This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          fustoSAkWz+yZDlgPjtzHh+Xho5INejU7StQu+/lCfQ=
Subject key identifier:   58:8B:A4:E7:A0:94:6D:2A:69:95:1B:B1:7B:A7:06:2A:CE:02:FE:89
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       3E7D4B1C4C2AB63D0F84EA0A13457A8A0F8CC467
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:27 +0000
ROA not before:           Tue 06 Jan 2026 18:59:27 +0000
ROA not after:            Tue 05 Jan 2027 19:04:27 +0000
asID:                     18734
IP address blocks:        189.204.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7d:4b:1c:4c:2a:b6:3d:0f:84:ea:0a:13:45:7a:8a:0f:8c:c4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:27 2026 GMT
            Not After : Jan  5 19:04:27 2027 GMT
        Subject: CN=588BA4E7A0946D2A69951BB17BA7062ACE02FE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:9e:a8:da:48:30:2e:29:1d:02:c8:3e:43:
                    c8:6b:c7:d3:d6:cf:dd:3c:0c:e5:af:b5:9f:cd:d8:
                    2f:33:c6:f5:05:8a:d0:87:67:58:6d:e8:3a:04:49:
                    8c:d4:0c:61:83:48:c0:f8:a0:cf:2a:cd:22:e8:a5:
                    a4:fb:b8:0a:98:f3:2d:c7:20:e8:05:a5:67:8f:b9:
                    90:38:f7:75:13:4e:3d:19:19:9a:92:6c:77:71:cb:
                    ee:39:fe:e6:be:2b:5c:88:87:b9:ba:e4:b0:46:e2:
                    d3:8e:7b:04:4f:01:48:9d:ef:cd:e4:51:d6:34:81:
                    b3:87:53:b8:44:dd:8c:2b:f3:34:9d:8d:bd:52:0f:
                    76:0f:b1:4a:08:43:25:dd:31:3f:2b:05:45:04:f9:
                    7a:11:06:65:f7:13:0a:e8:b3:ad:0c:12:9f:b3:11:
                    16:79:16:23:f9:b6:91:6c:fd:f1:b5:23:29:14:d7:
                    50:51:15:34:61:e3:c3:74:ff:32:8a:df:5b:a1:cf:
                    8f:07:8f:51:0a:ab:29:40:58:36:cf:03:be:af:85:
                    09:86:92:ca:30:fc:5b:7b:a0:0d:dd:12:e1:d3:a0:
                    86:db:8d:64:34:75:1d:15:62:40:47:82:be:59:d1:
                    13:d5:a7:ff:b5:d9:a4:5f:ae:6e:2b:32:76:87:1d:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8B:A4:E7:A0:94:6D:2A:69:95:1B:B1:7B:A7:06:2A:CE:02:FE:89
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:07:49:8d:26:45:7c:d8:b0:84:df:9f:13:34:69:f0:0d:e9:
         db:ff:b9:56:b7:89:b5:2d:3a:5d:72:cd:df:0a:30:04:e3:d6:
         ec:5f:be:da:54:07:ba:93:04:69:be:c1:72:7c:32:62:78:09:
         21:82:d0:0c:88:c2:59:b6:f7:15:7a:6e:22:35:8b:2e:d9:5e:
         8d:8a:b9:54:43:7b:cf:41:49:fb:2c:e5:87:5e:7b:e1:fb:35:
         a4:56:03:cc:e8:fb:0d:7a:83:d5:7b:9d:86:38:ef:1a:e0:13:
         68:77:72:68:e7:6f:0d:4e:67:93:43:7c:ef:a4:43:32:fa:52:
         2e:84:d0:47:99:cc:f6:01:fc:2f:fe:53:7c:cd:79:65:ab:8d:
         c6:5d:ff:66:36:dd:42:d1:a4:e0:1b:c1:dc:20:92:80:34:b6:
         b8:f0:a4:93:44:5e:60:51:51:09:90:0d:f5:40:b5:80:04:5e:
         60:d6:51:41:29:64:ea:32:44:25:2a:2f:10:4a:a3:dd:ab:be:
         b5:61:4e:3e:00:64:19:2d:2c:cd:4c:5d:9c:bb:6b:48:64:3d:
         64:fb:27:e6:2d:41:ba:79:36:c8:39:47:39:7a:67:50:51:da:
         03:7d:33:ff:05:7f:e7:41:01:49:06:38:f5:fe:48:06:9d:23:
         bb:f3:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:56 2026 by rpki-client