This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
File:                     3230312e3231372e382e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier:          jhty6t5C+k2ROHThdtiZVxT8a6qM+iYh06t+rLitDf8=
Subject key identifier:   15:67:D1:F8:85:C6:C5:32:23:00:F4:EF:D5:FA:80:9C:1E:9E:E9:67
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       63654E5290B5D70D273AC87FEC77C670F6BBC2F9
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:25:58 +0000
ROA not before:           Tue 06 Jan 2026 19:20:58 +0000
ROA not after:            Tue 05 Jan 2027 19:25:58 +0000
asID:                     27768
IP address blocks:        201.217.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:4e:52:90:b5:d7:0d:27:3a:c8:7f:ec:77:c6:70:f6:bb:c2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:20:58 2026 GMT
            Not After : Jan  5 19:25:58 2027 GMT
        Subject: CN=1567D1F885C6C5322300F4EFD5FA809C1E9EE967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:0a:3f:7d:49:f1:34:dd:26:01:5c:7a:b1:
                    07:35:87:dd:eb:fa:2c:9c:e3:f9:d4:f4:c3:2d:53:
                    39:b5:76:e1:82:6c:9e:77:84:fa:70:b8:19:71:c8:
                    5a:fa:67:f1:c1:a7:4a:e2:39:f7:ed:25:d3:9c:8f:
                    3e:da:e8:55:ac:2d:0a:78:79:ae:b9:d5:a4:ca:6b:
                    81:80:f4:86:8e:9c:c6:5d:b5:2d:25:46:34:5f:a7:
                    a1:83:aa:e9:0b:d6:67:2a:5c:4c:cf:7c:fd:ce:86:
                    ce:d6:7d:a2:69:5a:6d:77:d1:bd:63:98:8f:d9:5c:
                    29:fa:03:93:62:d6:67:90:87:8c:c3:3a:ad:2a:7e:
                    c8:25:cc:39:93:6f:10:60:ea:92:f2:92:83:d2:41:
                    9e:23:4b:21:10:12:b3:f1:1c:6e:6e:9c:f4:4e:5c:
                    11:eb:f1:85:e4:5f:75:a1:52:7c:aa:16:8e:cc:e6:
                    37:b8:57:42:a3:b2:78:83:b4:47:70:a6:4f:43:b6:
                    ec:d5:f6:f5:3e:d4:e5:75:58:11:6d:26:66:e2:c5:
                    48:c9:46:a2:e3:60:f9:76:85:48:f2:f0:6d:13:01:
                    23:bc:e5:ab:30:48:45:31:6d:c8:31:82:8b:cb:70:
                    49:5c:f6:62:f3:5d:2d:3b:d0:53:e0:8c:93:21:b3:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:D1:F8:85:C6:C5:32:23:00:F4:EF:D5:FA:80:9C:1E:9E:E9:67
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:53:cf:1a:ad:1c:9e:2a:e5:b3:66:85:d2:96:60:73:51:
         aa:a3:ae:5e:91:f0:4e:26:8f:18:01:2e:77:c6:b4:d9:8c:5e:
         94:72:22:b6:b8:f9:6e:b8:fd:a1:eb:11:2c:45:71:a2:5b:2f:
         1e:26:7c:a1:2a:de:ff:46:7c:ba:ed:1d:27:e3:5a:fd:df:3b:
         33:1a:c4:bb:7e:87:a8:71:2d:a4:ea:53:a3:9e:78:d1:d8:76:
         ae:7b:23:36:b7:f7:66:cb:ed:e6:9f:57:d7:89:6a:c4:83:2d:
         88:46:51:9d:99:01:26:c6:89:d4:a8:5d:fd:ac:de:bb:ca:c2:
         99:cd:a8:34:ff:9e:3e:84:ff:5f:3d:cb:91:f6:ed:17:15:c4:
         e0:2d:e0:5e:d9:67:de:c9:17:6a:1f:df:e2:70:aa:b3:94:35:
         bd:0c:9a:ab:1d:4d:8c:58:7f:ab:3b:4a:c5:71:2f:c1:21:3e:
         03:c4:61:28:38:b4:5b:22:99:ae:bb:af:41:eb:07:8b:d7:62:
         97:81:92:7c:53:b4:d1:87:68:9c:8f:58:d0:1b:8c:2c:75:32:
         10:77:f1:88:84:6c:0f:45:a5:a4:aa:01:2e:18:ae:c7:b6:fc:
         56:7e:5c:56:8f:8b:f7:ce:06:99:b0:6f:51:9b:7d:01:59:29:
         47:16:22:42
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUY2VOUpC11w0nOsh/7HfGcPa7wvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjAxMDYxOTIwNThaFw0yNzAxMDUxOTI1NThaMDMxMTAvBgNV
BAMTKDE1NjdEMUY4ODVDNkM1MzIyMzAwRjRFRkQ1RkE4MDlDMUU5RUU5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0Ao/fUnxNN0mAVx6sQc1h93r
+iyc4/nU9MMtUzm1duGCbJ53hPpwuBlxyFr6Z/HBp0riOfftJdOcjz7a6FWsLQp4
ea651aTKa4GA9IaOnMZdtS0lRjRfp6GDqukL1mcqXEzPfP3Ohs7WfaJpWm130b1j
mI/ZXCn6A5Ni1meQh4zDOq0qfsglzDmTbxBg6pLykoPSQZ4jSyEQErPxHG5unPRO
XBHr8YXkX3WhUnyqFo7M5je4V0KjsniDtEdwpk9DtuzV9vU+1OV1WBFtJmbixUjJ
RqLjYPl2hUjy8G0TASO85aswSEUxbcgxgovLcElc9mLzXS070FPgjJMhs72XAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUFWfR+IXGxTIjAPTv1fqAnB6e6WcwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczNzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALJ2QgwDQYJ
KoZIhvcNAQELBQADggEBAKLPU88arRyeKuWzZoXSlmBzUaqjrl6R8E4mjxgBLnfG
tNmMXpRyIra4+W64/aHrESxFcaJbLx4mfKEq3v9GfLrtHSfjWv3fOzMaxLt+h6hx
LaTqU6OeeNHYdq57Iza392bL7eafV9eJasSDLYhGUZ2ZASbGidSoXf2s3rvKwpnN
qDT/nj6E/189y5H27RcVxOAt4F7ZZ97JF2of3+JwqrOUNb0MmqsdTYxYf6s7SsVx
L8EhPgPEYSg4tFsima67r0HrB4vXYpeBknxTtNGHaJyPWNAbjCx1MhB38YiEbA9F
paSqAS4Yrse2/FZ+XFaPi/fOBpmwb1GbfQFZKUcWIkI=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:06:29 2026 by rpki-client