This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
File:                     3231332e3233362e352e302f32342d3234203d3e20323734303130.roa (raw, json)
Hash identifier:          eEcbVVnNajCRNl6S+ugArEcR9aqErlngWprdv6l6yno=
Subject key identifier:   22:9E:16:F4:1D:FA:FA:54:0A:0D:B4:7B:EA:2D:18:17:31:60:15:53
Certificate issuer:       /CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
Certificate serial:       2DDC8CF6A70AA665D1F65DBC96F38F08ED58069A
Authority key identifier: BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa
Signing time:             Tue 30 Dec 2025 14:56:47 +0000
ROA not before:           Tue 30 Dec 2025 14:51:47 +0000
ROA not after:            Tue 29 Dec 2026 14:56:47 +0000
asID:                     274010
IP address blocks:        213.236.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 23:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dc:8c:f6:a7:0a:a6:65:d1:f6:5d:bc:96:f3:8f:08:ed:58:06:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030
        Validity
            Not Before: Dec 30 14:51:47 2025 GMT
            Not After : Dec 29 14:56:47 2026 GMT
        Subject: CN=229E16F41DFAFA540A0DB47BEA2D181731601553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:b4:27:ab:b9:87:98:70:03:ac:7b:0d:a0:
                    c9:15:37:fd:77:0c:76:1b:88:18:68:7e:ea:69:11:
                    1d:c9:73:99:fb:aa:8b:13:05:ea:b8:7e:04:98:4e:
                    7f:55:19:c1:42:30:e1:a3:9f:64:ff:06:ff:31:87:
                    af:bd:53:a8:27:69:31:81:32:35:74:35:5c:e2:81:
                    9c:ac:ce:38:2d:db:66:52:e6:0c:6b:04:2b:40:75:
                    eb:09:d9:50:ed:c7:11:bc:c0:32:c4:cb:39:16:b7:
                    63:5a:0e:61:fc:3d:50:40:b3:22:6f:75:b7:be:69:
                    fa:18:25:90:7a:1c:e1:f9:ed:eb:fa:05:26:9f:89:
                    29:a4:02:f1:51:dd:c5:87:47:be:df:1c:bb:3c:df:
                    db:95:0f:be:84:d0:37:65:29:8c:ff:a3:66:b0:f7:
                    ad:c6:e0:cc:e9:14:86:f5:ad:95:c9:35:13:d1:da:
                    c5:a7:30:24:55:9d:6e:aa:d3:d8:86:98:bb:f1:eb:
                    76:b8:8f:92:63:df:f2:94:55:06:55:38:eb:ea:ed:
                    46:2d:c4:b2:17:01:13:73:09:93:7a:fb:6c:d5:9b:
                    e2:68:ef:0f:33:b3:89:1c:cc:2b:97:35:9f:2a:b1:
                    ad:89:94:1a:e2:02:ac:2f:93:a4:10:0d:17:c5:5d:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:16:F4:1D:FA:FA:54:0A:0D:B4:7B:EA:2D:18:17:31:60:15:53
            X509v3 Authority Key Identifier:
                keyid:BE:95:7D:47:90:B5:3F:8E:B4:6A:62:C1:A4:0A:7C:9D:7E:4D:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE957D4790B53F8EB46A62C1A40A7C9D7E4DB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D55ACDDF47E4A075D61197B1AE6007754B50DC828C73BBC692CDC7D225EFD800/0/3231332e3233362e352e302f32342d3234203d3e20323734303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.236.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:09:28:4e:f7:f2:1d:98:29:d6:0f:be:76:e2:ea:ef:10:
         48:e1:a5:fe:54:0d:36:da:e6:de:f7:97:35:82:40:35:8f:89:
         95:87:16:26:29:d4:c3:e3:8d:31:84:bb:ce:d7:55:76:b0:92:
         81:3b:59:50:cd:cf:e3:d4:3a:5d:59:fe:f0:7a:e3:fd:9c:4d:
         82:ea:4f:57:33:61:14:86:6f:fc:43:c3:91:83:57:35:aa:e2:
         f2:68:2f:28:7d:6e:b8:25:93:ef:59:11:11:83:49:f4:ec:dc:
         e2:40:4c:39:0a:22:ce:6e:70:78:bb:22:46:2a:e2:3d:df:8c:
         d1:b2:b1:02:f2:5f:3b:b8:9c:4f:ae:12:cb:bb:c8:ef:42:05:
         c4:e0:6b:c4:be:35:e7:3e:39:f6:0c:43:da:31:fc:a3:39:08:
         ac:31:18:49:c7:cc:d0:a9:39:c5:36:0f:5f:98:6e:64:28:b0:
         a0:d5:98:4e:eb:f6:a9:1a:14:62:02:bc:4d:02:b2:17:5f:de:
         4d:55:84:3a:2f:63:0f:3a:66:a4:62:37:81:7c:ae:f7:db:b0:
         d9:41:3a:c4:70:0e:c1:50:68:a4:14:b1:04:4e:ef:7d:01:03:
         b0:7a:7b:29:66:98:2b:b6:0a:ba:05:29:8e:4b:1e:20:8a:a5:
         25:f8:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:48:26 2026 by rpki-client