This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          fe9TIPl0P3j+CG/2dQvXZkDFpU+5yCSnWUdsZx4NN8w=
Subject key identifier:   BC:8A:2F:C8:97:A4:D0:0D:90:F2:BE:2F:3D:64:84:55:B5:11:9A:21
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       0F8BDDC581815579154C1321BA347DB3B43FE530
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa
Signing time:             Tue 06 Jan 2026 19:05:01 +0000
ROA not before:           Tue 06 Jan 2026 19:00:01 +0000
ROA not after:            Tue 05 Jan 2027 19:05:01 +0000
asID:                     52468
IP address blocks:        181.188.202.0/23 maxlen: 24
                          181.188.215.0/24 maxlen: 24
                          181.188.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:dd:c5:81:81:55:79:15:4c:13:21:ba:34:7d:b3:b4:3f:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Jan  6 19:00:01 2026 GMT
            Not After : Jan  5 19:05:01 2027 GMT
        Subject: CN=BC8A2FC897A4D00D90F2BE2F3D648455B5119A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:6a:13:80:d4:ef:ac:8b:ff:a2:86:89:0b:
                    6e:7d:53:47:08:2e:fd:df:3e:25:2c:1d:49:b5:36:
                    04:de:14:fa:73:e2:f8:e5:5c:0b:71:0b:72:16:b1:
                    dc:6d:d5:16:90:71:7f:cb:19:46:80:aa:4d:02:8c:
                    25:81:29:39:1c:1d:b6:04:10:a4:df:83:a4:1f:5c:
                    e8:9f:7a:95:a2:4b:98:7e:9c:ae:58:19:bc:71:c3:
                    2c:95:63:4d:47:c3:4c:3c:b2:12:f9:b6:c7:03:b1:
                    67:7b:4f:ad:d3:a0:d0:c5:e5:66:bc:af:81:1b:21:
                    23:fe:52:a4:52:17:64:c9:bc:59:27:2c:bc:3d:ef:
                    bf:9a:5c:32:68:e2:68:a6:f3:87:2c:32:6e:0d:9d:
                    52:89:dd:b6:7c:58:f7:2a:dd:c7:99:0e:fe:c0:6e:
                    5b:bd:d3:8e:02:a7:af:25:3c:58:0e:79:9a:c4:84:
                    55:8e:5a:b7:e2:2e:da:f4:87:cf:bc:53:13:e4:99:
                    c7:ed:4e:05:83:60:de:38:a4:5f:6e:eb:75:3e:bb:
                    62:2e:3d:91:06:59:88:b4:7b:f2:cd:80:b4:4f:97:
                    dd:09:93:cb:fe:23:b3:5b:c9:9b:fb:98:f6:b3:9a:
                    4c:92:13:9d:0d:cf:b2:f6:e0:53:af:90:c7:84:30:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8A:2F:C8:97:A4:D0:0D:90:F2:BE:2F:3D:64:84:55:B5:11:9A:21
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23
                  181.188.215.0-181.188.216.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:3c:21:df:3e:cd:38:c4:c7:09:96:54:e1:cf:8a:2b:92:
         07:4f:8c:1a:92:19:b0:d9:b2:40:d0:54:0c:30:62:ca:41:48:
         6d:5b:fb:98:dd:b1:2b:cf:2b:00:12:51:b9:b2:6d:aa:3d:2c:
         c8:74:fc:3e:6c:5a:b6:d7:db:13:af:53:72:80:2f:73:78:a6:
         ee:a6:2e:14:5a:8c:6d:92:0d:aa:83:94:cd:74:af:7c:cf:bf:
         5e:75:62:64:fc:a2:f3:ca:ca:1e:59:74:de:23:83:52:b5:cb:
         e0:fc:04:03:62:89:de:40:f0:36:6c:93:ed:7c:44:e1:22:9e:
         92:6f:eb:d8:06:86:c7:57:d8:20:63:d6:a4:48:f3:87:ea:b7:
         1b:0d:2e:41:4c:11:24:29:cb:13:9c:ad:0a:54:ce:5b:05:6e:
         93:f0:a9:8c:02:e4:a6:b3:f0:f4:91:fc:df:ca:91:00:7b:9f:
         be:98:8a:9d:d5:7d:ae:cc:d1:ad:d9:0b:70:02:de:29:49:e9:
         16:41:55:35:ee:81:b7:eb:cf:77:1e:d9:52:c8:bc:20:6e:51:
         dc:9f:52:8b:c3:a2:af:a1:19:ba:62:1a:e1:59:d4:76:d6:18:
         03:b8:d9:36:d7:b1:6b:9f:cd:a9:58:bc:49:1b:60:b6:de:7a:
         b7:dc:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:21 2026 by rpki-client