This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          7XnMZ2gLD6y1+kXHSyqzZ3epM5bNOrXtI1uQNdgpxxE=
Subject key identifier:   E3:C1:1A:0F:D7:EA:40:4B:EF:F8:B2:65:E3:EA:1F:D6:34:AC:49:39
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       676F1006C637AFAEF15230C64276A88FFDF74538
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:26 +0000
ROA not before:           Tue 06 Jan 2026 18:59:26 +0000
ROA not after:            Tue 05 Jan 2027 19:04:26 +0000
asID:                     18734
IP address blocks:        189.202.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6f:10:06:c6:37:af:ae:f1:52:30:c6:42:76:a8:8f:fd:f7:45:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:26 2026 GMT
            Not After : Jan  5 19:04:26 2027 GMT
        Subject: CN=E3C11A0FD7EA404BEFF8B265E3EA1FD634AC4939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:71:d9:46:00:5d:db:fd:54:a0:a1:59:a7:
                    20:ca:cf:de:94:3e:a2:5f:e3:74:4d:76:73:43:5c:
                    c6:53:3d:e4:29:98:7f:8d:4f:8f:90:67:73:96:3e:
                    46:88:7d:9a:49:cf:21:0c:68:70:d2:f2:31:56:e7:
                    50:55:8e:11:f6:51:f8:d3:02:30:b7:67:34:6b:83:
                    22:24:10:16:0d:ef:c4:d3:8b:3d:a3:78:8e:10:07:
                    bc:a1:ce:82:0c:1b:da:7d:93:45:4f:bf:f0:db:1a:
                    58:db:93:dc:df:d7:3a:9c:30:37:ba:9b:a1:7a:92:
                    55:a9:04:0e:4c:7c:32:1d:11:41:d7:95:7c:b9:9a:
                    7d:e3:4f:c8:d3:25:e1:9f:9b:4f:03:d8:38:6f:b6:
                    12:9e:9b:a8:be:5d:31:31:9f:a5:8c:69:d5:e0:a6:
                    5e:b0:b1:92:0a:af:3b:b0:11:77:b6:8e:eb:ef:a5:
                    7b:e1:32:87:3e:dd:94:3e:7f:c3:19:97:bd:11:3c:
                    34:f6:c4:35:4e:04:75:96:e6:ea:55:e6:e0:4b:41:
                    04:8b:70:75:5f:4e:e5:85:de:25:d4:e3:4e:64:03:
                    18:59:0e:c9:20:8a:66:07:96:12:48:86:ff:b4:22:
                    08:dd:69:41:9b:02:4f:56:de:a7:14:77:04:0e:25:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:1A:0F:D7:EA:40:4B:EF:F8:B2:65:E3:EA:1F:D6:34:AC:49:39
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3234382e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:70:f0:99:2a:d5:3e:2f:09:29:e7:3e:ca:c9:32:23:21:86:
         b5:49:56:40:3f:60:20:c5:a2:4c:e6:e0:61:00:4c:c8:f5:02:
         94:cb:84:b7:e8:59:d1:f8:d8:03:ac:54:e7:49:49:9c:c3:9d:
         02:3a:5c:fa:b0:ec:be:10:b8:ff:56:1d:64:1a:e3:64:43:a2:
         81:97:9b:76:fa:cc:49:3c:83:80:70:d6:80:57:78:1d:33:43:
         47:26:15:f5:70:88:01:e1:47:fa:b6:b7:2d:89:67:4f:22:59:
         da:d1:12:c1:27:90:e2:34:54:54:a4:34:05:8a:7e:01:a8:2c:
         b4:b6:cc:92:24:02:ea:4c:f4:9e:5c:67:23:29:cc:57:b3:ba:
         d2:30:31:a2:26:ca:f1:dc:8c:a0:a5:fd:44:4d:a6:67:5d:2c:
         05:ae:51:a7:fd:21:b1:d7:99:51:37:d2:48:6a:71:09:50:2d:
         a7:c7:f3:d7:3e:62:d5:f8:98:7f:7a:f5:8e:3c:20:e9:3b:f2:
         85:d9:42:fe:04:db:d3:b3:c0:e4:e0:a3:fd:53:4a:cf:6a:69:
         a8:90:a2:ee:4c:4d:ea:17:b2:a1:51:86:89:48:33:11:8d:86:
         3f:03:95:6f:97:e3:5d:a6:bf:7c:e2:ec:b8:52:30:de:f5:1b:
         1b:72:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:58 2026 by rpki-client