This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135302e302f32342d3234203d3e2033383136.roa
File:                     3230312e3232312e3135302e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          AEO9AC10t9qaJoPN1QEfYbpOXoil8FthvbE2Ehsq1so=
Subject key identifier:   3E:B0:35:C6:58:8D:D5:12:73:4E:02:FF:2C:E1:F9:BC:A1:93:D9:DC
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       647CF1849F997FEC4EBDAAA87AC1670BF04F43AA
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135302e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 06 Jan 2026 19:18:01 +0000
ROA not before:           Tue 06 Jan 2026 19:13:01 +0000
ROA not after:            Tue 05 Jan 2027 19:18:01 +0000
asID:                     3816
IP address blocks:        201.221.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Jan 2026 14:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7c:f1:84:9f:99:7f:ec:4e:bd:aa:a8:7a:c1:67:0b:f0:4f:43:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:01 2026 GMT
            Not After : Jan  5 19:18:01 2027 GMT
        Subject: CN=3EB035C6588DD512734E02FF2CE1F9BCA193D9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:55:1d:de:f1:e3:f6:39:ad:38:73:9a:68:
                    db:cb:54:95:04:dc:b1:3f:4c:97:77:78:6d:4c:bc:
                    49:3a:2d:3c:19:92:db:25:2e:53:8a:7f:c0:96:9f:
                    c9:c0:3e:c5:a9:e9:8e:d9:53:18:96:c1:f8:bd:3a:
                    c3:a4:72:cb:83:e8:58:d1:9b:67:d3:ef:5f:80:91:
                    53:b9:3a:31:af:12:c7:c4:49:95:71:11:19:59:4b:
                    d1:08:fc:ca:81:de:3c:f2:07:79:ba:05:e1:33:d4:
                    78:ec:45:86:97:3f:d1:11:f2:da:fd:36:9e:87:81:
                    14:89:8d:92:59:bb:5b:20:dc:63:26:c7:01:15:de:
                    4c:b6:5e:bf:06:3c:9f:9e:53:89:74:15:e7:37:4f:
                    5a:37:10:fc:c7:f2:13:b1:4f:08:4a:ce:7c:1c:e4:
                    24:a5:6f:d7:6b:f8:b6:82:6e:7e:80:bc:b3:19:e3:
                    68:45:3b:50:d8:5c:d0:4c:b4:fc:4b:11:41:e2:70:
                    dc:70:25:00:42:ed:be:08:70:b5:9c:33:6d:93:e2:
                    af:f6:e8:a9:2f:32:24:96:a3:77:dc:8c:9e:35:6a:
                    be:1a:0d:7b:53:63:65:a2:81:44:95:2b:f8:ae:79:
                    f5:9d:49:5b:4a:3c:bc:c3:93:5b:75:82:d2:93:36:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:35:C6:58:8D:D5:12:73:4E:02:FF:2C:E1:F9:BC:A1:93:D9:DC
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3135302e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:31:27:b1:4c:2c:f5:56:ab:a7:eb:b8:0c:ac:4e:7c:94:00:
         59:5e:b0:00:7d:7e:4d:09:04:0e:47:ec:cc:ea:29:dc:46:c9:
         80:18:b9:a7:e8:68:50:37:6b:8d:35:41:7b:b3:d1:02:32:8c:
         ec:58:67:5c:55:9f:4b:bd:ff:b2:1e:8d:6d:02:ae:a6:10:73:
         39:5d:89:fd:04:19:1b:99:13:96:ed:e6:d8:d4:b7:04:e2:d5:
         c6:a3:b5:aa:93:ec:4d:15:86:ae:b6:65:6d:90:3f:00:f0:c0:
         b9:b9:a1:dd:c2:d8:11:9c:5e:5a:16:3b:23:7f:12:41:79:bc:
         00:db:30:72:29:83:33:69:df:e3:bd:52:fa:57:a5:5b:a6:6c:
         a5:84:d7:22:f8:8c:c0:59:fe:03:20:ce:ca:15:a8:4d:50:51:
         78:f8:fd:b2:4d:62:67:38:31:49:d0:15:98:71:d6:2d:3c:3a:
         50:0a:aa:55:b6:4c:59:5e:c5:36:ba:d7:21:7a:b7:7b:5c:28:
         3c:17:00:5d:97:9c:32:3c:f8:c6:bf:22:19:ce:2a:da:11:63:
         c1:b5:09:79:ed:63:5c:79:11:d7:17:12:47:2b:fa:c7:15:e6:
         c6:87:d1:f9:12:a3:3b:ea:6c:2a:e7:6c:c5:35:36:98:b3:5f:
         55:cf:98:e2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZHzxhJ+Zf+xOvaqoesFnC/BPQ6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjAxMDYxOTEzMDFaFw0yNzAxMDUxOTE4MDFaMDMxMTAvBgNV
BAMTKDNFQjAzNUM2NTg4REQ1MTI3MzRFMDJGRjJDRTFGOUJDQTE5M0Q5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/lUd3vHj9jmtOHOaaNvLVJUE
3LE/TJd3eG1MvEk6LTwZktslLlOKf8CWn8nAPsWp6Y7ZUxiWwfi9OsOkcsuD6FjR
m2fT71+AkVO5OjGvEsfESZVxERlZS9EI/MqB3jzyB3m6BeEz1HjsRYaXP9ER8tr9
Np6HgRSJjZJZu1sg3GMmxwEV3ky2Xr8GPJ+eU4l0Fec3T1o3EPzH8hOxTwhKznwc
5CSlb9dr+LaCbn6AvLMZ42hFO1DYXNBMtPxLEUHicNxwJQBC7b4IcLWcM22T4q/2
6KkvMiSWo3fcjJ41ar4aDXtTY2WigUSVK/iuefWdSVtKPLzDk1t1gtKTNql3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPrA1xliN1RJzTgL/LOH5vKGT2dwwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMyMzAzMTJlMzIzMjMxMmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMndljAN
BgkqhkiG9w0BAQsFAAOCAQEAnDEnsUws9Varp+u4DKxOfJQAWV6wAH1+TQkEDkfs
zOop3EbJgBi5p+hoUDdrjTVBe7PRAjKM7FhnXFWfS73/sh6NbQKuphBzOV2J/QQZ
G5kTlu3m2NS3BOLVxqO1qpPsTRWGrrZlbZA/APDAubmh3cLYEZxeWhY7I38SQXm8
ANswcimDM2nf471S+lelW6ZspYTXIviMwFn+AyDOyhWoTVBRePj9sk1iZzgxSdAV
mHHWLTw6UAqqVbZMWV7FNrrXIXq3e1woPBcAXZecMjz4xr8iGc4q2hFjwbUJee1j
XHkR1xcSRyv6xxXmxofR+RKjO+psKudsxTU2mLNfVc+Y4g==
-----END CERTIFICATE-----
Generated at Fri Jan 16 01:18:28 2026 by rpki-client