This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa
File:                     3230302e3131322e33322e302f31392d3234203d3e203136363239.roa (raw, json)
Hash identifier:          Rb7dQXUPOQEh6ttOWpSAcBhf3VK2ZfOsY6YfDDjHCSY=
Subject key identifier:   34:41:DD:43:08:D5:9A:A3:15:62:26:5F:21:12:E5:FE:4E:2D:C7:82
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       6192589714BBE4CEB5D5FB77FE6EA143D7D363C1
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:55 +0000
ROA not before:           Tue 06 Jan 2026 19:19:55 +0000
ROA not after:            Tue 05 Jan 2027 19:24:55 +0000
asID:                     16629
IP address blocks:        200.112.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:58:97:14:bb:e4:ce:b5:d5:fb:77:fe:6e:a1:43:d7:d3:63:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:55 2026 GMT
            Not After : Jan  5 19:24:55 2027 GMT
        Subject: CN=3441DD4308D59AA31562265F2112E5FE4E2DC782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:9b:df:8c:90:64:2c:cb:df:bf:a6:60:10:
                    38:ad:7f:8a:c8:e6:9b:e3:46:6a:2b:6b:12:7d:39:
                    35:e3:3e:11:cd:89:fc:3f:27:bb:42:64:26:71:60:
                    40:b4:3e:86:70:46:f7:00:95:d1:f1:d3:6a:b9:d2:
                    48:a5:88:dd:0b:b2:f5:fe:07:5e:14:bf:ad:91:23:
                    4d:fd:b0:a6:d7:dd:ca:4e:c1:2d:37:92:70:4a:3e:
                    9e:d9:22:38:7e:35:71:e1:d0:14:a7:73:44:9e:74:
                    12:c2:f6:2b:38:4b:95:65:09:3a:9d:5f:e2:d2:45:
                    6a:8f:d7:f2:73:d1:cb:a7:c6:45:96:14:6d:8f:d4:
                    ba:f3:16:10:27:1c:2c:f0:a1:8a:9e:0d:8d:62:11:
                    7c:ab:2e:9b:b4:af:a3:e9:5d:27:36:22:7a:f8:3b:
                    3d:40:4e:c4:f4:74:a1:4a:c8:2c:a2:ed:9c:c3:10:
                    94:a3:95:de:da:ff:f0:70:03:39:49:e1:1d:db:af:
                    39:67:34:b2:14:d8:74:5f:ed:ee:63:a8:02:9e:68:
                    44:3f:43:b9:c8:42:bc:b1:ec:a1:ed:48:7d:53:28:
                    06:28:11:b5:1b:e1:31:7d:c7:1b:dc:6e:b0:87:2c:
                    1b:6c:15:ef:41:a2:c1:56:3d:d9:bb:c9:a2:ba:3f:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:DD:43:08:D5:9A:A3:15:62:26:5F:21:12:E5:FE:4E:2D:C7:82
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e33322e302f31392d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:14:f6:ab:91:ed:82:69:9f:55:51:63:5c:6a:c3:a0:b7:56:
         f3:af:08:4b:f8:66:2c:d2:d7:6c:4d:d3:09:9c:ee:3d:fb:7a:
         01:c8:d6:44:a7:a4:08:1c:5f:1d:34:8d:76:6e:70:8b:f4:6d:
         8b:0d:ef:46:d9:e3:2c:55:1f:3d:29:67:b6:41:f0:d4:b9:3d:
         cb:92:88:8f:96:09:40:d6:df:16:71:69:84:de:20:56:65:09:
         06:fa:1d:0b:b8:5b:5a:ff:5d:74:5f:bf:88:80:ab:c0:84:eb:
         fa:a5:cd:ff:66:1f:be:b5:c3:2a:4c:02:2e:7c:35:58:81:c0:
         f0:88:6e:5a:d6:8d:42:a4:d2:13:28:5c:38:97:61:74:59:49:
         89:27:a1:db:39:3d:c1:e9:4a:a1:4d:18:5c:9a:5a:bf:21:c1:
         d6:89:45:d9:f3:4b:10:3f:b3:31:ec:2e:e2:3c:6b:f1:8c:dd:
         1c:f4:71:a5:c4:42:15:99:fc:0c:b1:71:c4:a7:be:50:b1:01:
         4b:fb:20:da:38:dd:15:31:ae:c3:8f:6a:de:cc:0f:ba:2e:07:
         bc:60:52:93:b2:14:0f:d0:ff:b3:41:21:88:87:b8:23:0f:49:
         d2:01:0a:6c:5a:a7:bf:06:f7:a5:4e:01:1a:1d:99:bd:c2:bd:
         b1:83:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:50 2026 by rpki-client