This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230382e302f32342d3234203d3e20323635353431.roa
File:                     3138392e3230342e3230382e302f32342d3234203d3e20323635353431.roa (raw, json)
Hash identifier:          /PEnxUX2tL2lbFGeZkYIPnWoArDpA4ftnswCG0LWu4M=
Subject key identifier:   CA:80:CD:5F:80:CC:94:1A:F0:E3:9E:68:E9:71:8A:E8:C4:C7:78:2C
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       39F1DBCA2624B4A87A3EDB8C340028D127E0CF0A
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230382e302f32342d3234203d3e20323635353431.roa
Signing time:             Tue 06 Jan 2026 19:04:31 +0000
ROA not before:           Tue 06 Jan 2026 18:59:31 +0000
ROA not after:            Tue 05 Jan 2027 19:04:31 +0000
asID:                     265541
IP address blocks:        189.204.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f1:db:ca:26:24:b4:a8:7a:3e:db:8c:34:00:28:d1:27:e0:cf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:31 2026 GMT
            Not After : Jan  5 19:04:31 2027 GMT
        Subject: CN=CA80CD5F80CC941AF0E39E68E9718AE8C4C7782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:07:3e:88:3b:77:b9:39:b6:ec:1f:5e:b5:
                    a9:35:6b:56:d1:2e:9c:54:aa:9a:a1:dc:e9:b4:36:
                    ee:31:4a:ef:ff:b2:98:47:fc:f3:19:c8:dc:14:9d:
                    c3:e8:68:6c:bd:c6:bd:c8:d4:2e:96:a4:a0:7d:b9:
                    51:13:91:76:44:bb:57:8b:dd:6c:9a:51:10:62:8b:
                    cb:83:e9:c3:b9:02:86:e7:a0:be:4f:54:59:18:e7:
                    5a:d3:12:81:6c:57:69:7d:64:a6:26:e5:a4:ba:55:
                    fc:b9:2f:3c:1c:32:0c:d9:72:1b:2e:a2:c8:4f:f5:
                    e1:56:b9:43:ea:c9:a1:38:35:8e:bb:f6:8c:0c:db:
                    99:1f:21:ad:ec:97:26:34:f7:a1:11:37:f9:ef:cd:
                    db:e2:92:b5:8b:51:dc:63:d0:b5:de:e1:38:25:db:
                    e8:1f:27:42:a3:7c:00:d6:ff:63:a4:11:3b:81:c5:
                    6e:52:83:98:52:bd:e7:1d:d7:c3:be:47:48:2f:16:
                    6d:e4:14:8b:2d:af:1c:28:a5:9a:43:a8:04:a7:4c:
                    a5:80:ee:8f:b9:4a:44:c1:5a:57:6d:04:e9:8e:47:
                    9e:95:6f:7b:a9:5e:fd:2d:f3:4c:e8:0c:c1:28:46:
                    f2:a1:25:71:21:80:2e:4c:37:6b:29:a3:47:32:35:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:CD:5F:80:CC:94:1A:F0:E3:9E:68:E9:71:8A:E8:C4:C7:78:2C
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3230382e302f32342d3234203d3e20323635353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:06:7d:1a:18:b2:2f:cc:13:15:de:1f:70:98:9a:a1:b0:
         d4:c4:e1:d9:29:f0:b9:d3:64:38:f5:81:27:01:23:bc:02:45:
         62:51:59:7e:a3:c0:33:47:f7:dc:67:73:12:33:c8:5b:76:b1:
         38:e2:78:15:63:e9:f9:5c:14:9b:0f:1f:ed:33:4a:77:66:bd:
         96:ff:cc:b0:6a:34:14:0c:d7:19:dd:ac:92:0f:15:f6:4a:e8:
         6b:17:02:1a:9d:ed:a3:95:7a:15:5c:e2:6f:d4:ad:2f:28:27:
         66:c9:a4:e5:14:85:33:a4:8c:4c:94:df:0b:35:62:79:3b:0a:
         a5:94:8c:46:7b:b5:fa:ab:e3:82:be:df:37:2d:f3:cc:c8:d1:
         ea:e4:9c:1c:c9:b8:c5:b2:0b:c8:96:4c:28:dd:ad:ea:8c:29:
         bd:c2:68:13:cb:e7:d2:9d:92:01:2b:ff:63:98:ab:3c:1b:22:
         9d:11:00:69:4c:98:f2:25:c5:6b:09:31:89:5e:ab:e5:34:2f:
         48:1e:38:37:49:0e:61:f1:25:b1:93:82:b5:2e:f8:8d:7f:d4:
         64:05:e6:ff:2d:bf:d8:94:a2:1e:f1:fe:98:fd:1c:59:6b:ca:
         0e:48:4a:3f:5a:c2:7a:3e:c4:c4:a7:b6:7e:83:15:bf:78:75:
         ca:7a:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:39 2026 by rpki-client