This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235322e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230322e3235322e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          EB1a+rDY/di28gv8fiI1tto3eQAiTABFfUX+v0Zfo3Y=
Subject key identifier:   78:8D:CE:33:44:6F:E5:D5:CE:3D:CB:87:3A:63:32:28:71:EB:51:01
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       135D56C1ACD09A813DF067D671BF60E56EF72619
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235322e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:32 +0000
ROA not before:           Tue 06 Jan 2026 18:59:32 +0000
ROA not after:            Tue 05 Jan 2027 19:04:32 +0000
asID:                     18734
IP address blocks:        189.202.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5d:56:c1:ac:d0:9a:81:3d:f0:67:d6:71:bf:60:e5:6e:f7:26:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:32 2026 GMT
            Not After : Jan  5 19:04:32 2027 GMT
        Subject: CN=788DCE33446FE5D5CE3DCB873A63322871EB5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:d2:88:05:06:60:df:cc:f5:68:c2:1c:27:
                    56:b5:18:6a:67:00:75:a6:10:c2:c7:9d:21:b4:e4:
                    9a:86:3b:0e:1c:e0:cd:b9:05:41:d0:fc:3c:10:4f:
                    1f:ad:83:c9:e7:1c:7d:71:6a:3a:0e:4d:25:3f:e1:
                    4b:99:99:0e:ce:1a:82:32:58:04:35:7d:6c:06:8a:
                    f5:60:34:21:c1:8f:d5:17:98:bd:33:68:1c:7f:10:
                    ed:a0:7c:be:7c:15:6c:5c:03:48:f7:cc:3d:77:1f:
                    a3:fb:bd:18:06:64:48:c7:eb:75:3f:4f:81:9c:9c:
                    e6:c8:67:2c:ab:3d:5d:4b:a5:4f:e3:05:aa:32:fe:
                    43:eb:a2:8b:ce:a1:8e:e3:be:ff:fb:b5:9e:8c:a2:
                    28:5e:06:b4:63:de:59:d7:37:03:29:c3:94:19:5e:
                    bd:78:ad:7b:aa:c5:db:af:b2:0a:f4:42:94:fc:58:
                    29:3c:06:64:91:3f:fc:e5:75:f1:01:cb:f7:49:21:
                    52:f9:9a:a8:b9:b3:82:51:59:bf:47:72:d5:63:c0:
                    f2:b0:52:c8:6b:4e:c2:c9:8c:96:a5:07:13:c5:65:
                    b5:29:63:e6:d8:28:0c:ea:9a:da:6e:e5:79:fc:65:
                    6a:dd:d5:23:66:59:5a:12:d5:34:d0:8e:4b:af:db:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:CE:33:44:6F:E5:D5:CE:3D:CB:87:3A:63:32:28:71:EB:51:01
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230322e3235322e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:0a:93:c1:14:b6:c1:57:7e:7c:8a:58:bc:54:7f:6e:b6:0f:
         59:8a:15:f6:fa:48:16:a3:56:4e:e2:b6:e7:7d:7f:28:fc:56:
         7c:e7:64:28:82:08:57:36:d0:47:07:93:e8:65:11:14:7f:94:
         8d:30:79:28:9c:f0:41:7f:45:63:79:96:56:d3:e0:f5:d5:d1:
         df:b0:8c:79:91:3f:ff:71:a2:cf:b7:79:5d:7b:18:a3:a2:5a:
         02:92:d3:46:8a:cb:31:95:b7:0a:ff:23:f0:93:49:85:07:3a:
         23:23:bb:d1:ce:0b:e1:2f:97:cc:ed:82:31:7e:1a:92:b1:cb:
         81:d6:a7:fc:44:cd:e4:5f:fc:10:f4:d7:fe:5c:13:fa:3d:e7:
         3d:23:9c:43:96:4a:73:27:9b:b9:bc:78:2d:f1:b2:5b:40:6f:
         d0:0e:78:65:a5:7f:c8:ad:56:0c:b5:4e:55:6e:65:43:34:30:
         9d:86:7f:d2:47:14:ac:b8:04:6a:5c:4d:36:d8:db:62:81:10:
         6b:40:72:2d:b2:22:56:70:fe:20:f4:ed:78:40:e2:a8:ed:c6:
         3e:9c:3e:b5:79:04:e2:3a:69:ef:10:7a:65:d5:46:a5:42:3f:
         bb:28:52:5e:6c:4f:da:3d:c7:9b:14:97:94:0f:4d:23:dd:09:
         9f:62:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:39 2026 by rpki-client