This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa
File:                     AS28497.roa (raw, json)
Hash identifier:          FLtIncqVKUWjCFaPYMuPzWRk4p+j8Q7HjTI1QG3Kmno=
Subject key identifier:   6D:94:64:BD:54:29:E0:26:CA:7D:7C:00:6B:14:0E:2C:9D:4B:04:48
Certificate issuer:       /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial:       1CE4C26EF7F58AE95FFB9AB724519F5C72284FFC
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa
Signing time:             Wed 31 Dec 2025 17:56:58 +0000
ROA not before:           Wed 31 Dec 2025 17:51:58 +0000
ROA not after:            Wed 30 Dec 2026 17:56:58 +0000
asID:                     28497
IP address blocks:        200.33.0.0/24 maxlen: 24
                          2001:13c7:7014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e4:c2:6e:f7:f5:8a:e9:5f:fb:9a:b7:24:51:9f:5c:72:28:4f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
        Validity
            Not Before: Dec 31 17:51:58 2025 GMT
            Not After : Dec 30 17:56:58 2026 GMT
        Subject: CN=6D9464BD5429E026CA7D7C006B140E2C9D4B0448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:05:f3:0b:84:f8:e6:40:ee:89:33:12:d3:
                    ac:4e:39:23:1a:35:31:df:d0:53:49:90:d8:fb:c0:
                    32:a3:6c:b7:04:a7:ae:d1:16:85:fa:8c:b5:05:9c:
                    75:97:23:5f:d9:b5:4d:07:4d:13:b7:49:a2:5f:2e:
                    62:cc:80:3b:b5:04:f7:ab:90:a1:6f:ee:e7:6f:1d:
                    a6:a7:19:cb:9c:5a:ae:94:35:73:d1:38:eb:cf:17:
                    eb:6b:05:2a:89:d8:92:d3:b6:22:1c:9d:dc:fa:c5:
                    87:02:cc:f0:d9:94:87:b6:af:95:07:bd:f2:a3:18:
                    33:10:b5:34:4b:51:0c:30:22:ad:6d:e1:31:31:21:
                    73:ea:9f:41:f7:9c:bf:54:5c:29:87:f8:2f:9a:6e:
                    cb:43:5b:e6:f9:5d:ea:3a:df:1d:de:01:85:fd:23:
                    10:12:53:76:47:b9:67:ce:8b:1c:d7:b0:46:77:ff:
                    55:50:88:81:e8:52:84:88:16:98:9e:80:0d:2c:28:
                    35:70:37:c1:70:cd:88:d4:b6:05:bd:7f:41:0c:34:
                    be:b2:81:fd:2d:fa:21:73:11:f9:86:60:8d:cb:cc:
                    64:25:f9:b8:3e:fb:ff:7d:ae:f7:ef:6c:a5:d4:3c:
                    89:fe:50:ff:52:32:06:48:43:d8:75:fa:30:23:0a:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:94:64:BD:54:29:E0:26:CA:7D:7C:00:6B:14:0E:2C:9D:4B:04:48
            X509v3 Authority Key Identifier:
                keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS28497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.0.0/24
                IPv6:
                  2001:13c7:7014::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:12:26:42:a6:fa:3a:f7:38:4a:41:39:f2:be:de:11:ed:
         f6:48:e3:83:c3:c1:d6:ea:18:db:d2:94:65:a5:21:17:aa:06:
         8a:4c:8f:ad:93:46:b4:41:b6:2f:76:3d:bb:79:20:f1:57:1b:
         c9:de:d4:48:ec:dc:83:38:be:ea:12:26:1d:ac:02:19:dc:4f:
         c5:b6:53:cd:0e:43:08:b4:ed:af:06:cd:b4:ca:d9:c7:81:aa:
         d0:34:0d:fd:03:6b:c1:34:29:6c:0a:61:f8:fa:5e:f9:9f:ca:
         cb:cf:2c:16:e1:5f:f9:60:de:29:63:c8:a0:ad:1a:46:40:f8:
         f8:ee:14:a8:8e:36:81:81:57:54:61:72:11:25:10:95:d2:e3:
         ec:23:7e:5b:e4:0c:d7:54:58:b4:e8:88:24:2b:9c:53:51:9b:
         8e:7b:43:1d:f3:2b:28:f5:0f:52:a6:52:fe:e8:4f:70:1b:49:
         3d:f0:3f:9b:36:2b:80:2d:ea:84:08:d6:47:b2:1c:e8:21:16:
         b4:7a:88:dd:cd:d6:10:89:25:f8:ef:52:f4:f5:87:4d:e3:95:
         92:5f:8c:e0:07:65:18:b0:05:2b:fc:e9:15:71:0b:61:d9:c4:
         2c:8b:d4:a8:62:5c:d6:fe:1b:3a:4b:8d:4d:7f:1a:9d:fe:98:
         ed:2b:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:36:53 2026 by rpki-client