This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32342d3234203d3e2037303439.roa
File:                     3132382e3230312e32302e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          CouJxBh99BhSsgwEUufhaAk4Rve+0TxcUkfboZHlLK8=
Subject key identifier:   DC:0F:76:2B:80:E3:A4:95:88:6E:CC:6E:56:DA:51:45:B8:FC:C9:CD
Certificate issuer:       /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial:       64BF7E52436F3B82906CD94CB34FAA879472B4FE
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 06 Jan 2026 19:29:09 +0000
ROA not before:           Tue 06 Jan 2026 19:24:09 +0000
ROA not after:            Tue 05 Jan 2027 19:29:09 +0000
asID:                     7049
IP address blocks:        128.201.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:7e:52:43:6f:3b:82:90:6c:d9:4c:b3:4f:aa:87:94:72:b4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
        Validity
            Not Before: Jan  6 19:24:09 2026 GMT
            Not After : Jan  5 19:29:09 2027 GMT
        Subject: CN=DC0F762B80E3A495886ECC6E56DA5145B8FCC9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:73:0b:58:fc:04:b8:dd:2f:d7:27:24:44:
                    46:0c:53:11:83:5b:33:c2:f9:7d:61:c0:d7:9a:d6:
                    e3:1d:01:48:cd:ef:76:4d:7e:98:6b:32:e0:d3:47:
                    24:7e:e9:52:17:32:bb:d1:74:c1:c1:4f:48:f3:ca:
                    68:78:bd:cd:ae:b7:9d:69:57:9e:72:f0:63:d3:3d:
                    67:8b:89:30:c4:d1:d4:11:ed:c1:aa:f5:a4:bd:31:
                    57:ea:5f:73:0b:ac:7a:bf:26:38:ce:70:48:76:50:
                    87:64:c6:a9:3b:f4:88:b3:b3:35:cc:5b:0a:52:31:
                    66:02:69:14:83:85:df:60:1d:87:73:4f:0c:79:81:
                    b0:98:c9:b9:29:a7:7c:7e:d0:f4:7d:d3:6b:4c:fe:
                    b2:8b:72:09:a0:94:05:32:0f:76:64:45:39:eb:84:
                    9d:c4:54:23:bc:be:9f:db:6c:cd:08:55:52:61:8b:
                    02:57:27:78:ed:ab:47:11:30:d7:29:e8:1d:6d:ed:
                    4a:1f:57:9a:e2:16:46:33:dd:a4:5a:54:a5:23:ff:
                    64:03:c9:90:b8:d1:15:4e:0e:9b:b7:bb:60:d0:1a:
                    ab:ce:cf:f8:f5:22:e4:29:54:d5:8c:43:09:9a:4d:
                    1b:b6:16:73:1e:4a:e6:bc:b1:cf:7e:36:5b:52:45:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0F:76:2B:80:E3:A4:95:88:6E:CC:6E:56:DA:51:45:B8:FC:C9:CD
            X509v3 Authority Key Identifier:
                keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32302e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:3f:93:2a:8c:e5:cf:a1:dc:a5:13:0f:c2:80:38:0b:b9:
         2c:f4:a3:8d:c8:13:1e:9b:12:30:11:4f:10:90:0f:7f:f1:ef:
