This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          sJy92XOe84+FeADzLVwDcfZy866iFtwTAAqPkNy3Pag=
Subject key identifier:   71:A2:CC:31:DD:68:EE:A5:70:0B:C2:55:87:F2:70:A0:F3:82:5D:98
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       079C6B08A2729418A8A36DE73AE029B3D2F93EE0
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:32 +0000
ROA not before:           Tue 06 Jan 2026 18:59:32 +0000
ROA not after:            Tue 05 Jan 2027 19:04:32 +0000
asID:                     18734
IP address blocks:        189.202.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9c:6b:08:a2:72:94:18:a8:a3:6d:e7:3a:e0:29:b3:d2:f9:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:32 2026 GMT
            Not After : Jan  5 19:04:32 2027 GMT
        Subject: CN=71A2CC31DD68EEA5700BC25587F270A0F3825D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:0a:8d:ce:e0:9d:6d:34:4e:ed:67:16:b9:
                    f5:e9:60:8d:2d:03:b2:a9:0b:7a:58:6e:d1:1d:90:
                    19:05:81:48:45:de:e6:62:68:be:84:85:e0:4d:ac:
                    58:0f:18:1d:6f:2e:24:e1:ad:c4:3c:1e:f7:77:34:
                    d0:5f:d6:a0:1a:49:97:ac:41:b2:73:1e:9c:e4:b5:
                    8b:2c:2b:79:ab:5f:43:04:93:d9:1e:2f:1f:d8:c0:
                    8e:fb:63:31:b5:73:24:dc:d7:3d:cb:0d:c0:52:1d:
                    93:86:da:72:ce:10:be:33:00:06:e4:7f:5e:18:6a:
                    88:ee:e1:b7:71:6e:05:28:d0:80:b7:74:6b:0e:db:
                    fc:ff:7c:c1:61:b1:f2:43:c3:4b:de:47:69:7c:48:
                    81:2b:a5:ab:40:77:33:8e:c5:d8:b0:e6:a5:fa:2b:
                    06:6f:9b:16:81:92:cc:2b:2e:de:44:d3:49:c6:b9:
                    b6:79:86:95:13:81:da:fd:49:e7:98:52:7f:d0:25:
                    23:52:94:91:88:ef:43:87:c7:54:c4:9b:8b:32:65:
                    e3:4b:7c:fb:44:c9:bb:ef:88:42:58:2a:56:6d:7a:
                    42:8c:12:f7:ad:26:e8:03:89:9a:04:2f:b5:88:2a:
                    59:f9:2e:b5:55:03:b8:ab:16:e5:3c:f8:1a:5d:93:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:CC:31:DD:68:EE:A5:70:0B:C2:55:87:F2:70:A0:F3:82:5D:98
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3231312e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:93:1e:ea:1f:1a:94:93:dd:84:3e:6d:b4:5a:6e:e5:6a:a9:
         8f:24:ff:7a:da:4c:85:28:90:a1:a1:0a:3e:91:03:26:a4:1f:
         f8:ec:fd:03:b9:7f:a1:ff:7c:c6:be:af:b2:97:ef:ff:bc:10:
         f3:04:bc:32:90:47:7d:63:3d:4e:19:64:b5:b0:b9:3b:62:71:
         9d:bc:75:14:9d:9c:6d:e2:f4:7b:a3:62:ed:f7:77:86:c6:fc:
         41:27:cc:1e:47:48:86:aa:c2:b7:fe:d1:c1:e7:32:27:3f:a0:
         e2:85:fd:31:14:19:b7:be:46:18:f1:49:c5:e7:fa:94:05:04:
         9a:e4:97:0f:fd:42:d6:0a:dd:bc:f9:6b:ad:25:d1:f1:05:8e:
         ce:9b:97:2b:6b:c6:51:29:ca:3a:b5:49:2d:97:f2:40:0d:b8:
         6b:86:da:ef:69:de:b0:82:50:4c:75:be:58:6f:0c:68:17:08:
         9d:9c:f8:e8:8f:0e:e6:6c:2c:af:bc:0c:a1:90:bf:aa:c6:b7:
         52:53:73:6e:02:7e:7d:ce:c7:89:1d:46:24:1d:dd:b8:8b:5c:
         ef:c1:f3:3d:fb:89:ef:fd:4b:28:f6:a5:d3:f3:0c:bf:51:cd:
         c3:6d:99:c5:b5:d7:66:5f:5d:86:20:90:d8:74:02:4a:bd:10:
         57:68:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:06 2026 by rpki-client