3233372e302e302f31362d3234203d3e20323033.roa (raw, json)
Hash identifier:          89ZN3c31hHzL+GSuEEQ3zgqMPa0ExY+lak1ZsDzMpq4=
Subject key identifier:   D9:2A:07:C9:E9:4D:E8:F3:89:42:27:7A:37:2E:2E:64:6D:53:D9:4E
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       018B6FE164A418D9B9F0F5C3298EFBA9CD5A6274
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa
Signing time:             Tue 06 Jan 2026 19:30:38 +0000
ROA not before:           Tue 06 Jan 2026 19:25:38 +0000
ROA not after:            Tue 05 Jan 2027 19:30:38 +0000
asID:                     203
IP address blocks:        201.237.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6f:e1:64:a4:18:d9:b9:f0:f5:c3:29:8e:fb:a9:cd:5a:62:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:38 2026 GMT
            Not After : Jan  5 19:30:38 2027 GMT
        Subject: CN=D92A07C9E94DE8F38942277A372E2E646D53D94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:25:f4:09:d8:e0:e1:1f:68:7e:34:40:3c:
                    af:a4:6a:f9:14:00:cc:c1:a2:fe:ae:c4:a1:c0:4b:
                    33:d5:e0:db:8f:a8:5e:72:8b:e1:17:50:9b:8e:a1:
                    cd:ae:cf:dd:98:68:92:24:4f:ab:96:6a:e4:0e:a4:
                    99:d8:69:c8:5c:89:e6:b1:13:07:ea:a5:be:f0:8b:
                    6e:29:78:9d:df:23:e8:25:ee:5d:66:52:fc:6c:c4:
                    59:8a:20:f3:6e:11:2a:9d:13:8e:1c:d9:73:0e:aa:
                    aa:f3:8e:4f:20:43:71:63:29:f3:8a:cc:d8:f0:ff:
                    30:62:06:22:06:ef:ad:46:ff:d7:c5:3e:6a:a5:60:
                    34:13:b5:29:38:0c:73:9e:2a:93:cb:20:ca:58:9a:
                    69:07:96:a6:7a:2b:6a:d2:a4:dc:6a:e3:4f:91:2a:
                    2c:cc:00:30:52:b6:6b:d2:c3:47:11:9a:01:0c:3c:
                    6e:88:e2:e3:5c:c4:1d:55:68:e3:a4:ed:e3:dc:5a:
                    e0:36:7b:25:5d:17:1c:56:51:3e:75:68:f5:10:09:
                    13:73:95:70:cd:78:85:2a:e1:49:0c:f2:08:36:d6:
                    16:c4:74:0d:65:ce:e1:d4:38:0f:37:36:df:aa:d0:
                    5c:b9:7f:c0:fe:ad:2e:6e:71:54:33:ec:8c:f5:d2:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:07:C9:E9:4D:E8:F3:89:42:27:7A:37:2E:2E:64:6D:53:D9:4E
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3230312e3233372e302e302f31362d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:7b:a6:bb:83:4a:3a:46:9a:c1:c7:74:89:f5:e8:69:f3:32:
         fe:de:c1:3f:b1:8e:10:d7:db:38:1e:3b:47:8b:20:ae:ec:22:
         71:26:ab:b0:40:5b:8d:76:74:56:c0:93:ca:0a:e5:d4:9e:5b:
         46:53:77:8d:48:c0:da:96:67:02:b4:01:59:6a:3a:c4:01:5e:
         cb:20:b9:71:a8:16:93:52:c2:a8:8a:a2:9d:44:05:d9:0f:74:
         60:79:4f:6e:ad:52:1f:e0:04:9e:b6:5f:8b:73:b8:ec:22:36:
         5d:5a:28:63:2c:79:5a:d3:42:dd:26:91:5f:10:af:59:f0:1b:
         70:03:57:63:a6:14:c3:0a:35:c4:2a:23:e1:d3:d3:bf:48:1a:
         d5:d2:b7:ef:bd:d1:ef:50:bb:78:0e:0c:36:b0:b6:78:6a:3f:
         2d:de:39:a0:9f:d2:b4:7b:0a:35:48:7c:cb:8d:3b:dd:17:a0:
         e6:34:e9:12:78:66:db:5f:c2:d8:54:ad:53:c1:40:d0:65:a8:
         29:06:07:bf:07:48:02:5b:31:65:c9:e3:b0:31:ed:26:b7:a2:
         00:e0:3f:04:6f:5c:40:c7:77:e6:6a:18:10:ce:51:9b:39:b7:
         47:18:0d:21:76:86:d7:5c:0f:09:2d:2e:08:33:b9:64:dd:18:
         c0:ee:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:55:28 2026 by rpki-client