This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa
File:                     3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          Agc8LZzACqjyLONlkfksiT/nbsugDAbNHpgRH4/QWqw=
Subject key identifier:   09:3C:89:59:FB:3A:AF:77:25:40:EE:AD:CC:CB:76:5F:30:CF:48:F4
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       7834288B0A6FE24E3947424D623944BDB05DD990
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:53 +0000
ROA not before:           Tue 06 Jan 2026 19:19:53 +0000
ROA not after:            Tue 05 Jan 2027 19:24:53 +0000
asID:                     16629
IP address blocks:        201.246.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:28:8b:0a:6f:e2:4e:39:47:42:4d:62:39:44:bd:b0:5d:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:53 2026 GMT
            Not After : Jan  5 19:24:53 2027 GMT
        Subject: CN=093C8959FB3AAF772540EEADCCCB765F30CF48F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:a6:b8:59:85:14:96:dc:d7:4d:1f:43:89:
                    ab:14:8c:bd:a9:3f:15:f8:2e:13:c8:12:82:d7:cf:
                    0d:33:5e:ec:e9:59:e6:0f:15:32:96:0b:e1:5d:37:
                    41:85:be:38:00:af:7a:51:00:96:98:d4:f6:34:ab:
                    26:39:70:4e:06:8d:92:d9:5d:28:ad:00:02:92:0a:
                    6f:09:51:fa:73:0e:73:85:ef:3d:1d:a5:cc:8b:d4:
                    e1:53:dc:9e:cb:0b:24:39:07:f6:ac:ed:ff:32:5f:
                    e9:23:c8:5b:65:bb:9e:9c:38:fd:64:94:20:ae:74:
                    4f:72:28:df:9f:a2:26:54:f2:55:2a:58:93:21:93:
                    e7:2c:09:0d:f5:fb:45:8b:ce:de:7c:d5:53:7a:b0:
                    6d:21:6e:5b:07:ef:ac:df:a9:09:5d:f3:9d:54:cc:
                    04:cb:47:32:a5:11:12:b3:fd:24:43:94:1f:b7:35:
                    f5:67:bd:e8:ca:11:8e:69:87:99:47:19:3d:b0:a6:
                    7f:c5:56:8d:b6:89:ea:d8:e0:f6:60:f3:bc:d5:9b:
                    49:c3:40:c4:6f:b6:81:3d:f1:3e:52:44:e3:fe:73:
                    aa:1c:95:bf:d8:0e:3e:56:e1:03:db:46:48:70:94:
                    e4:5d:bd:15:ff:8b:3c:22:a5:71:04:7c:08:07:09:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:89:59:FB:3A:AF:77:25:40:EE:AD:CC:CB:76:5F:30:CF:48:F4
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e3132382e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:db:40:38:35:b3:5b:96:1b:37:4c:03:69:09:b3:4f:90:
         ec:81:8c:c9:67:79:3b:32:64:28:e3:08:5c:85:25:3e:09:9a:
         01:b0:e1:6d:b9:34:b0:cc:10:39:39:6a:70:ed:37:9b:fa:38:
         fc:84:a0:45:bd:6b:df:ce:e9:65:6b:5a:dc:69:d4:29:2c:36:
         b1:71:8e:f0:82:d9:24:37:f7:a6:46:0d:51:fb:53:8b:84:bb:
         0b:51:7d:39:a3:48:1a:dd:8b:05:89:46:fd:99:a1:9d:2b:1d:
         f3:47:ca:8e:7e:4f:c1:11:26:21:1a:91:28:7e:25:27:4e:fb:
         b8:5c:b5:36:a0:e4:e6:17:21:74:24:59:dd:ab:0e:05:2e:d4:
         f1:62:bd:4c:5d:fd:fa:79:20:5a:97:18:9d:66:91:a5:19:18:
         42:61:46:e8:db:39:ea:19:c6:74:ff:35:c6:a8:71:90:fb:84:
         0c:60:55:92:9e:e2:cc:64:1f:05:9a:6d:88:0c:75:0e:69:3d:
         3a:3e:ee:77:1c:b8:0f:69:8d:57:a7:85:4d:67:54:33:c9:b1:
         79:82:bb:4e:dd:70:de:0f:d7:0e:b9:d7:ae:26:69:61:9d:a0:
         8b:28:c2:96:57:38:e7:a9:5e:95:16:1b:c4:6d:b6:18:e0:36:
         d0:e3:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:22 2026 by rpki-client