This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          gqKVGHhfl2kbOLKDgSiBfaGrdvHvYSlLkKW83fUnYII=
Subject key identifier:   BB:D7:D8:3E:08:27:5B:9E:30:12:71:2D:C9:EF:C6:E3:67:C2:21:F2
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       2226C1BC3B638867CAD061853563DB5DD8BA1640
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:33 +0000
ROA not before:           Tue 06 Jan 2026 18:59:33 +0000
ROA not after:            Tue 05 Jan 2027 19:04:33 +0000
asID:                     18734
IP address blocks:        189.204.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:26:c1:bc:3b:63:88:67:ca:d0:61:85:35:63:db:5d:d8:ba:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:33 2026 GMT
            Not After : Jan  5 19:04:33 2027 GMT
        Subject: CN=BBD7D83E08275B9E3012712DC9EFC6E367C221F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:6a:b4:12:d6:65:b7:66:a7:a0:64:f1:f1:
                    f3:33:89:c1:06:ae:5f:a0:00:22:46:a7:99:7b:27:
                    1d:dd:9d:2a:62:9f:7a:92:66:39:e5:d4:95:a7:b0:
                    9e:a2:3e:3e:64:ce:68:32:05:82:01:81:2c:85:40:
                    42:4e:1e:af:e4:3d:29:c6:75:e6:8a:75:95:f3:b1:
                    8c:97:59:69:06:f5:2d:91:42:23:bf:d5:40:4c:e5:
                    dc:32:f4:57:bc:46:32:e7:aa:3b:51:71:94:b0:8b:
                    6a:9a:26:f9:26:77:d3:ca:93:8c:77:0d:19:b9:ed:
                    33:ff:c3:03:1f:11:53:73:35:1e:4b:2e:be:5a:df:
                    1b:57:4a:45:0e:cb:1a:49:82:74:d6:d9:63:ee:95:
                    4f:90:99:e6:60:0a:4e:8e:64:aa:6f:84:80:71:10:
                    36:4e:91:3e:6d:c4:55:63:65:b6:0a:51:f1:de:dd:
                    ff:92:a8:4d:78:87:3a:be:bf:e1:2b:81:d5:be:40:
                    3d:74:cc:08:fa:36:74:33:68:19:42:8b:64:3f:0e:
                    54:5b:78:f2:3d:ba:78:3f:b8:d6:a6:11:67:0d:4c:
                    2e:65:dd:9f:1c:eb:d0:a0:5f:dc:22:89:78:dc:35:
                    3e:e6:4a:1b:88:fb:6b:60:9d:88:79:37:00:b0:9b:
                    50:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D7:D8:3E:08:27:5B:9E:30:12:71:2D:C9:EF:C6:E3:67:C2:21:F2
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3233352e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:41:fa:f7:77:c5:2e:b0:02:a4:8f:66:d3:8e:7b:c8:ec:
         49:ab:fc:0f:de:89:bc:60:3a:88:15:7f:e5:d0:43:d5:81:f4:
         92:49:0e:ac:81:3b:47:62:eb:08:b7:63:1c:2d:62:ec:86:0f:
         9b:7c:e6:d3:19:72:00:7e:9c:4d:42:d9:75:4c:87:38:8e:09:
         c3:76:2c:37:37:42:2e:ec:b3:c8:14:e1:cd:65:75:ca:ca:3a:
         a6:64:3f:0b:c1:fa:b1:b5:f0:eb:2c:ac:d5:6d:e6:18:c4:96:
         40:03:5d:b5:1f:3f:f4:8c:55:8e:b2:47:8a:95:f7:9b:36:1e:
         1a:18:5b:c4:2c:5d:2f:96:88:24:97:1e:d2:30:b3:cc:74:1f:
         f5:14:77:15:62:2d:fd:13:5e:4c:20:dc:ef:3c:79:ce:e6:9f:
         66:29:f9:fd:db:9e:db:ad:71:55:d9:1e:ca:1b:33:97:ff:ee:
         01:fb:18:f3:15:64:b7:1c:81:1c:6e:27:e3:7d:07:f6:cc:0d:
         9b:3e:8d:75:86:eb:4a:eb:9c:a3:37:03:1d:d1:7c:bd:74:be:
         03:c9:8f:82:1b:a6:97:84:99:b9:5c:72:05:bd:06:71:b2:9a:
         1f:73:5f:c2:b7:14:c0:24:ab:18:63:ef:8b:d2:ac:ee:54:fa:
         46:c0:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:14 2026 by rpki-client