This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa
File:                     3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa (raw, json)
Hash identifier:          DDfYld9k+NRkkXnjsoMtD9sJnRPQ9g+pbSAmfGn7nkk=
Subject key identifier:   D1:24:B7:AE:7B:AD:6D:DE:4B:3A:0A:B6:36:87:77:AC:F9:CB:00:06
Certificate issuer:       /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial:       0643C2F8ECBBA7E9BAB4DC67DB6FFE1D5CFB7048
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa
Signing time:             Tue 06 Jan 2026 19:29:09 +0000
ROA not before:           Tue 06 Jan 2026 19:24:09 +0000
ROA not after:            Tue 05 Jan 2027 19:29:09 +0000
asID:                     265740
IP address blocks:        128.201.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:c2:f8:ec:bb:a7:e9:ba:b4:dc:67:db:6f:fe:1d:5c:fb:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
        Validity
            Not Before: Jan  6 19:24:09 2026 GMT
            Not After : Jan  5 19:29:09 2027 GMT
        Subject: CN=D124B7AE7BAD6DDE4B3A0AB6368777ACF9CB0006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:5e:e8:e8:e9:54:8f:dc:6d:17:d0:9d:fe:
                    b8:42:cd:fb:68:a4:dd:19:09:cb:b1:d2:1e:db:80:
                    63:45:77:bc:8a:64:de:af:07:77:ab:99:5f:ca:34:
                    87:7e:df:f5:6c:77:1f:a0:1a:61:27:4c:a9:65:d9:
                    9d:e7:c6:bb:60:d3:aa:17:4e:c5:23:53:50:74:4d:
                    b2:d8:02:4b:a2:2f:29:64:f5:3a:9a:4a:0e:17:4e:
                    38:34:ca:56:88:10:e6:5c:9a:2b:e3:69:03:75:89:
                    42:a3:f6:e3:32:22:73:36:a5:38:fa:c6:8c:b6:36:
                    64:5d:4b:3f:a4:d3:37:35:36:e9:f5:46:7b:22:53:
                    18:e1:69:b9:7b:8b:34:92:8c:c6:73:71:f5:5b:22:
                    87:58:72:0d:bd:9b:c0:f8:96:af:f5:9c:79:16:db:
                    8e:32:c4:51:04:19:45:4a:3f:d5:e1:79:53:e0:aa:
                    22:4a:b7:23:4f:4b:f6:3b:70:84:44:50:57:cb:14:
                    e8:aa:99:f0:b7:2f:ae:a7:01:ed:31:9b:a3:5a:8d:
                    8d:79:72:46:21:fe:86:76:8a:97:c0:44:9a:89:4c:
                    45:15:19:24:43:bb:61:69:e1:53:bc:51:b5:00:4f:
                    eb:1f:6f:95:3c:9f:e0:86:a0:2c:f8:68:2a:fd:da:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:B7:AE:7B:AD:6D:DE:4B:3A:0A:B6:36:87:77:AC:F9:CB:00:06
            X509v3 Authority Key Identifier:
                keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32322e302f32342d3234203d3e20323635373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:bd:d3:ad:26:1a:9c:4f:6c:85:99:0a:f1:d3:9d:5a:eb:90:
         d9:0e:b7:c5:50:49:3d:1d:6e:02:49:f8:48:a3:e1:bc:ab:ba:
         8b:19:7f:a2:a6:d6:7f:e4:81:8f:a3:d3:3d:77:0c:d5:48:44:
         74:25:5c:f4:13:6a:8d:ed:cd:2b:35:26:ff:e0:fc:75:a9:92:
         f1:a3:65:36:1a:20:9d:c6:65:59:ea:92:0b:fc:47:e8:ba:98:
         cb:73:11:1f:f8:0d:50:98:35:2a:b1:89:f8:93:66:1a:fa:5b:
         ef:a2:9a:24:c0:dd:ae:c9:d3:b2:5a:54:12:ba:e6:ab:67:2a:
         88:a4:0a:39:53:62:4a:cd:0a:25:3a:34:9f:bf:34:f7:44:c2:
         db:66:d6:62:7a:4a:ed:17:b9:aa:b3:e1:2c:12:db:5b:f5:6b:
         07:a6:a1:30:89:5d:d8:c4:2c:82:5b:4e:fc:0c:1e:9f:cb:f9:
         d9:3b:f3:3a:ca:73:a5:e9:a4:b7:cc:89:da:5b:e1:1d:ca:fc:
         82:91:96:04:21:60:90:5e:a2:69:0a:a9:a8:65:86:20:70:45:
         c1:46:73:1d:f8:52:f7:d1:f2:fc:82:11:09:ad:8a:3b:44:5d:
         79:60:77:50:03:04:ab:be:82:08:b9:55:eb:67:ad:16:11:36:
         9e:4f:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:53 2026 by rpki-client