This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203237393437.roa
File:                     3230312e3231382e302e302f31382d3234203d3e203237393437.roa (raw, json)
Hash identifier:          NV4pMGazZmBEA2xpVjDDA4vbt0fTRmqZ2H3AR7yMmX8=
Subject key identifier:   A8:D2:69:AC:07:01:A2:17:4C:30:D6:63:AC:4B:0C:8F:86:F9:F9:8F
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       06F990D36EB98740D145D82E7C8DCFBC18AD640E
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:08:27 +0000
ROA not before:           Tue 06 Jan 2026 19:03:27 +0000
ROA not after:            Tue 05 Jan 2027 19:08:27 +0000
asID:                     27947
IP address blocks:        201.218.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:90:d3:6e:b9:87:40:d1:45:d8:2e:7c:8d:cf:bc:18:ad:64:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:27 2026 GMT
            Not After : Jan  5 19:08:27 2027 GMT
        Subject: CN=A8D269AC0701A2174C30D663AC4B0C8F86F9F98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2b:71:13:c1:24:59:82:64:8c:aa:7d:a3:81:
                    6b:d8:34:a4:e4:fe:c6:f1:10:d9:77:bc:4a:c8:db:
                    e7:92:eb:7e:1e:80:41:d9:88:ae:11:6c:0a:7e:30:
                    ad:21:49:fb:72:4c:d3:d9:7d:e0:fe:34:b0:68:ed:
                    3f:de:14:37:0a:6b:8e:69:99:7a:1d:ef:be:e1:c7:
                    b6:c6:ca:8b:37:f2:23:cc:e8:fc:4a:32:c4:ca:e4:
                    59:45:72:08:60:be:d0:3d:0f:27:2d:7e:ee:09:e9:
                    ca:2d:f4:f9:6c:7b:72:b9:fc:d7:6c:01:55:04:42:
                    dc:c7:0f:29:0d:1b:13:ab:5e:3a:7a:20:07:b6:1b:
                    0f:73:91:f2:3c:92:61:46:62:cd:55:fd:e0:df:b0:
                    55:2f:2d:68:bb:7e:cd:92:b8:01:14:56:d2:6a:ad:
                    6d:3a:68:06:8b:9b:ca:06:17:91:a7:44:d6:04:27:
                    c5:30:97:06:41:70:06:8c:22:ce:1a:78:7e:6f:3f:
                    d1:8a:4c:e6:bc:8b:d5:54:ae:b2:4f:54:13:8f:cc:
                    60:dd:b5:79:65:6f:0f:b0:e3:f5:19:0c:5d:58:b4:
                    91:0c:37:1a:ae:0c:52:c5:3f:d4:e1:65:40:12:dc:
                    64:fe:f8:f5:26:27:c9:0d:dc:e0:26:73:3b:74:f8:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:69:AC:07:01:A2:17:4C:30:D6:63:AC:4B:0C:8F:86:F9:F9:8F
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230312e3231382e302e302f31382d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:09:86:d1:7a:ee:ea:28:15:2c:25:e5:b8:ed:3c:1a:7f:af:
         e7:7d:c6:dd:2d:b3:5b:11:fc:23:00:e7:5c:70:e0:37:d4:89:
         e3:95:fc:78:b5:c4:aa:92:dd:73:9f:e4:c9:05:be:18:da:1a:
         ca:ef:95:0e:4b:62:d2:53:90:bf:87:88:62:4e:dc:c8:9a:6b:
         5b:91:5b:18:da:e3:47:5a:70:4b:f1:f4:10:23:8e:2e:46:57:
         0e:53:3f:65:4a:9f:17:d7:03:30:1c:4b:b6:ab:18:d6:3b:a1:
         cb:ec:a7:a4:0b:c0:3a:60:b7:f0:c5:46:59:d0:bb:e2:dd:5e:
         dd:02:0a:40:f2:04:1b:b5:e3:a4:21:34:e3:bd:d8:9f:3b:78:
         f0:67:44:8b:ba:23:01:0b:16:90:51:01:62:f9:87:cf:c9:d0:
         5e:2b:db:a2:74:0b:79:ab:63:ce:28:6e:9d:7e:35:15:01:c0:
         58:da:a4:c8:53:11:c3:fb:16:c2:f7:e9:dd:77:bf:0a:b4:6f:
         f7:8e:ab:bf:d9:89:a0:3f:9e:73:24:a6:d1:6e:d0:a1:91:50:
         27:bf:3d:fc:fe:09:38:a0:8d:6b:cd:3b:38:9c:44:78:ad:14:
         39:ca:e1:04:3a:b1:25:97:0a:93:00:54:5f:00:64:c9:e1:28:
         17:f8:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:22:51 2026 by rpki-client