This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa
File:                     3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa (raw, json)
Hash identifier:          RBMW8BZBcRejMtZPORmbrU0EOWH7r7J/shUtPpOr2Tw=
Subject key identifier:   BC:6F:13:65:D7:BD:EF:4C:83:4E:CB:87:42:10:71:D2:9B:2B:91:01
Certificate issuer:       /CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
Certificate serial:       42A7AA4346B4B31572D54F252CA82E1539DCB036
Authority key identifier: 21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa
Signing time:             Tue 06 Jan 2026 19:25:35 +0000
ROA not before:           Tue 06 Jan 2026 19:20:35 +0000
ROA not after:            Tue 05 Jan 2027 19:25:35 +0000
asID:                     271896
IP address blocks:        201.94.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 03:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a7:aa:43:46:b4:b3:15:72:d5:4f:25:2c:a8:2e:15:39:dc:b0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D
        Validity
            Not Before: Jan  6 19:20:35 2026 GMT
            Not After : Jan  5 19:25:35 2027 GMT
        Subject: CN=BC6F1365D7BDEF4C834ECB87421071D29B2B9101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:25:d9:3a:e6:42:eb:27:fd:a0:24:5c:27:
                    88:18:00:43:a3:5d:15:3e:81:01:b7:da:97:fc:ad:
                    ac:89:4e:54:58:de:be:30:06:cb:3b:d2:79:c6:eb:
                    5b:5b:d5:6a:31:92:73:8a:5b:d9:e4:9b:43:78:40:
                    be:bb:19:7f:03:c4:a8:2f:18:68:d3:67:4b:b7:ca:
                    e9:21:b9:65:e8:72:24:bc:8c:1d:b3:12:d0:ba:29:
                    5c:6a:c6:4d:92:2c:a9:d4:d3:a5:5c:59:aa:e7:29:
                    f3:11:89:f5:39:35:70:46:23:cf:13:fe:4a:ee:64:
                    74:ae:51:42:a8:80:f6:37:b3:f1:c9:fa:c2:9c:78:
                    f2:76:af:d2:55:0a:a5:aa:64:12:6f:20:fa:2a:dc:
                    37:39:a4:af:36:11:34:56:be:3e:42:66:3f:a6:3b:
                    78:ab:3d:de:31:51:b2:4e:8f:20:d2:2c:b8:2b:6e:
                    c9:85:af:aa:b9:ad:8c:36:48:d4:e6:46:05:2b:ff:
                    85:1d:40:a1:7e:f6:85:f3:89:e8:9b:6d:8f:50:ff:
                    13:68:cf:06:79:05:1c:ab:73:7c:f4:26:d6:a4:e2:
                    6f:fc:a0:65:15:85:9e:be:b5:6e:30:dc:4a:eb:e8:
                    33:2d:43:d0:4f:6f:c4:9a:c2:85:cb:16:bf:f8:3e:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:13:65:D7:BD:EF:4C:83:4E:CB:87:42:10:71:D2:9B:2B:91:01
            X509v3 Authority Key Identifier:
                keyid:21:BC:3E:84:B2:2C:A8:DB:BE:B8:45:7F:7B:FE:30:3E:CF:B3:55:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21BC3E84B22CA8DBBEB8457F7BFE303ECFB3557D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C67C1E2BA6E139142C1CD54D63A635DD5FC1234DBFC3F3E7A177B0923AA88CA4/0/3230312e39342e3134382e302f32322d3234203d3e20323731383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:9d:54:fc:62:e5:91:22:4f:d6:d7:03:28:4e:4c:71:e9:
         0a:25:30:11:72:61:81:af:be:63:06:3d:9e:97:a4:27:99:55:
         5f:47:2c:62:fe:e6:f0:39:c3:b9:2c:6f:27:3a:ba:7e:a4:da:
         4d:93:81:1c:ec:97:ff:4f:d2:27:75:48:ef:4e:5f:a5:a8:26:
         65:ce:a5:ff:03:da:27:a3:f2:ce:d0:30:74:f1:b4:97:a0:cf:
         17:3b:cb:c4:27:ad:9d:f7:eb:76:2d:b5:d0:94:3d:70:bc:e4:
         24:b8:7c:37:08:bb:43:a5:be:2a:a7:e9:67:3d:2f:7e:ed:a7:
         01:be:de:44:c0:c8:bc:d4:fe:91:8f:6c:11:d3:68:c2:53:d9:
         53:69:63:1b:19:c2:b6:0f:5e:72:f1:81:77:d3:48:7e:1b:bf:
         43:b6:3d:3e:0e:44:7b:e4:3c:9b:d7:cf:d4:9c:7c:b4:43:a3:
         01:34:ac:5b:98:0a:b0:69:24:8a:8e:87:df:df:2f:6c:8b:42:
         c3:d3:db:65:bb:25:b2:2b:ab:fd:8a:96:9c:69:e3:17:5c:72:
         7f:26:be:b4:60:18:27:5d:ea:8c:d4:ed:05:b7:05:f7:07:cb:
         53:3a:59:02:da:7b:54:99:b6:d8:02:c0:39:3c:e1:04:9c:22:
         ff:7f:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:04:17 2026 by rpki-client