This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa
File:                     3135322e3230362e302e302f31352d3232203d3e203237373235.roa (raw, json)
Hash identifier:          2KNDbKiRYUezKkvCR8N3lTvkabbynkdo23VALeH0LE4=
Subject key identifier:   9E:DC:A2:CF:31:2A:8D:60:0E:7F:FD:6C:6F:EF:D4:FF:9C:0B:DF:3F
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       38A7F53FD3CC655281039A1C5D79518D73FB4EE4
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa
Signing time:             Tue 06 Jan 2026 19:39:00 +0000
ROA not before:           Tue 06 Jan 2026 19:34:00 +0000
ROA not after:            Tue 05 Jan 2027 19:39:00 +0000
asID:                     27725
IP address blocks:        152.206.0.0/15 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a7:f5:3f:d3:cc:65:52:81:03:9a:1c:5d:79:51:8d:73:fb:4e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Jan  6 19:34:00 2026 GMT
            Not After : Jan  5 19:39:00 2027 GMT
        Subject: CN=9EDCA2CF312A8D600E7FFD6C6FEFD4FF9C0BDF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:e6:27:2f:30:de:50:4f:73:6d:55:db:11:
                    c0:53:c5:f8:f8:0c:82:87:8b:58:53:90:ff:59:f1:
                    04:ac:b1:71:04:2b:a0:51:1b:04:c4:9e:af:5d:a3:
                    ab:82:bf:73:73:4b:72:24:fe:d7:53:60:62:66:90:
                    57:c1:f1:04:c2:14:8b:8c:e7:b5:d5:4d:fb:f3:08:
                    47:d2:69:ac:c2:64:2b:8c:e0:10:41:ae:e3:bb:d9:
                    eb:c5:56:00:37:5f:d5:4f:74:a8:8f:bf:bd:d9:ae:
                    ff:ff:e6:90:ee:7e:82:eb:74:2d:cf:c2:4c:d2:fa:
                    da:5f:6b:35:a7:44:fc:af:ae:7f:7c:d9:33:24:25:
                    8f:f4:00:d3:8e:85:9b:9b:47:39:ec:e5:4c:07:3a:
                    38:74:d1:81:5b:57:85:aa:48:56:06:c0:fd:df:ea:
                    99:2a:27:a9:bd:2e:a1:06:59:8c:af:fd:1b:e4:09:
                    8e:5d:4b:ed:7c:40:ac:45:9d:b3:4c:eb:57:f4:c8:
                    ed:55:25:dc:d2:b4:89:9a:08:b1:d1:95:3e:50:97:
                    da:25:56:fc:b3:c7:cd:d7:99:00:48:23:78:78:dd:
                    ed:cb:8e:b8:08:78:ea:ff:22:d7:37:bd:a1:ed:54:
                    cc:22:be:35:ad:f6:33:db:eb:ce:d6:5a:7c:95:d3:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:A2:CF:31:2A:8D:60:0E:7F:FD:6C:6F:EF:D4:FF:9C:0B:DF:3F
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3232203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.206.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:4b:7f:96:e5:1d:41:a1:f5:ad:b1:74:ba:01:80:48:1c:
         52:21:d3:81:f1:9d:a2:d8:28:90:64:a3:44:2a:0f:b9:4f:10:
         d9:6a:30:2a:2b:b7:c8:1e:34:c4:6a:8e:5e:50:c0:4f:ae:fe:
         c2:79:a4:1f:17:6b:4b:54:9b:38:ed:38:c3:c7:fd:63:dc:71:
         2a:4c:49:0c:d4:66:c7:6d:91:a0:5f:54:00:ed:55:22:80:6d:
         51:a8:38:85:d7:2c:f1:6c:61:6f:b0:65:9b:a2:fe:d2:ee:46:
         05:56:a6:71:b5:0d:81:9d:96:4b:88:42:ac:76:1a:9c:cc:d2:
         83:4d:88:6a:43:8d:f9:13:7c:d2:e3:7e:bc:1c:a8:b6:fa:0c:
         07:7a:67:c3:2e:a3:b0:76:36:9c:5a:ac:ee:74:33:33:9d:3d:
         56:9f:3c:dc:12:8d:cb:f1:ff:2e:f4:20:be:58:4f:bd:e7:4b:
         07:0e:c8:ea:2b:8b:b7:7b:1d:fc:40:48:56:6c:45:92:2e:b8:
         41:36:2f:20:04:f0:14:85:90:08:78:38:e7:63:bd:28:ed:ca:
         87:f5:5b:d4:a3:9c:30:1e:23:46:13:47:58:e4:84:f2:0e:af:
         85:cf:a4:dc:19:b0:8e:11:8d:2f:5f:01:2d:e1:a3:67:c3:52:
         31:1b:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:19:57 2026 by rpki-client