This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa
File:                     3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa (raw, json)
Hash identifier:          ne4eonugOYXagt2xE7aRj/XinFvu7pvl2E6SleToRN4=
Subject key identifier:   18:02:BC:64:99:B7:A4:B0:25:E8:A3:63:A7:1C:57:32:03:A9:A5:7D
Certificate issuer:       /CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Certificate serial:       64B473D4A9FE0121D386C85DDD21D7539E6F47CC
Authority key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa
Signing time:             Tue 06 Jan 2026 18:58:30 +0000
ROA not before:           Tue 06 Jan 2026 18:53:30 +0000
ROA not after:            Tue 05 Jan 2027 18:58:30 +0000
asID:                     264630
IP address blocks:        200.106.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b4:73:d4:a9:fe:01:21:d3:86:c8:5d:dd:21:d7:53:9e:6f:47:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
        Validity
            Not Before: Jan  6 18:53:30 2026 GMT
            Not After : Jan  5 18:58:30 2027 GMT
        Subject: CN=1802BC6499B7A4B025E8A363A71C573203A9A57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:82:ab:7b:ce:df:d9:f2:91:b9:19:7a:db:
                    ab:6d:fc:aa:64:bd:e1:8b:cb:dd:92:d1:41:12:43:
                    33:26:b7:12:c1:8a:fd:be:9c:3b:8d:36:a6:7a:05:
                    ce:f8:8b:0b:9d:bb:72:75:42:5b:33:e8:30:49:49:
                    71:e9:48:b0:69:05:d2:73:bf:a2:60:c5:ca:bd:f2:
                    1f:5c:fe:ae:18:b8:74:0d:73:e6:59:d2:c9:d1:a5:
                    42:8d:49:66:f7:dd:5f:eb:ad:14:26:d1:11:0a:7a:
                    d6:0e:7c:76:b2:ce:bd:e7:97:32:6b:3e:bc:1d:d2:
                    b4:bb:2e:7a:09:e8:83:36:21:3d:80:fa:06:1a:ef:
                    ec:78:5c:94:0d:dd:1c:7a:ef:bb:fe:90:05:ab:e1:
                    e1:14:5a:93:cb:b3:14:3e:b2:76:3d:0d:52:37:4f:
                    b0:84:f4:80:10:36:c1:eb:2f:91:02:a3:e6:98:15:
                    3a:c9:2b:42:d4:99:ab:a9:7b:3d:40:61:7e:e4:eb:
                    a7:99:cb:a0:96:0b:43:52:20:b4:84:88:ac:02:81:
                    df:42:c6:9f:37:92:6e:0d:04:e9:5f:ce:14:c6:21:
                    04:23:5a:73:12:a0:18:e1:66:52:11:c1:fc:e2:a3:
                    db:db:3e:c2:e9:20:89:80:e5:eb:9a:d3:cf:bd:50:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:BC:64:99:B7:A4:B0:25:E8:A3:63:A7:1C:57:32:03:A9:A5:7D
            X509v3 Authority Key Identifier:
                keyid:25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/3230302e3130362e3234382e302f32312d3231203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:91:98:75:a9:8f:e0:91:6e:d7:48:38:2c:d3:15:18:c1:01:
         c6:7a:19:d8:3c:bc:cd:76:79:38:a4:d9:7a:f2:6c:fb:7d:63:
         8d:aa:34:dd:e7:d7:10:27:f2:dc:80:5e:28:14:50:ee:0a:ca:
         6d:da:ae:7a:ea:fb:62:73:87:70:eb:4a:df:38:b1:f0:df:28:
         43:ab:2e:42:d1:69:21:54:09:6e:b1:d3:b6:fe:7d:39:75:83:
         a5:03:13:32:b8:62:77:b5:85:30:6e:03:72:17:d6:cc:e0:1e:
         32:b9:92:e8:19:a7:a6:97:f4:a6:fb:90:54:a1:5b:95:aa:81:
         5d:94:f7:74:b5:bb:cf:4c:59:bb:97:fb:fc:a7:28:d9:49:99:
         63:16:08:e6:86:77:1c:2d:bb:e8:4d:47:17:ac:96:0d:a9:bc:
         7f:8a:8b:03:ff:3a:28:c1:ab:74:cc:08:8d:26:32:81:fa:e9:
         ed:2a:25:5f:f2:06:e3:ae:1d:e4:23:ba:45:de:ad:02:7a:bd:
         a9:22:c2:8c:39:6d:4a:6d:b0:c9:49:f1:a2:f7:a8:55:ad:85:
         21:2a:0a:5f:98:39:ba:75:27:c9:5f:69:05:db:c9:91:da:63:
         f0:34:6e:ae:fc:da:30:0d:45:d9:6c:e2:e8:45:c5:64:22:a4:
         8b:b0:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:47 2026 by rpki-client