This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e203136363239.roa
File:                     3230312e3234362e36342e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          x0dqxFSCA3aWrRmo3BYON6k+dxMy6G70KkQ45LCXR7c=
Subject key identifier:   4F:81:C5:8E:BB:EA:06:3A:35:DC:21:2C:77:D5:4A:DE:80:4B:18:CC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       05DB6E48F0090DA19A54FF99C92F5AE97DC48344
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:51 +0000
ROA not before:           Tue 06 Jan 2026 19:19:51 +0000
ROA not after:            Tue 05 Jan 2027 19:24:51 +0000
asID:                     16629
IP address blocks:        201.246.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:db:6e:48:f0:09:0d:a1:9a:54:ff:99:c9:2f:5a:e9:7d:c4:83:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:51 2026 GMT
            Not After : Jan  5 19:24:51 2027 GMT
        Subject: CN=4F81C58EBBEA063A35DC212C77D54ADE804B18CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:b6:44:23:40:39:29:3e:65:12:84:6b:ec:
                    fb:4e:60:5c:59:ff:8c:e9:fe:bf:0f:90:b5:21:05:
                    76:a0:e3:f3:df:31:15:28:92:20:7a:d4:f7:c4:d4:
                    2e:37:ea:69:bd:73:c8:7c:48:73:29:fd:ea:f7:5f:
                    3f:e6:a8:d9:10:b8:80:1b:72:70:53:bd:45:f1:24:
                    09:d7:ed:a7:d9:3f:7c:54:ac:12:bb:3b:bc:07:c7:
                    61:ee:3e:e7:6a:98:38:e9:b1:ec:c2:86:07:77:4c:
                    ec:42:58:e2:ee:46:ff:2f:9a:cd:36:ce:71:ce:1d:
                    44:48:dc:22:6c:b2:13:46:66:4a:bc:eb:8e:ed:86:
                    25:37:60:df:ce:b6:7b:4b:af:29:60:9f:14:ae:e9:
                    1e:ff:bb:24:16:1b:4d:a4:ab:56:a0:6e:bc:dc:b8:
                    82:09:53:b5:5d:4f:e6:b7:af:6c:c3:a5:3e:7a:e7:
                    5c:f0:9a:0c:61:2b:b5:81:a5:93:d2:98:32:fe:68:
                    bb:1c:cf:d0:dc:f0:ed:76:54:0a:c6:9c:62:19:7d:
                    be:2f:b9:6d:de:9b:96:f9:1d:dd:57:70:3d:8e:67:
                    0b:44:1f:9a:09:f2:7d:39:24:75:95:06:e7:77:b2:
                    d3:f8:18:8a:6e:e1:9b:c7:61:f9:a2:de:3a:20:ec:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:81:C5:8E:BB:EA:06:3A:35:DC:21:2C:77:D5:4A:DE:80:4B:18:CC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e36342e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:27:b9:eb:a3:56:e3:0c:b9:8c:2a:8a:06:f4:9c:22:57:
         1e:0a:ce:0c:51:b2:62:06:75:f4:8e:a1:2d:a1:b0:0a:ae:e4:
         bf:61:3f:4c:65:9b:3e:56:68:04:f8:be:0a:45:84:8d:de:af:
         72:63:1c:8b:65:ee:31:e6:94:bb:14:50:89:d2:60:f1:8a:cd:
         1f:7a:4d:76:b5:2c:5d:03:40:21:11:00:53:7e:44:90:9c:81:
         46:8c:37:bf:31:6d:56:c7:57:1f:72:cd:c4:af:05:14:00:33:
         86:b4:9b:53:a6:fb:ba:99:ed:a9:0b:67:dd:75:91:2d:18:39:
         29:36:6a:8c:83:57:29:40:6e:06:4a:78:ab:32:11:b0:2a:42:
         e6:ac:07:08:76:20:70:53:52:6e:1f:8b:3a:21:b5:36:05:79:
         c9:c8:95:14:41:80:13:80:34:19:7c:20:ae:61:b9:39:b4:c5:
         d0:a4:be:eb:dc:f4:55:e9:91:54:76:35:11:9d:d3:93:d9:a7:
         66:fb:65:f2:c9:13:69:60:f3:f1:64:53:4f:3a:c9:fc:72:93:
         85:bf:a0:7b:b0:c8:ee:b1:d5:99:85:6e:a1:67:1b:71:df:c4:
         cc:68:40:5d:78:30:da:dc:26:80:a9:35:cb:6d:31:e9:9c:08:
         2d:d1:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:04 2026 by rpki-client