This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa
File:                     3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa (raw, json)
Hash identifier:          /J5yNAXfJjqtHFmBlHTfkCS9MkDH+TByrZAlc13DVoQ=
Subject key identifier:   FD:FE:4C:E9:25:21:9C:01:1A:12:F5:EB:70:BF:E5:91:C9:4C:58:5E
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       2CC765CA967BDCA02098B8D3C991C57E0D6CBB31
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa
Signing time:             Fri 19 Dec 2025 16:35:00 +0000
ROA not before:           Fri 19 Dec 2025 16:30:00 +0000
ROA not after:            Fri 18 Dec 2026 16:35:00 +0000
asID:                     28506
IP address blocks:        201.139.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 09:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c7:65:ca:96:7b:dc:a0:20:98:b8:d3:c9:91:c5:7e:0d:6c:bb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Dec 19 16:30:00 2025 GMT
            Not After : Dec 18 16:35:00 2026 GMT
        Subject: CN=FDFE4CE925219C011A12F5EB70BFE591C94C585E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:16:91:71:7f:28:48:b9:b1:bd:10:7e:e9:
                    45:26:30:f6:38:0f:3f:b1:58:88:ea:c7:4e:d7:d2:
                    23:91:3a:58:25:47:8c:2a:3c:08:a5:38:4c:73:06:
                    26:a6:a8:13:ce:39:15:0d:c7:05:40:6b:0a:e6:73:
                    28:98:bb:78:3b:68:ef:7b:e0:90:ad:9f:61:36:6f:
                    72:50:65:5d:1f:a2:b8:b5:66:df:20:cc:22:fb:e5:
                    89:f8:c4:8b:ba:6c:ad:80:0e:4b:0e:bb:b5:da:c9:
                    bc:da:7a:b4:25:e6:c7:34:00:78:82:f6:33:09:96:
                    ed:e1:3c:4a:4a:9f:e4:dc:e9:be:31:d7:55:4a:91:
                    33:a5:91:6e:a1:2d:c7:bd:07:34:bf:00:49:92:96:
                    32:8c:48:c3:b1:b3:a8:9e:de:16:32:cd:44:36:08:
                    ce:56:bf:33:b1:74:ca:91:17:4c:dc:bc:c2:c0:cb:
                    87:5c:c1:1b:ab:11:c8:4b:61:bb:71:b8:7d:97:c3:
                    12:ee:af:98:f8:2b:4b:38:eb:f3:75:f4:71:d7:3f:
                    f1:2d:b3:b3:01:9e:2b:aa:56:6a:85:dd:9c:48:f2:
                    56:5b:5e:68:85:5d:71:4d:1a:86:0b:f6:ec:c7:6f:
                    ed:83:88:c6:0d:dd:08:0b:0a:4c:9f:3b:ae:51:7c:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:4C:E9:25:21:9C:01:1A:12:F5:EB:70:BF:E5:91:C9:4C:58:5E
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230312e3133392e3235332e302f32342d3234203d3e203238353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:48:77:b1:eb:2b:a3:b0:bd:f7:6d:81:6c:ca:66:02:fc:
         ca:c9:ae:ba:ab:9e:27:71:a3:50:ee:41:14:2c:28:f1:10:6f:
         44:27:c7:6f:3b:89:4d:34:4f:d3:27:c7:61:17:dd:c5:67:28:
         52:86:3e:5c:76:7a:eb:1e:2c:5e:03:39:7f:d5:16:25:e7:3c:
         30:16:16:08:0e:8d:05:d9:6f:e2:dd:a2:a4:cc:97:1e:60:2c:
         72:c6:51:5c:76:56:d7:75:db:79:76:4c:20:05:48:81:a1:2e:
         61:64:58:34:14:ef:cc:c2:f9:fc:2e:84:2e:f9:01:f5:6a:34:
         22:7f:96:f4:a6:03:fa:69:15:01:0c:d7:08:ba:e0:78:34:f8:
         5c:63:93:fa:e1:59:c2:07:ee:c0:a9:8f:06:00:c2:48:35:46:
         2f:84:38:00:2c:47:a8:a1:91:f9:b4:30:37:00:08:22:76:1b:
         68:53:a1:a3:1d:15:0c:f8:48:2e:ea:0d:d3:7f:60:e4:5b:b2:
         19:46:44:be:2e:c0:92:c5:a8:b2:39:1e:1e:c2:9d:16:a6:0d:
         06:6c:3f:49:b8:af:db:fd:95:11:bd:27:be:6a:c6:cd:32:80:
         5d:b3:c4:18:af:ac:d4:f8:03:d1:71:70:04:bc:64:4e:48:5b:
         91:b8:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:44:51 2025 by rpki-client