This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa
File:                     3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa (raw, json)
Hash identifier:          CSRg3pQGsboiZSUBrPrC55mwfaUDTliy2zJwy2mgYtg=
Subject key identifier:   03:D0:DC:C4:3F:E0:32:41:BD:E1:09:54:E7:74:EB:75:2A:F3:3A:58
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2F0DF44D6EBA79F40F12893FA2D7C38C80400502
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa
Signing time:             Tue 06 Jan 2026 19:24:36 +0000
ROA not before:           Tue 06 Jan 2026 19:19:36 +0000
ROA not after:            Tue 05 Jan 2027 19:24:36 +0000
asID:                     52489
IP address blocks:        181.225.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:f4:4d:6e:ba:79:f4:0f:12:89:3f:a2:d7:c3:8c:80:40:05:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:36 2026 GMT
            Not After : Jan  5 19:24:36 2027 GMT
        Subject: CN=03D0DCC43FE03241BDE10954E774EB752AF33A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:a4:ac:5a:0c:d0:23:1f:fe:d8:20:e4:e8:
                    f8:29:9b:df:b9:11:bf:da:84:af:e7:dc:89:d0:ad:
                    75:4b:35:5b:a0:91:1c:16:ee:e9:e3:c6:4b:4c:12:
                    cd:c7:9a:aa:b9:e3:91:49:90:e8:b7:c2:b1:34:45:
                    8e:20:cd:ce:24:5c:a9:2c:ac:92:44:9e:cb:89:5e:
                    68:c5:d0:ca:8e:f4:bc:ee:97:b8:1f:d1:1f:9d:4c:
                    40:5c:67:48:43:5c:52:65:fd:5b:e3:ce:8d:8e:8a:
                    57:27:04:93:ed:1e:cd:de:2c:58:3c:3e:e0:c0:59:
                    ae:64:a8:42:90:51:c0:85:6b:93:b6:65:0a:fe:38:
                    aa:16:2b:e8:68:37:2c:a6:2c:87:da:22:7a:1f:74:
                    76:2f:5b:f5:3a:85:08:f0:d1:7b:99:76:8d:09:64:
                    d8:0d:bc:11:d6:e8:0d:31:3d:b0:e8:2c:59:59:e4:
                    30:89:51:c1:f1:8d:b1:8c:f2:2e:e8:a6:7a:77:61:
                    b2:76:58:99:ed:10:c5:dd:c2:41:6e:49:58:07:3e:
                    8e:94:3a:73:77:bc:13:ce:8d:7d:58:19:4e:31:84:
                    78:d2:ba:1f:a4:d9:33:1f:4a:32:00:88:ec:30:72:
                    a6:fb:20:32:4c:d7:2e:19:40:9c:02:0d:ad:42:73:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:DC:C4:3F:E0:32:41:BD:E1:09:54:E7:74:EB:75:2A:F3:3A:58
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:7e:aa:2a:d9:46:ed:fa:80:00:fc:66:7a:c8:a6:d2:ee:
         7a:45:c6:d7:10:5b:42:b8:ee:72:b8:f7:d5:31:29:5d:a1:07:
         9d:37:87:ba:63:ef:35:69:54:05:23:a3:ce:aa:51:00:0a:fc:
         b2:c5:89:14:09:23:55:5e:7b:ec:ca:c8:71:f5:cf:26:5e:38:
         68:b9:dc:56:9a:01:9e:e8:e7:f5:5a:3c:e1:9d:a3:ba:8f:72:
         4c:a4:90:91:29:70:b5:62:56:ce:01:fe:49:e5:c4:38:c5:48:
         29:d9:72:61:26:a6:45:f8:51:6e:5f:99:eb:75:d2:84:cc:03:
         34:2b:a3:8b:c9:ff:aa:44:76:a0:b8:c1:c2:ae:d2:3a:2e:d3:
         64:9a:14:06:66:57:2d:27:71:9e:1c:29:c7:f9:bb:79:13:f6:
         ff:41:e9:b2:6e:bf:7c:c8:ad:77:f2:7d:7d:6e:4e:aa:63:ce:
         18:94:eb:90:35:ea:2c:2d:ff:2d:66:c2:a4:23:95:d3:45:76:
         43:9c:f5:86:67:73:77:aa:b1:fb:00:95:25:e2:ba:70:06:65:
         e2:bb:28:16:93:d9:a9:38:26:88:5f:b6:f6:0f:53:34:a2:e6:
         2d:79:ce:8c:fd:0a:e2:fe:f4:9d:a5:f5:4c:b0:27:eb:e4:3d:
         d7:9d:4f:a3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULw30TW66efQPEok/otfDjIBABQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNjAxMDYxOTE5MzZaFw0yNzAxMDUxOTI0MzZaMDMxMTAvBgNV
BAMTKDAzRDBEQ0M0M0ZFMDMyNDFCREUxMDk1NEU3NzRFQjc1MkFGMzNBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ+aSsWgzQIx/+2CDk6Pgpm9+5
Eb/ahK/n3InQrXVLNVugkRwW7unjxktMEs3Hmqq545FJkOi3wrE0RY4gzc4kXKks
rJJEnsuJXmjF0MqO9Lzul7gf0R+dTEBcZ0hDXFJl/Vvjzo2OilcnBJPtHs3eLFg8
PuDAWa5kqEKQUcCFa5O2ZQr+OKoWK+hoNyymLIfaInofdHYvW/U6hQjw0XuZdo0J
ZNgNvBHW6A0xPbDoLFlZ5DCJUcHxjbGM8i7opnp3YbJ2WJntEMXdwkFuSVgHPo6U
OnN3vBPOjX1YGU4xhHjSuh+k2TMfSjIAiOwwcqb7IDJM1y4ZQJwCDa1CcyULAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUA9DcxD/gMkG94QlU53TrdSrzOlgwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzgzMTJlMzIzMjM1MmUzMTMxMzIy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEteFw
MA0GCSqGSIb3DQEBCwUAA4IBAQC2An6qKtlG7fqAAPxmesim0u56RcbXEFtCuO5y
uPfVMSldoQedN4e6Y+81aVQFI6POqlEACvyyxYkUCSNVXnvsyshx9c8mXjhoudxW
mgGe6Of1WjzhnaO6j3JMpJCRKXC1YlbOAf5J5cQ4xUgp2XJhJqZF+FFuX5nrddKE
zAM0K6OLyf+qRHaguMHCrtI6LtNkmhQGZlctJ3GeHCnH+bt5E/b/Qemybr98yK13
8n19bk6qY84YlOuQNeosLf8tZsKkI5XTRXZDnPWGZ3N3qrH7AJUl4rpwBmXiuygW
k9mpOCaIX7b2D1M0ouYtec6M/Qri/vSdpfVMsCfr5D3XnU+j
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:45 2026 by rpki-client