This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa
File:                     3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          1HUzWvLDI28JXhiKK5bNKrIHVc7X3HYJ2TkBlYP9E+s=
Subject key identifier:   AF:AB:CE:07:86:B2:C0:8C:53:02:C5:F0:D4:BA:5A:E9:46:33:58:B5
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2184B547DDFB8AB3AEC471F47DDDE2D84BBFB44B
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:17 +0000
ROA not before:           Tue 06 Jan 2026 19:42:17 +0000
ROA not after:            Tue 05 Jan 2027 19:47:17 +0000
asID:                     14754
IP address blocks:        201.216.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:84:b5:47:dd:fb:8a:b3:ae:c4:71:f4:7d:dd:e2:d8:4b:bf:b4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:17 2026 GMT
            Not After : Jan  5 19:47:17 2027 GMT
        Subject: CN=AFABCE0786B2C08C5302C5F0D4BA5AE9463358B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:ef:01:45:85:c1:42:e6:e4:f5:4c:64:5f:
                    7e:28:3d:c2:f2:17:10:96:3f:3a:bc:5e:8a:be:89:
                    a4:19:54:35:7b:62:68:0b:ba:d5:32:dd:8e:7b:3c:
                    c2:3e:24:98:66:fb:2d:f8:83:3e:6d:2e:ba:e7:30:
                    64:ad:ff:6d:e2:82:5e:c5:6f:e2:47:bd:d4:36:76:
                    e5:3a:b3:08:55:0b:42:e1:13:52:83:fd:6e:49:fe:
                    65:e7:22:7e:8e:5c:1f:07:85:8c:3e:3d:ee:7f:61:
                    11:28:19:ae:62:c3:02:d7:8b:9c:11:4f:00:4b:ee:
                    b7:03:d4:c6:2e:e4:3b:fa:38:6c:31:79:97:e7:a8:
                    70:6b:2b:c4:81:76:f2:ad:b7:08:54:a7:2a:ea:39:
                    11:34:99:55:e9:5d:d0:b7:58:94:43:09:1b:fa:63:
                    33:1c:14:cb:00:d6:c2:c2:6f:60:15:60:8c:55:07:
                    60:0e:ed:bf:a7:91:19:07:50:57:ee:01:c7:7d:15:
                    4e:47:a2:90:16:47:2c:12:2f:50:61:6c:b6:6d:0f:
                    86:2f:dd:8c:96:c4:88:8e:42:bb:23:50:98:60:79:
                    7e:ab:92:04:59:34:fb:0b:54:69:78:c1:fb:c2:de:
                    4f:d9:a9:60:b5:eb:90:a9:20:60:ab:61:ca:79:f1:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:CE:07:86:B2:C0:8C:53:02:C5:F0:D4:BA:5A:E9:46:33:58:B5
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230312e3231362e3132382e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:be:c0:23:bf:a5:d2:86:c7:d7:38:4f:86:f0:3a:b1:9f:
         73:c5:4f:57:f4:a9:d2:fc:77:04:d7:49:dd:e0:27:f2:48:42:
         a0:69:10:8d:df:1e:9e:08:1c:03:08:a6:4a:e9:db:26:ce:32:
         ae:f3:d8:6c:c3:01:a6:36:b5:e6:e6:e5:2a:a4:8b:1d:ef:e2:
         29:1f:49:64:7e:e5:3b:0f:a5:80:ce:4c:75:06:a4:c4:25:d4:
         a8:a0:60:7c:14:70:61:31:fa:bb:94:71:14:9c:0b:e6:56:18:
         ac:4e:c8:80:14:fd:2e:c7:1f:48:1b:ec:fa:d9:4c:08:66:df:
         94:08:e6:9a:29:39:70:40:e3:78:6d:eb:d7:62:8c:3f:cb:db:
         52:43:cc:6f:cc:f8:11:8e:0c:0e:f1:f3:60:a6:d8:96:01:39:
         09:43:4c:47:4e:87:f5:8e:f5:c9:f9:88:d9:08:a0:16:2d:6f:
         02:38:db:85:20:be:26:56:33:4e:0b:1e:4a:26:b4:7c:8d:02:
         9d:cc:12:52:09:f8:45:65:13:26:99:8f:c8:5f:cf:a9:5c:9a:
         f2:06:b1:f2:af:03:91:8b:7c:a2:94:72:83:1c:a5:47:68:d9:
         87:7f:29:1c:44:cf:ed:99:cd:73:68:ae:98:7b:e7:8f:c0:93:
         18:4e:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:08:18 2026 by rpki-client