This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e2037343138.roa
File:                     3230312e3232332e302e302f31372d3234203d3e2037343138.roa (raw, json)
Hash identifier:          FfadQDNvz4mG6nyHVw0gP2qiwlptQHlqladRV2UbvzA=
Subject key identifier:   5A:E1:14:76:C2:20:3B:FC:02:48:3C:24:BB:D5:D5:CA:70:38:8A:C0
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       6D11B299A2D149A889D4B2BDD18699975B531E5C
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:38 +0000
ROA not before:           Tue 06 Jan 2026 19:19:38 +0000
ROA not after:            Tue 05 Jan 2027 19:24:38 +0000
asID:                     7418
IP address blocks:        201.223.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:b2:99:a2:d1:49:a8:89:d4:b2:bd:d1:86:99:97:5b:53:1e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:38 2026 GMT
            Not After : Jan  5 19:24:38 2027 GMT
        Subject: CN=5AE11476C2203BFC02483C24BBD5D5CA70388AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:90:6c:32:38:aa:0e:b3:2a:dd:6f:22:e5:
                    c6:9d:5f:8b:7e:e3:59:f5:dd:96:26:45:d0:34:ad:
                    87:ad:2e:bc:c8:ad:e6:64:52:26:5e:a9:42:00:ae:
                    8f:76:10:11:ef:03:c3:88:30:23:98:69:c5:f0:c2:
                    c2:28:7f:b0:33:99:6f:99:38:bc:29:36:f1:06:08:
                    9e:39:f8:97:8c:fb:4f:ad:89:2c:e5:fd:48:35:21:
                    98:2c:a3:4b:75:a9:17:0c:fb:2a:a5:47:a2:a8:5f:
                    81:12:6e:18:2c:94:ec:2c:7f:be:00:33:c3:88:63:
                    a7:47:b4:0f:7d:bc:8e:e1:cd:08:a7:5a:b4:40:79:
                    47:d4:a9:86:14:02:7f:84:41:e8:72:3a:cf:94:4e:
                    cd:cb:86:e3:87:11:ce:97:e6:90:d0:ec:2c:12:96:
                    44:03:62:4a:c5:e6:61:8c:04:24:9b:af:97:c0:27:
                    04:a5:85:14:b3:a4:3d:ce:8d:9c:71:71:a6:13:87:
                    7e:b3:84:d0:56:95:bd:cd:96:6f:11:cd:a0:d0:c4:
                    bf:d0:ff:f7:d6:e2:02:ef:2d:ca:24:f4:bc:23:32:
                    99:cb:0f:03:10:b8:c3:e8:4a:a1:73:d0:f6:3c:15:
                    72:1e:75:79:52:a2:d9:49:df:b7:a2:e4:03:f4:2c:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:14:76:C2:20:3B:FC:02:48:3C:24:BB:D5:D5:CA:70:38:8A:C0
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.223.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:ca:0e:90:08:6e:e5:26:00:e4:98:ea:b2:8c:fa:0f:1d:7a:
         1d:44:21:ef:52:44:d9:60:ba:62:75:51:b4:4a:75:8f:cd:05:
         db:95:07:c2:bf:0c:9a:53:e6:38:a8:f2:7f:aa:1c:51:5e:6c:
         62:08:b2:2e:eb:00:c2:e5:2b:1c:b0:a7:63:4d:36:d6:3b:a1:
         aa:7a:ba:8f:1f:cd:4d:0d:95:db:e9:ad:11:f8:dd:af:71:07:
         eb:53:08:ca:1a:01:f6:ae:f9:32:2b:b2:8e:b2:af:47:d1:d7:
         8e:e4:65:01:a1:68:68:1c:52:49:4f:c9:b2:d5:3f:49:06:3f:
         33:28:7f:84:40:73:18:66:fc:d7:1a:7f:d9:6a:35:bd:3e:ff:
         c0:6b:e4:00:ac:e2:85:44:2c:46:93:1c:72:e4:d9:40:c4:27:
         a1:7c:52:6f:05:aa:00:5a:83:08:e5:23:42:97:56:0c:4d:40:
         6b:7b:82:d7:cf:26:e3:18:5f:88:ef:47:64:bb:1e:e0:6e:a7:
         5d:dc:65:73:3b:d0:b0:07:83:3b:23:26:30:ca:7d:d3:b5:e4:
         e7:a5:73:e0:4f:b3:f2:0d:4c:5b:6a:37:e9:5b:fb:8a:c5:79:
         2d:c0:e6:bf:6d:0a:f3:25:31:d0:ac:53:d7:80:d2:5a:ce:ed:
         90:f5:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:32 2026 by rpki-client