This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138372e3132382e302f31372d3234203d3e2037343138.roa
File:                     3230312e3138372e3132382e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          U5hEniQtKRFvXYv5QwAbEjYcG1ycNZkWIsuIjsMHnU0=
Subject key identifier:   BF:98:2D:88:BA:EA:7E:DB:5E:54:D1:EC:50:10:F5:BA:D8:20:BE:A0
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       452B3135EF966B0C2F5DECD320E4B762FDC678FD
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138372e3132382e302f31372d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:10:03 +0000
ROA not before:           Tue 06 Jan 2026 19:05:03 +0000
ROA not after:            Tue 05 Jan 2027 19:10:03 +0000
asID:                     7418
IP address blocks:        201.187.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2b:31:35:ef:96:6b:0c:2f:5d:ec:d3:20:e4:b7:62:fd:c6:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:05:03 2026 GMT
            Not After : Jan  5 19:10:03 2027 GMT
        Subject: CN=BF982D88BAEA7EDB5E54D1EC5010F5BAD820BEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:92:08:4c:26:ef:46:3d:a8:d0:e7:71:3e:
                    a5:e8:1e:c6:f2:9c:ec:7b:b1:af:22:68:fa:8d:2b:
                    46:fd:01:1e:a3:1c:c4:85:64:d9:8b:58:0d:cb:53:
                    fb:eb:64:41:97:01:93:89:fa:a5:0b:86:78:26:e8:
                    bd:db:ec:31:c3:ce:8a:0f:3c:8b:d4:46:c1:6d:a3:
                    e0:65:a8:2c:53:1f:f7:c3:43:31:27:fb:b0:f8:06:
                    df:1a:7e:b3:3a:0c:15:12:e8:64:65:f5:c8:d2:5a:
                    ba:27:12:da:52:50:65:c6:c6:74:5d:84:40:51:b1:
                    b7:c8:dd:e7:54:9f:c7:55:f8:cd:be:3b:8e:c5:a7:
                    27:49:94:f1:64:b3:da:09:3b:32:47:f3:84:12:04:
                    a7:57:c0:d7:d2:11:ab:25:73:b5:7b:48:af:94:73:
                    49:25:df:81:a4:38:8f:25:18:07:ce:ab:26:5c:25:
                    e3:39:31:5e:e1:52:97:1b:10:ac:74:5c:1c:5f:a1:
                    b8:9b:28:4d:f5:2a:20:b9:1f:ff:01:6d:97:5d:5e:
                    85:78:b8:f6:08:49:2b:1d:cb:28:b3:28:3b:de:6e:
                    66:1e:16:08:f0:0e:27:c9:04:7b:4a:b6:bb:d4:cc:
                    46:26:04:9a:95:40:17:bc:59:67:0a:2f:ae:e9:91:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:98:2D:88:BA:EA:7E:DB:5E:54:D1:EC:50:10:F5:BA:D8:20:BE:A0
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3230312e3138372e3132382e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.187.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:da:7e:e2:7a:17:54:ec:b1:ce:73:ed:08:f0:4c:7e:69:2c:
         71:d4:65:42:3c:8d:37:29:9c:f9:a7:4d:f6:e8:f7:a1:8e:93:
         97:68:ab:89:78:0a:7b:f9:2f:15:e8:24:04:94:a2:27:78:17:
         02:16:84:57:05:6d:ee:c6:6c:7a:a0:87:b7:6f:86:ed:14:48:
         e6:19:60:25:d2:3d:92:46:5d:10:46:1d:a2:81:7b:54:1d:63:
         7a:76:fc:66:04:f2:01:7d:98:c5:35:54:cf:3d:fc:7c:41:15:
         55:ac:9e:75:26:d4:35:c8:f0:ba:fd:1c:fd:34:86:b0:37:ea:
         f2:25:5c:65:ce:3d:a4:b6:08:b1:73:c2:ac:f4:98:3a:32:dd:
         5e:a7:35:7c:08:47:af:17:2c:d9:bc:c2:d4:d1:4d:62:eb:6e:
         6a:36:d7:c3:a7:d5:a6:40:a3:c0:39:9a:a7:b7:22:2a:dd:2a:
         6f:63:5e:a4:cd:44:18:2c:6e:c1:d5:91:7a:82:77:16:26:99:
         b6:2d:5e:7a:eb:08:14:4c:f0:b6:ef:ca:14:7c:17:b2:fa:5e:
         44:aa:1a:11:93:96:7f:16:09:e8:0b:08:04:f4:21:f8:a4:e6:
         57:5b:26:9d:f1:53:14:48:c6:db:db:92:7e:8b:c4:b5:89:83:
         72:f5:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:18 2026 by rpki-client