This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa
File:                     3230312e3134302e39362e302f31392d3234203d3e203138373334.roa (raw, json)
Hash identifier:          T6hRd4Pn0YFoFNMOumgsB3kEVDyPZe85EXRnGPVLoUk=
Subject key identifier:   13:73:06:2E:25:43:79:81:96:23:AD:A7:63:8F:27:EB:15:7C:A1:0A
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       4A029FD9D85867C1FC37BF3486819CFAACCE7E8F
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:23 +0000
ROA not before:           Tue 06 Jan 2026 18:59:23 +0000
ROA not after:            Tue 05 Jan 2027 19:04:23 +0000
asID:                     18734
IP address blocks:        201.140.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:02:9f:d9:d8:58:67:c1:fc:37:bf:34:86:81:9c:fa:ac:ce:7e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:23 2026 GMT
            Not After : Jan  5 19:04:23 2027 GMT
        Subject: CN=1373062E254379819623ADA7638F27EB157CA10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:f2:fe:8a:d9:12:02:37:58:c0:b2:2b:ff:
                    27:0e:52:8e:4e:54:b1:a5:e9:f5:77:e7:cb:41:70:
                    c1:b3:8c:6b:35:f0:0f:cc:50:e5:17:4c:71:0e:20:
                    2b:fa:72:b5:df:9b:c9:88:cd:d6:dc:dd:8d:7e:af:
                    b3:8d:9f:d3:ee:dc:75:ef:ab:ce:c9:9f:9c:83:c9:
                    88:13:39:96:41:93:99:61:ec:9e:5f:96:f2:b3:2a:
                    a4:7b:34:1e:db:ab:e7:82:c3:8e:7e:17:73:09:e0:
                    ac:11:03:f1:68:4e:ff:6d:48:7f:fe:b0:9a:a9:67:
                    ef:66:d3:6c:3d:ce:3e:bf:73:39:e3:7c:82:02:fd:
                    35:97:36:f4:88:0a:a8:c8:81:0a:c0:cb:26:ae:b9:
                    2f:db:77:47:74:ef:9d:77:3b:14:e7:c4:3f:35:cf:
                    5b:b4:c5:f7:3b:c1:7b:a6:5f:44:94:e4:91:aa:f3:
                    16:7a:81:6b:38:70:9f:7f:14:73:9f:e8:32:e0:b1:
                    6a:93:b2:50:3a:b9:c6:2d:70:ca:37:88:64:ca:0c:
                    a0:03:19:e6:8e:ed:86:6e:f8:89:d8:4b:98:70:49:
                    a7:80:6d:9a:12:c6:73:f9:a8:e3:92:75:c5:69:f0:
                    d1:21:78:66:30:8d:13:8d:30:81:27:c6:ad:c2:90:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:06:2E:25:43:79:81:96:23:AD:A7:63:8F:27:EB:15:7C:A1:0A
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134302e39362e302f31392d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:fd:22:c3:66:c9:cd:cf:32:04:46:28:67:fa:61:0a:32:
         00:d8:af:6f:30:71:f7:7a:89:f4:34:85:13:6c:68:a8:96:5d:
         34:c3:30:ef:5d:5e:75:d3:63:93:92:92:dd:f0:2b:ab:4f:f6:
         07:19:3d:37:da:e0:87:c7:34:a8:31:4a:4e:ec:9e:82:8d:fa:
         0c:20:08:8a:4d:c1:ee:9a:a8:78:be:70:7a:0c:a4:41:98:28:
         83:74:96:f5:1a:27:80:4a:54:d8:ff:6f:aa:0c:6e:a7:02:51:
         86:5a:b6:7c:ec:e2:c3:e7:97:3d:7e:04:63:b7:c0:29:e4:05:
         c7:06:b2:a8:d0:55:61:f1:10:da:8d:2e:1e:a3:0e:a7:49:d1:
         d1:85:d2:f7:e1:f4:d2:e1:e8:0c:be:c5:39:cf:b6:32:39:fe:
         f4:89:2e:54:21:d5:91:ae:2a:cd:f6:ce:25:fb:79:da:d9:f5:
         eb:8b:5a:fc:d4:fa:90:f4:9d:1e:91:64:43:77:2c:b2:21:bb:
         4d:94:35:c4:62:11:83:4e:64:4f:ce:4f:71:c4:d6:96:6a:a2:
         cd:83:8b:8b:75:93:4e:a4:e3:23:65:d8:e4:e1:e6:a9:72:9a:
         05:ed:4b:df:4e:71:ee:35:08:dc:d0:20:30:7c:ac:72:be:63:
         06:80:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:46:14 2026 by rpki-client