This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa
File:                     3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa (raw, json)
Hash identifier:          q8JjOPe+UP8tP/EgIRUfIjspkillaxKJSjwY17f+GHI=
Subject key identifier:   D0:77:50:34:6C:98:F6:9E:E4:5A:59:49:41:6A:2F:32:F2:58:12:11
Certificate issuer:       /CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
Certificate serial:       1991F8953BF556E799FD235474A9A62867C6D0ED
Authority key identifier: 0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa
Signing time:             Tue 06 Jan 2026 19:09:33 +0000
ROA not before:           Tue 06 Jan 2026 19:04:33 +0000
ROA not after:            Tue 05 Jan 2027 19:09:33 +0000
asID:                     52394
IP address blocks:        201.221.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 07:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:91:f8:95:3b:f5:56:e7:99:fd:23:54:74:a9:a6:28:67:c6:d0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC40038D7F4C4663CAF584B7D98BC198DB79EAA
        Validity
            Not Before: Jan  6 19:04:33 2026 GMT
            Not After : Jan  5 19:09:33 2027 GMT
        Subject: CN=D07750346C98F69EE45A5949416A2F32F2581211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:5f:1c:8a:ab:39:ec:db:b4:65:75:a9:48:
                    e6:f3:4d:24:36:33:f4:f0:81:14:e2:a8:ca:ab:28:
                    f6:c2:86:03:fc:d7:c6:ed:31:1f:c3:b1:cd:ce:d1:
                    72:ad:11:e7:28:4a:96:bd:76:23:92:23:d7:8d:21:
                    05:c7:b0:d9:d8:fe:dd:81:62:17:e3:7e:f2:ae:d6:
                    3e:53:e7:df:24:2d:4c:8c:02:c3:11:cc:13:e6:69:
                    fd:1e:5b:af:80:70:50:bb:bf:df:ce:9c:d0:9e:81:
                    fa:ca:79:fb:1d:6d:55:01:44:26:38:2f:ba:21:c4:
                    4b:7e:d7:ad:bb:17:a9:2f:38:d1:de:b6:dc:e8:4f:
                    11:0b:31:b1:5c:73:68:62:f7:73:de:3a:08:46:df:
                    07:11:8d:21:42:1d:f3:da:61:3f:94:5f:fd:02:41:
                    51:eb:ae:ef:86:64:9e:c4:6e:dc:32:be:c8:79:d7:
                    26:0c:8a:3e:99:39:4c:11:28:75:ee:ca:38:12:3d:
                    35:f3:35:b1:30:ab:c9:cb:73:9a:d9:a1:c8:6a:b5:
                    5b:85:ce:d4:f0:e3:45:af:73:cd:50:f8:4b:49:12:
                    6c:81:87:c7:1b:41:de:c7:fa:98:90:9a:52:6a:6e:
                    78:6b:24:67:8f:d4:b8:1a:c2:dc:a6:0b:86:85:41:
                    ec:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:50:34:6C:98:F6:9E:E4:5A:59:49:41:6A:2F:32:F2:58:12:11
            X509v3 Authority Key Identifier:
                keyid:0B:C4:00:38:D7:F4:C4:66:3C:AF:58:4B:7D:98:BC:19:8D:B7:9E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BC40038D7F4C4663CAF584B7D98BC198DB79EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B0F2C03FCD0076B644D853626A3157A56FC4FE37B1941F0159760C7D5DB0B5/0/3230312e3232312e3132302e302f32342d3234203d3e203532333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:83:28:92:65:44:87:39:19:40:e4:7c:9e:b7:c8:90:77:
         a7:4a:7a:40:ed:5a:c9:aa:4a:f1:1e:a2:63:60:7a:ee:8e:24:
         62:0d:38:b1:61:69:0a:ed:1d:d3:ee:71:f0:66:eb:73:7e:b2:
         80:1f:53:e5:65:da:52:ca:54:43:40:48:8c:9a:21:7b:04:80:
         bb:1b:e8:9e:c3:0c:a0:c3:a2:6b:18:d9:29:ff:e9:85:93:c0:
         66:e5:c9:46:bb:79:97:ea:0b:4a:11:09:21:12:aa:21:6d:ad:
         f7:5e:89:2c:54:1f:13:12:d8:47:f5:1e:96:58:31:0d:fc:4a:
         46:e4:d9:4c:13:4b:5b:81:25:f0:e5:47:5a:0c:e1:8e:93:60:
         f9:69:7d:a3:6d:f5:71:62:6a:ea:1f:e0:c3:88:f9:f8:ea:bc:
         1d:a8:3e:2a:48:95:68:ce:00:97:4a:81:50:4f:82:a5:ba:fc:
         59:c5:e6:8d:7e:9d:82:d9:ff:b2:cb:7d:6f:d8:b0:7f:96:16:
         fc:8b:ac:98:80:87:d8:fa:e1:2d:9d:b4:55:3c:c8:b4:43:fc:
         30:45:2e:cc:5a:8c:1c:ab:3e:69:4c:c9:2f:95:af:18:83:41:
         9e:2c:d7:b5:d3:99:fe:cb:35:a5:c8:76:45:9a:fd:a8:2d:d9:
         cf:8f:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 06:41:24 2026 by rpki-client