This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa
File:                     3230302e31302e3232352e302f32342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          gKEEP8RdcCVJf4vlYEtwa1x0rBeYBqunERmiweti7OA=
Subject key identifier:   84:54:B1:CD:DE:83:89:78:EA:FD:51:DB:EF:28:DE:AB:17:28:67:37
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       3BFE015B2F2B8A9FECC00AF97F784802008A9257
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:55 +0000
ROA not before:           Tue 06 Jan 2026 19:19:55 +0000
ROA not after:            Tue 05 Jan 2027 19:24:55 +0000
asID:                     7418
IP address blocks:        200.10.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fe:01:5b:2f:2b:8a:9f:ec:c0:0a:f9:7f:78:48:02:00:8a:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:55 2026 GMT
            Not After : Jan  5 19:24:55 2027 GMT
        Subject: CN=8454B1CDDE838978EAFD51DBEF28DEAB17286737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:bf:06:58:71:56:4d:42:b6:d2:45:30:e0:
                    84:be:ef:e8:35:91:83:ee:f7:7d:a3:e1:91:48:22:
                    49:52:dc:64:a1:8e:e9:c6:5c:6a:86:2f:f0:10:27:
                    c4:ce:37:14:fc:bd:26:c9:c1:33:15:c5:53:0d:0a:
                    18:e9:09:49:f3:de:90:97:bb:78:7f:50:34:9b:d4:
                    d8:11:4d:45:5d:17:99:1c:52:fe:e2:dd:36:9d:fd:
                    ed:5f:a6:80:a8:3d:c3:18:9a:a9:1c:0e:6f:c9:8b:
                    60:00:5e:33:02:24:83:7e:c9:c6:84:39:33:2c:bf:
                    09:78:53:f0:b9:aa:5c:a5:29:b9:14:12:1b:97:6c:
                    e7:88:19:13:45:c2:12:16:66:64:1f:07:33:ea:bd:
                    60:94:90:92:e6:4a:f3:81:ba:cc:04:0c:74:50:26:
                    51:48:ad:75:79:0b:c3:c0:10:7b:55:af:b7:6d:60:
                    09:77:59:8d:ab:90:9c:b0:c5:66:8a:0d:47:46:f8:
                    33:c9:63:19:57:73:2c:9e:02:2e:79:11:54:10:2a:
                    fc:32:e4:05:97:4e:bb:94:c2:ae:ba:91:36:69:06:
                    b5:d7:f7:c6:0a:8d:f4:f0:39:f3:f9:20:05:a4:43:
                    5b:49:2d:66:6d:3e:e8:7a:22:16:da:20:e4:b7:e7:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:54:B1:CD:DE:83:89:78:EA:FD:51:DB:EF:28:DE:AB:17:28:67:37
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232352e302f32342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:47:5b:c9:56:65:fe:63:39:7b:c6:01:00:b0:55:e0:be:94:
         49:d6:45:f5:65:30:5e:3e:ba:11:3d:9e:c5:e4:e7:31:4a:4a:
         5c:93:1f:be:ff:ef:c3:62:bc:f2:82:e9:78:61:02:41:87:a5:
         58:76:61:b1:2f:4b:fc:49:84:cb:68:cb:7b:d6:42:6f:7a:7b:
         3d:98:d2:f2:d9:62:84:7e:b0:64:86:87:f1:92:e8:ce:03:53:
         0f:29:7d:6e:49:79:57:8d:5a:fc:7f:68:e4:57:ec:bd:97:76:
         3f:17:27:36:79:63:4e:a3:46:a0:ed:5e:40:2a:13:10:15:e3:
         f7:8f:dd:be:b8:cf:97:52:eb:3e:96:6f:e7:f8:b9:42:1c:d4:
         53:a5:3d:ac:a3:c4:2f:85:ac:70:4e:2b:40:c9:b9:d5:dd:07:
         05:8f:66:68:26:04:cf:b2:7d:74:3e:49:c1:88:41:20:ed:91:
         36:7a:9e:df:50:62:9d:70:6b:be:c5:c0:40:e1:66:98:38:b2:
         1e:82:45:a2:61:56:40:83:23:50:d4:2b:a9:0a:58:95:69:1c:
         9a:58:3a:10:3b:2c:73:42:e2:dd:69:22:f4:38:9c:1a:83:cd:
         f4:a9:7d:2c:f1:34:17:96:15:d2:e2:42:4e:98:1a:85:df:d4:
         8f:84:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:53 2026 by rpki-client