This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa
File:                     3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          qh3H3J9gi0svP45oBh3oX3BuveFxg3OX2N6MVqcMq7w=
Subject key identifier:   44:45:05:0E:5E:3F:AB:84:81:03:5B:0E:9C:DE:6E:C5:20:87:7A:5B
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       25DA2C16C32530672BEFBF690EAE6E4F91E88FFD
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:14:20 +0000
ROA not before:           Tue 06 Jan 2026 19:09:20 +0000
ROA not after:            Tue 05 Jan 2027 19:14:20 +0000
asID:                     21575
IP address blocks:        207.248.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:2c:16:c3:25:30:67:2b:ef:bf:69:0e:ae:6e:4f:91:e8:8f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:20 2026 GMT
            Not After : Jan  5 19:14:20 2027 GMT
        Subject: CN=4445050E5E3FAB8481035B0E9CDE6EC520877A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:9b:b7:81:18:e1:a7:2a:68:10:e1:64:0a:
                    05:a1:b5:a2:4e:02:29:ca:e4:12:e1:8f:2d:22:5a:
                    4e:b6:8e:08:db:78:0d:48:3f:aa:4c:7a:11:78:89:
                    0f:d4:35:37:b1:16:3e:85:a6:76:7e:5f:bd:26:a4:
                    10:35:65:77:65:a3:1c:7c:56:e5:8e:27:c3:09:81:
                    48:33:92:d4:8d:46:4c:4f:dd:fb:8d:8c:6d:d2:a5:
                    15:9c:f1:4c:55:87:44:86:f6:c0:0a:8d:92:c9:32:
                    5b:72:f5:40:3e:4a:2a:e4:3a:b3:25:d9:fe:22:17:
                    13:a4:d6:52:29:ce:ca:c1:57:11:aa:53:da:20:97:
                    09:30:bb:02:36:83:bd:c2:13:1e:e8:78:95:67:34:
                    cc:27:d6:58:1a:e4:af:2d:0b:95:ec:a1:58:09:50:
                    6d:0e:37:c2:1c:ac:b5:d5:6c:89:45:18:93:19:9a:
                    3d:10:eb:3d:33:5f:1c:2a:0b:da:86:8c:01:09:99:
                    6c:67:dc:14:0d:b4:02:a0:e3:17:61:a5:70:19:00:
                    d0:b7:e5:92:55:76:44:bc:d4:aa:6d:15:60:02:a0:
                    70:34:1a:ef:99:62:37:78:31:e3:d2:93:57:30:29:
                    bb:7c:b2:24:02:1c:b6:ba:6d:2a:e2:fa:21:82:c0:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:05:0E:5E:3F:AB:84:81:03:5B:0E:9C:DE:6E:C5:20:87:7A:5B
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230372e3234382e3132332e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:37:ad:a4:1e:f9:64:5d:1c:9d:a4:01:c8:b8:03:55:c1:
         74:9f:0b:ae:8e:89:f7:5b:c0:14:2f:c5:89:b6:81:5f:79:dc:
         9c:ce:8a:a7:bc:8f:fb:3b:e2:b3:af:fe:ac:22:46:d7:9b:63:
         35:a1:b1:33:00:d7:65:b5:3a:ba:73:a7:01:eb:67:16:5c:7d:
         7c:ee:99:87:d3:6d:70:4f:b4:14:4f:79:20:f6:8c:18:84:b5:
         81:c1:55:b1:1c:70:60:4d:13:af:7d:9c:62:50:cc:74:63:76:
         c1:15:1d:69:f7:89:7e:61:5d:bd:6a:eb:96:e8:fe:c9:8d:91:
         b3:92:36:da:31:67:fd:6a:38:69:c4:a0:cd:3d:28:d6:8b:81:
         60:43:d9:f5:0c:6e:44:f7:29:8f:03:ca:00:b2:19:b6:3e:c1:
         2c:1c:50:02:6e:de:aa:71:ae:ae:43:60:10:92:07:f7:83:fa:
         a0:3d:99:88:bf:45:44:99:61:bb:b5:38:4d:5f:8d:d5:98:59:
         66:a3:51:cf:10:f3:df:b7:40:9b:93:54:87:a8:e2:af:9c:2f:
         c6:7a:ab:18:db:52:54:4a:c3:b2:f2:68:db:c1:98:4f:ed:48:
         70:f1:a4:6d:1c:e0:ae:92:e9:78:ba:ae:22:65:02:e4:f5:1a:
         f6:87:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:13 2026 by rpki-client