This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
File:                     AS28481.roa (raw, json)
Hash identifier:          He10DLTqUrmSNNp//hh1rc3O0bKWMebRRw7iGsDUF4c=
Subject key identifier:   96:7A:F5:72:4A:90:54:F8:7E:84:71:8B:9A:07:8C:48:AD:59:0D:57
Certificate issuer:       /CN=C586A9076CDE73FD896464010A3CE08E4C8FC4C5
Certificate serial:       4468F093E554BDE553D6EF39E4530F08FD4D4BA7
Authority key identifier: C5:86:A9:07:6C:DE:73:FD:89:64:64:01:0A:3C:E0:8E:4C:8F:C4:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
Signing time:             Wed 03 Dec 2025 18:50:00 +0000
ROA not before:           Wed 03 Dec 2025 18:45:00 +0000
ROA not after:            Wed 02 Dec 2026 18:50:00 +0000
asID:                     28481
IP address blocks:        177.225.216.0/21 maxlen: 21
                          177.241.236.0/23 maxlen: 23
                          189.195.46.0/24 maxlen: 24
                          189.196.168.0/22 maxlen: 24
                          189.199.248.0/23 maxlen: 24
                          200.92.220.0/22 maxlen: 22
                          200.92.232.0/22 maxlen: 22
                          200.94.228.0/23 maxlen: 23
                          200.94.230.0/23 maxlen: 23
                          200.94.232.0/23 maxlen: 23
                          200.94.234.0/23 maxlen: 23
                          200.94.236.0/23 maxlen: 24
                          201.132.132.0/22 maxlen: 23
                          201.132.136.0/21 maxlen: 22
                          201.132.144.0/21 maxlen: 22
                          201.132.156.0/22 maxlen: 23
                          201.164.48.0/21 maxlen: 22
                          2806:260:1012::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 11:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:68:f0:93:e5:54:bd:e5:53:d6:ef:39:e4:53:0f:08:fd:4d:4b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C586A9076CDE73FD896464010A3CE08E4C8FC4C5
        Validity
            Not Before: Dec  3 18:45:00 2025 GMT
            Not After : Dec  2 18:50:00 2026 GMT
        Subject: CN=967AF5724A9054F87E84718B9A078C48AD590D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:67:17:c8:5e:32:0e:ca:c7:eb:fa:e0:fe:
                    03:48:5d:79:13:3f:29:40:5f:68:2d:71:be:db:ca:
                    88:8a:6d:54:1b:17:86:ea:75:88:b1:c5:7d:58:5c:
                    67:04:e7:7e:21:33:bd:2b:ab:eb:fb:32:72:3c:47:
                    dc:31:79:a4:e6:61:58:60:15:85:9a:ce:6e:b4:80:
                    b3:b9:5a:c2:34:1b:7d:65:9e:10:3e:c0:c7:d9:03:
                    62:ac:3e:98:fd:12:7b:0f:d5:09:b9:81:44:f0:ed:
                    37:cb:58:94:f2:a4:f8:ed:31:c4:93:55:ae:f6:62:
                    f5:f7:1b:21:87:30:61:88:3a:8c:f0:1b:e3:10:8b:
                    e1:2d:79:20:67:73:96:4b:02:a5:1a:9e:45:26:bf:
                    1f:f9:b3:51:cc:77:68:50:62:91:f5:1a:1b:7c:ed:
                    32:44:cb:4a:4a:94:cc:6b:aa:65:e8:20:18:f5:39:
                    4b:5a:97:02:b4:96:01:c5:0b:ee:c2:78:da:81:96:
                    1f:c7:ea:9c:d0:c0:d3:99:a5:fa:c8:4e:47:1f:a9:
                    21:46:83:9b:c7:12:4d:89:38:75:42:4d:2d:55:3e:
                    36:9a:fe:4a:44:ec:e6:79:4d:38:82:eb:d1:15:7b:
                    ae:ca:00:ff:cd:bd:c5:e4:7a:f5:a5:81:94:ea:b8:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:F5:72:4A:90:54:F8:7E:84:71:8B:9A:07:8C:48:AD:59:0D:57
            X509v3 Authority Key Identifier:
                keyid:C5:86:A9:07:6C:DE:73:FD:89:64:64:01:0A:3C:E0:8E:4C:8F:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C586A9076CDE73FD896464010A3CE08E4C8FC4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.225.216.0/21
                  177.241.236.0/23
                  189.195.46.0/24
                  189.196.168.0/22
                  189.199.248.0/23
                  200.92.220.0/22
                  200.92.232.0/22
                  200.94.228.0-200.94.237.255
                  201.132.132.0-201.132.151.255
                  201.132.156.0/22
                  201.164.48.0/21
                IPv6:
                  2806:260:1012::/47

    Signature Algorithm: sha256WithRSAEncryption
         36:a7:83:9a:5f:2c:1b:57:d8:e0:3b:e1:28:b4:19:fd:28:ba:
         09:57:55:41:42:a4:8f:12:fe:c3:fc:0f:26:72:81:f3:d5:e3:
         80:fd:5e:c9:31:07:c5:cd:a8:a8:f6:50:ed:dc:6a:18:9b:20:
         ba:e4:8c:f6:3a:27:3f:86:9e:0f:77:ba:b1:d1:9f:7a:a6:d2:
         5c:42:e9:9c:bc:dc:08:0b:bd:2e:9f:69:00:88:2f:5f:df:63:
         8b:51:86:5e:74:cd:1f:0a:e7:99:96:73:3a:6f:93:c6:9a:d9:
         6f:3b:f6:a1:64:f9:8c:5b:a6:3e:26:6f:4b:99:43:2d:7e:40:
         82:c0:c4:83:91:bd:8a:b0:33:1e:b1:ac:16:43:23:70:bb:d0:
         6b:98:22:a8:94:c6:9a:ac:44:b2:8c:fe:29:20:bd:60:b8:a0:
         ac:ec:08:1e:06:56:96:38:2d:b3:f6:9e:59:b6:a7:c7:7a:78:
         98:db:b6:e6:a4:5f:46:a7:b6:92:75:99:4e:b2:ef:e6:c0:e1:
         34:aa:4c:09:3b:4c:f9:78:cd:0d:9d:c0:47:11:4d:8d:31:ce:
         31:39:0c:1d:54:81:a6:f0:b6:e4:5b:3c:6c:fd:b1:25:83:60:
         cc:11:d6:21:45:d9:a1:e1:19:17:73:7d:e4:8e:17:42:21:54:
         62:3c:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:44:31 2025 by rpki-client