This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e203136363239.roa
File:                     3230302e3131322e36342e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          nwM0TMkH27dDWrVWMUd9RO6bqVmex/jarMa1xWAlcqU=
Subject key identifier:   29:46:A7:ED:46:32:B5:C6:45:9F:CB:E4:E5:B5:16:4C:76:D1:CD:F8
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       62783797D82A395D17570DEA724450EA18AEAA57
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:43 +0000
ROA not before:           Tue 06 Jan 2026 19:19:43 +0000
ROA not after:            Tue 05 Jan 2027 19:24:43 +0000
asID:                     16629
IP address blocks:        200.112.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:78:37:97:d8:2a:39:5d:17:57:0d:ea:72:44:50:ea:18:ae:aa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:43 2026 GMT
            Not After : Jan  5 19:24:43 2027 GMT
        Subject: CN=2946A7ED4632B5C6459FCBE4E5B5164C76D1CDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:bf:a1:f5:70:e1:df:fe:18:5b:1b:72:7b:
                    00:40:c9:c5:1a:4b:44:1c:93:34:82:86:09:c8:e1:
                    bf:9b:ea:01:7f:96:f5:53:f0:de:94:38:14:0e:d4:
                    e5:13:5d:dd:e3:a3:94:f0:e8:a0:e7:2b:c4:b0:b0:
                    2c:82:d0:bd:31:5c:1d:b9:f4:a3:05:96:ff:d3:91:
                    f3:84:77:62:ff:2b:51:12:ee:85:0c:5a:bd:cb:39:
                    fd:e8:32:e6:ab:8e:80:59:10:95:9c:14:37:74:d2:
                    8b:de:ee:d2:1e:5d:97:20:ba:87:2a:8c:8e:14:0a:
                    99:70:4e:0f:20:62:73:7a:37:2d:d3:6c:60:56:9e:
                    d2:03:a9:b9:48:e8:a1:a7:39:cd:5e:9b:2b:54:cd:
                    39:d7:d8:34:38:28:b3:17:6f:bf:8a:bd:a7:a4:90:
                    9e:74:8c:c7:f6:c8:88:81:37:9c:0d:92:54:5b:91:
                    b0:f3:c8:9b:2a:99:a4:fc:9d:28:b5:7b:d6:06:a1:
                    07:1c:4e:71:bf:4e:47:f1:74:84:96:1e:68:c0:2b:
                    7c:f8:1d:c5:76:9f:a9:2a:58:25:6d:8a:41:64:3a:
                    1b:58:68:bf:d2:2f:de:c5:dd:00:c8:e3:5c:8b:f9:
                    7d:ad:e2:4f:8b:6d:a5:66:cb:f6:fc:a4:e3:18:3d:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:A7:ED:46:32:B5:C6:45:9F:CB:E4:E5:B5:16:4C:76:D1:CD:F8
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e3131322e36342e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:e5:ab:fe:dd:97:48:8a:fd:eb:3a:3c:63:06:c2:39:26:f0:
         ae:cb:1c:4e:0c:f1:e2:95:8c:27:9c:6c:cb:c3:dd:c8:5b:74:
         87:21:f2:e6:5f:a2:0a:f9:75:56:21:46:8b:5e:fa:5f:38:f5:
         38:5d:0b:a1:ce:9b:c6:7a:a1:43:6b:76:fd:49:4e:61:49:cd:
         d0:34:87:14:43:1a:8a:54:20:dc:7d:1b:ec:28:b8:45:bf:fa:
         5a:d1:74:09:a0:26:4d:46:42:9b:54:cd:dc:78:ee:37:fc:ef:
         4b:ee:de:5d:53:5f:52:41:e8:01:c1:a2:f3:e6:62:01:c0:dd:
         a4:5c:4f:b9:aa:00:af:20:11:5e:a0:37:27:1a:da:9f:52:a0:
         5c:43:92:4b:1a:15:1d:b0:36:7d:56:84:73:51:35:f5:63:a1:
         2a:32:e5:2e:6b:25:e6:56:f0:0e:58:a0:5f:c6:98:9e:80:28:
         71:71:3d:f0:f4:0d:74:4a:f3:0b:b5:47:08:0a:2b:24:71:75:
         f7:f6:59:7c:c4:9c:6f:e3:71:a2:a2:38:63:d4:40:4f:14:af:
         40:f7:99:5a:48:92:47:a1:db:56:fd:35:6d:11:0f:1e:7e:ae:
         bb:a6:8d:92:55:e4:04:c6:59:72:c6:41:8c:db:b5:15:bb:4d:
         a8:b6:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:29 2026 by rpki-client