This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa
File:                     3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          OcUX5zgkOimq7Tx4TDZCUkodvBXaIVPwIed73qnUZ3U=
Subject key identifier:   40:1C:8C:AD:22:F6:3C:D9:98:5A:0C:5A:DB:EA:F2:D9:0B:60:C1:66
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       7174C494606BCB302353F85E88E10E9AE64CF2FA
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:27:53 +0000
ROA not before:           Tue 06 Jan 2026 19:22:53 +0000
ROA not after:            Tue 05 Jan 2027 19:27:53 +0000
asID:                     13489
IP address blocks:        201.236.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:74:c4:94:60:6b:cb:30:23:53:f8:5e:88:e1:0e:9a:e6:4c:f2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jan  6 19:22:53 2026 GMT
            Not After : Jan  5 19:27:53 2027 GMT
        Subject: CN=401C8CAD22F63CD9985A0C5ADBEAF2D90B60C166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:a7:5b:b9:6d:d6:b8:1c:49:33:69:e4:b4:
                    40:a9:90:65:b9:74:be:e5:8b:c8:b4:d9:77:f8:a8:
                    b3:fd:c1:b8:2c:3f:63:5d:cc:29:f4:24:73:f5:4f:
                    78:37:77:3a:85:9d:bd:5c:f6:fe:58:05:24:47:e5:
                    8a:ce:d2:71:7c:49:58:d4:42:0d:20:dd:13:89:6f:
                    a1:c7:df:7a:a3:d0:6c:fa:dc:f8:bc:39:5f:b4:52:
                    41:e3:23:01:05:f5:d0:3b:ef:36:bb:0a:f0:3e:0d:
                    8d:2a:5a:e8:c4:6b:9a:21:5a:29:a0:b6:23:2d:fb:
                    2d:43:9d:30:54:96:16:46:86:eb:c0:11:6e:5c:b1:
                    fb:e8:ea:76:4b:c0:3c:c7:c5:ce:9c:2e:84:b8:bc:
                    73:df:af:c5:1f:b5:58:c8:6a:11:f5:37:f1:f5:f1:
                    d2:9d:34:7d:26:75:36:20:9b:70:c8:40:5d:0a:02:
                    0e:32:fa:85:99:d5:4c:1a:e5:f5:38:30:bc:df:8c:
                    f8:a0:ca:8f:c5:e0:da:8a:26:cd:db:a0:2f:0c:de:
                    d2:97:30:e9:89:00:d1:ce:6f:e3:03:1a:26:9a:37:
                    73:4e:a0:d1:be:b0:be:cb:90:d5:6a:fd:36:f4:34:
                    6e:99:73:d4:a2:6f:a3:06:3e:d2:1c:78:49:02:6a:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:8C:AD:22:F6:3C:D9:98:5A:0C:5A:DB:EA:F2:D9:0B:60:C1:66
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230312e3233362e3139322e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:cd:77:a1:57:9f:1b:fc:90:ca:76:0d:b0:1e:53:74:a9:
         a2:39:13:ba:91:5b:54:8f:46:50:ee:15:34:70:c9:cd:3b:dd:
         a7:9d:c8:d0:b7:d4:c2:db:03:78:3e:1a:ca:35:ac:14:2b:02:
         1f:df:1d:67:ba:4a:65:ae:b4:a4:e4:73:6c:3b:3f:4a:e2:bd:
         f6:ff:0f:68:ee:e5:b8:bb:4b:4c:f5:a3:bd:ae:98:09:d7:22:
         68:70:df:29:35:3d:fc:31:b7:5d:e1:ec:28:86:76:ec:19:b9:
         8f:77:e0:8a:ee:06:fc:f3:63:e7:b6:26:78:f1:b8:37:ca:b3:
         59:8d:c5:a1:b2:a4:b5:16:62:9b:ba:4a:69:aa:11:74:20:de:
         28:fe:87:2c:24:5e:61:a6:71:e5:af:7f:f9:3a:4e:37:a4:c6:
         71:ff:43:31:6e:e3:02:45:29:8f:d9:93:59:90:ee:cc:d2:3c:
         7a:e8:b6:62:2f:e5:9f:0a:57:46:0e:88:bf:11:b9:d5:82:c0:
         b4:81:53:49:9c:6b:fa:8c:ab:c4:83:88:aa:fd:17:9f:a1:ee:
         0d:52:da:a0:7c:30:d9:6f:ad:d4:81:47:03:f9:9c:68:34:a3:
         19:4a:85:08:7f:44:3e:b7:e9:9a:ef:df:1e:31:21:fc:6b:0e:
         aa:f7:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:27:15 2026 by rpki-client