         b1:77:b2:0e:e7:fa:52:48:31:79:0e:f9:61:ec:bb:d5:e4:2e:
         68:45:b0:8b:87:a0:5a:4d:2e:9b:cb:60:3c:ed:6c:64:a1:82:
         a8:46:ce:77:96:a6:95:49:4d:77:0b:80:f7:4b:8c:28:3e:a5:
         41:ca:72:fd:c3:1c:38:33:1c:92:e4:c4:8d:e2:87:d5:2b:22:
         07:a7:23:71:4d:d7:fe:f8:e0:2b:87:ca:90:dc:e4:4c:d8:41:
         30:63:91:d8:64:68:6c:2a:74:88:97:fa:93:58:59:ef:e7:aa:
         e7:c4:ee:17:8d:06:69:54:0d:ac:2c:ca:de:7d:c8:19:c6:2e:
         b7:2a:ca:3a:3c:72:ea:4b:44:b5:b5:9d:e0:40:55:1f:8a:c1:
         cf:d9:5a:a0:86:a0:0c:8e:3b:3b:71:60:04:3c:24:01:c6:82:
         d4:79:c0:36:28:86:a7:4f:db:2a:36:3a:00:c1:80:6f:39:44:
         2c:e0:16:3f:2f:22:3e:48:cd:5d:e8:6e:a2:74:02:2c:3c:99:
         f2:a1:b0:d8:e0:7f:a2:5a:f7:cb:c7:1b:ca:93:c0:00:b6:aa:
         1e:15:ee:67
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZL9+UkNvO4KQbNlMs0+qh5RytP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVBQTEyRUMyODY4QjkwQTY5M0VFQUQyNTYzMkIxNUUy
NDUyNUVEMzAeFw0yNjAxMDYxOTI0MDlaFw0yNzAxMDUxOTI5MDlaMDMxMTAvBgNV
BAMTKERDMEY3NjJCODBFM0E0OTU4ODZFQ0M2RTU2REE1MTQ1QjhGQ0M5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9r3MLWPwEuN0v1yckREYMUxGD
WzPC+X1hwNea1uMdAUjN73ZNfphrMuDTRyR+6VIXMrvRdMHBT0jzymh4vc2ut51p
V55y8GPTPWeLiTDE0dQR7cGq9aS9MVfqX3MLrHq/JjjOcEh2UIdkxqk79IizszXM
WwpSMWYCaRSDhd9gHYdzTwx5gbCYybkpp3x+0PR902tM/rKLcgmglAUyD3ZkRTnr
hJ3EVCO8vp/bbM0IVVJhiwJXJ3jtq0cRMNcp6B1t7UofV5riFkYz3aRaVKUj/2QD
yZC40RVODpu3u2DQGqvOz/j1IuQpVNWMQwmaTRu2FnMeSua8sc9+NltSRRc/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3A92K4DjpJWIbsxuVtpRRbj8yc0wHwYDVR0j
BBgwFoAUJaoS7ChouQppPurSVjKxXiRSXtMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NzE1ODc3MDE0RDZBMzU2MkI5MDU5N0VDMzk0QjkxNEYx
NkZEM0E1M0M1ODkzOUE3NzAzODhCM0ZFN0Q3MjdBLzAvMjVBQTEyRUMyODY4Qjkw
QTY5M0VFQUQyNTYzMkIxNUUyNDUyNUVEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUFBMTJFQzI4NjhCOTBBNjkz
RUVBRDI1NjMyQjE1RTI0NTI1RUQzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODcxNTg3NzAxNEQ2QTM1NjJCOTA1OTdFQzM5NEI5MTRGMTZGRDNBNTND
NTg5MzlBNzcwMzg4QjNGRTdENzI3QS8wLzMxMzIzODJlMzIzMDMxMmUzMjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACAyRQwDQYJ
KoZIhvcNAQELBQADggEBAA0QP5MqjOXPodylEw/CgDgLuSz0o43IEx6bEjARTxCQ
D3/x77F3sg7n+lJIMXkO+WHsu9XkLmhFsIuHoFpNLpvLYDztbGShgqhGzneWppVJ
TXcLgPdLjCg+pUHKcv3DHDgzHJLkxI3ih9UrIgenI3FN1/744CuHypDc5EzYQTBj
kdhkaGwqdIiX+pNYWe/nqufE7heNBmlUDawsyt59yBnGLrcqyjo8cupLRLW1neBA
VR+Kwc/ZWqCGoAyOOztxYAQ8JAHGgtR5wDYohqdP2yo2OgDBgG85RCzgFj8vIj5I
zV3obqJ0Aiw8mfKhsNjgf6Ja98vHG8qTwAC2qh4V7mc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:41 2026 by rpki-client