This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232322e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3232322e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          aHQTYakzg23m/IsQbJJiEZikJc7knuK9QzSnlPTS+IA=
Subject key identifier:   B7:BA:37:61:76:AE:49:4A:8C:2D:92:58:AD:34:06:C0:AE:B3:AD:9C
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       4691BA26246455599C57FB6D643AD6F3CD98CD28
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232322e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:21 +0000
ROA not before:           Tue 06 Jan 2026 18:59:21 +0000
ROA not after:            Tue 05 Jan 2027 19:04:21 +0000
asID:                     18734
IP address blocks:        189.202.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:ba:26:24:64:55:59:9c:57:fb:6d:64:3a:d6:f3:cd:98:cd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:21 2026 GMT
            Not After : Jan  5 19:04:21 2027 GMT
        Subject: CN=B7BA376176AE494A8C2D9258AD3406C0AEB3AD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:2d:32:06:59:ce:c5:59:26:53:20:19:44:
                    85:07:05:19:96:f5:63:1e:04:b7:70:8f:8b:fd:6f:
                    d9:d0:e1:84:ae:13:06:6e:b0:a4:00:1e:e3:14:63:
                    72:b5:b9:43:0c:a7:9d:c7:47:69:e7:41:35:27:24:
                    96:4d:8f:3c:79:f9:71:1d:33:11:c4:4c:18:fd:b0:
                    9d:00:8d:46:a8:33:50:e8:e0:4c:36:be:9a:b7:b8:
                    90:8b:ad:0e:6b:e3:20:47:ce:92:68:ed:7f:be:9a:
                    64:fe:68:1d:79:ef:b8:ef:95:f8:24:ad:66:65:53:
                    38:42:a0:22:44:be:91:d0:36:61:a3:9f:f2:21:dd:
                    05:8b:f6:27:bd:12:30:3d:a3:53:be:28:4b:73:27:
                    35:a8:ed:22:17:02:f0:c7:65:5b:9a:27:15:2d:9c:
                    d9:c3:73:6d:87:47:e8:1e:f8:ea:98:0a:88:14:f7:
                    65:6b:83:37:7c:1a:de:88:4c:b0:e9:6c:48:97:0a:
                    64:bf:c9:09:68:53:5f:d3:be:0a:a5:ec:b8:d7:6c:
                    4f:ea:a3:53:5a:53:bd:a9:7e:05:06:c1:09:a4:9d:
                    d5:4a:c7:8b:1c:fc:bc:0a:25:2f:26:ef:98:7c:dc:
                    b4:c1:59:00:a8:c0:8e:e4:86:b9:55:70:fd:d6:7b:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:37:61:76:AE:49:4A:8C:2D:92:58:AD:34:06:C0:AE:B3:AD:9C
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3232322e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:ca:71:3d:40:be:07:52:d4:1a:82:35:50:e4:a6:53:f8:
         54:c3:15:7e:fc:bd:db:c5:c5:14:ae:21:05:9a:06:ff:36:0c:
         61:e3:1e:21:51:d4:da:0e:06:fa:6a:46:e8:0c:1f:e4:99:cd:
         05:30:fd:c4:28:d3:87:9a:88:35:de:e3:85:04:48:07:21:d3:
         b6:d1:42:11:1e:4f:fb:85:db:f3:2c:6f:0b:1b:34:77:da:a8:
         4a:66:aa:34:5f:07:e3:15:5b:a8:94:91:d2:6d:ae:5b:fd:8b:
         db:c8:1a:84:0c:13:4e:f1:b3:e0:31:71:4b:48:85:eb:c8:63:
         e3:c4:0c:09:03:0c:b1:64:4f:07:c9:2c:29:d0:0b:7f:44:96:
         63:6d:ef:18:b1:ae:8b:b8:58:14:a9:60:2b:c0:b6:e4:f3:01:
         07:d6:83:d5:70:a6:6e:96:a1:ab:97:ae:c0:47:45:cd:98:b9:
         70:9f:0b:d8:1b:46:e3:9a:91:e6:6d:2c:90:69:17:dc:db:6e:
         39:74:57:48:d7:c3:64:74:0d:b4:dc:52:96:d9:c9:a7:5f:6e:
         0a:ee:14:14:0b:56:59:d3:91:04:5b:22:54:82:71:d9:e1:14:
         ab:d7:10:15:df:e3:29:c1:50:ac:5d:88:4a:5d:49:bd:81:7a:
         8e:b9:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:14 2026 by rpki-client