This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa
File:                     AS20207.roa (raw, json)
Hash identifier:          hEgdMb+TB3XMYF2NpPNTYKoE0TQ0nQfiuzO0p8vbN8c=
Subject key identifier:   A5:4E:BF:94:F5:83:FC:90:90:A1:F3:5D:91:35:4D:14:2B:DB:31:6A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       3CDA3002849C1F27952C2E1EBB72CFBF1354F179
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa
Signing time:             Tue 06 Jan 2026 19:10:32 +0000
ROA not before:           Tue 06 Jan 2026 19:05:32 +0000
ROA not after:            Tue 05 Jan 2027 19:10:32 +0000
asID:                     20207
IP address blocks:        179.40.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:da:30:02:84:9c:1f:27:95:2c:2e:1e:bb:72:cf:bf:13:54:f1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Jan  6 19:05:32 2026 GMT
            Not After : Jan  5 19:10:32 2027 GMT
        Subject: CN=A54EBF94F583FC9090A1F35D91354D142BDB316A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:21:3c:ce:0b:06:89:af:77:f6:bf:1d:84:
                    df:de:5b:38:fa:09:2a:c1:c1:7c:a0:e7:9c:c0:31:
                    41:b5:bd:50:6b:29:6c:b7:b7:d7:54:21:ea:17:5e:
                    97:86:99:39:c5:76:85:9a:fa:64:af:62:34:3f:71:
                    95:03:10:e6:af:7d:16:10:65:eb:c6:b9:7d:97:d3:
                    98:8a:87:28:cb:36:82:5a:b5:6b:11:2a:e9:40:44:
                    68:19:18:69:ce:51:5a:3c:72:50:94:c1:67:03:1c:
                    0a:eb:3e:5e:2d:29:bc:f0:c3:51:b3:1b:4d:e2:06:
                    62:02:1c:8f:93:2d:c4:d7:e4:b6:0c:b2:63:a7:47:
                    76:95:7b:dc:07:60:42:24:02:2f:c6:4d:34:56:b9:
                    1e:75:75:d4:5b:cb:95:4c:db:e2:ff:3f:b7:f0:9b:
                    37:5f:69:a7:c6:90:e4:3b:8c:0f:4b:9d:20:fb:2c:
                    2e:d7:dd:84:1d:55:39:4e:19:e1:f8:5f:95:6b:0b:
                    78:7f:92:3d:e2:c8:d2:f1:67:cc:d0:12:da:87:02:
                    ec:c7:85:d6:ab:5b:34:d6:3f:c6:28:02:38:a0:60:
                    ec:e2:3a:d7:15:3d:3e:e0:cd:16:18:36:76:21:70:
                    4b:46:81:57:08:3d:74:bb:74:1d:ce:85:45:34:d7:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4E:BF:94:F5:83:FC:90:90:A1:F3:5D:91:35:4D:14:2B:DB:31:6A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20207.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:7f:ec:d4:aa:fa:44:d4:ca:81:b9:a6:26:be:4a:68:46:
         81:59:c6:b6:32:f0:c8:47:78:80:6c:e2:31:f8:af:f9:2f:4d:
         b3:eb:66:24:7c:e9:71:e5:b3:dd:af:02:be:22:39:c9:15:5f:
         81:c0:64:37:f1:b1:c9:38:46:ed:44:f2:fc:87:fe:f8:72:0e:
         91:a2:26:6a:23:c2:d3:f5:88:08:8a:a1:43:ba:65:70:fb:8a:
         14:6f:49:03:ca:2a:9c:20:7c:c4:64:42:86:35:0d:d2:90:af:
         8e:35:ef:bf:9e:cb:5e:ed:a9:a2:28:5b:3f:7d:5f:75:11:58:
         26:82:c3:7e:39:ac:e8:0a:ca:91:e1:33:b2:4c:64:86:3e:bb:
         53:19:d4:b3:6e:55:21:ae:cb:54:ac:07:3a:e7:19:12:45:cb:
         5f:65:90:bc:8b:d7:e1:c4:28:ec:ac:58:b0:44:e2:ed:ff:4c:
         10:f4:13:29:3c:fe:50:81:61:bd:8a:f3:a1:f7:46:4d:df:04:
         a2:46:8e:65:92:24:d7:63:ce:bb:93:62:78:b8:1d:6c:4e:65:
         30:35:3f:86:d6:3b:9a:12:1c:40:e7:51:f8:87:5f:40:0e:9b:
         2d:07:2c:5f:d4:f4:e8:10:8e:69:89:62:15:bd:a3:3b:8c:72:
         49:aa:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:39 2026 by rpki-client