This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/3134382e3232342e302e302f32302d3234203d3e20323730313836.roa
File:                     3134382e3232342e302e302f32302d3234203d3e20323730313836.roa (raw, json)
Hash identifier:          ng+2nUynpKZ0FXkFXer91TbYiO7MGE3OG/mMVjQmbwA=
Subject key identifier:   20:B7:7A:37:F9:FF:CB:9C:1A:BC:7A:B1:B8:45:DE:56:12:93:49:50
Certificate issuer:       /CN=ED668E47A9AFBFAC1326AC177BF7091598876359
Certificate serial:       16BB60D06E881F4FF4F4153BC5DCD6010F5BAD28
Authority key identifier: ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/3134382e3232342e302e302f32302d3234203d3e20323730313836.roa
Signing time:             Fri 05 Dec 2025 02:40:00 +0000
ROA not before:           Fri 05 Dec 2025 02:35:00 +0000
ROA not after:            Fri 04 Dec 2026 02:40:00 +0000
asID:                     270186
IP address blocks:        148.224.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:60:d0:6e:88:1f:4f:f4:f4:15:3b:c5:dc:d6:01:0f:5b:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED668E47A9AFBFAC1326AC177BF7091598876359
        Validity
            Not Before: Dec  5 02:35:00 2025 GMT
            Not After : Dec  4 02:40:00 2026 GMT
        Subject: CN=20B77A37F9FFCB9C1ABC7AB1B845DE5612934950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:da:86:fa:44:fd:a2:8e:26:97:22:7c:84:
                    2b:cd:69:b9:bf:c5:55:bd:c9:59:1a:9c:12:63:df:
                    47:ed:ba:ae:b0:1c:e8:75:e5:fc:45:53:ce:21:56:
                    81:80:75:0c:cb:05:20:bf:1c:83:b7:bb:96:9b:23:
                    70:60:27:1c:97:41:97:3b:43:ef:1a:44:80:4d:c5:
                    b0:26:4f:f0:c3:5a:d4:f5:90:d3:1a:1e:6d:0a:94:
                    f4:9b:59:68:a4:07:af:52:7a:3b:31:19:46:ff:a1:
                    33:89:49:e1:75:32:ab:12:1e:d3:74:aa:85:6a:7e:
                    75:7e:56:da:7c:39:6e:cb:00:44:e6:4e:c1:9b:8a:
                    1d:64:d0:e0:51:a7:51:d8:3d:d1:92:fc:94:20:4e:
                    36:26:3c:c2:8b:e1:43:e8:39:5a:7e:9b:a9:be:c8:
                    2e:d3:0a:94:8b:38:22:29:2f:79:5b:27:de:6e:4d:
                    ba:76:2e:53:23:b1:cf:e2:3f:13:ab:75:5e:79:44:
                    4e:47:0e:01:63:95:41:37:40:25:4d:b2:fd:56:40:
                    a0:d7:7f:68:97:c8:ad:3f:2e:f5:3a:ef:14:16:4c:
                    35:54:ac:b9:b6:d3:0c:bd:68:f3:68:d0:16:bf:b7:
                    11:a0:ac:ba:cc:a5:cb:34:1d:e5:79:97:b2:16:9a:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B7:7A:37:F9:FF:CB:9C:1A:BC:7A:B1:B8:45:DE:56:12:93:49:50
            X509v3 Authority Key Identifier:
                keyid:ED:66:8E:47:A9:AF:BF:AC:13:26:AC:17:7B:F7:09:15:98:87:63:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/ED668E47A9AFBFAC1326AC177BF7091598876359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED668E47A9AFBFAC1326AC177BF7091598876359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00D0E2D9A79E915E7F6A30212314EDED16380180360FD65605A6234B7FA44E6D/0/3134382e3232342e302e302f32302d3234203d3e20323730313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:fe:9a:18:3b:2a:f2:d2:e3:38:ad:8b:70:66:fb:13:63:
         a9:82:e7:68:ce:2f:f3:4b:94:6a:89:3b:ff:c2:53:69:2e:06:
         29:02:01:e1:16:09:8d:1c:0b:35:a4:55:18:60:11:a6:e1:d4:
         72:0e:a7:9b:a6:85:89:d5:7d:c2:d7:a8:62:17:21:eb:fd:33:
         05:23:44:e3:b5:d5:56:0b:95:b3:13:77:0f:d0:0e:64:31:60:
         3e:5d:02:85:16:09:98:65:c9:80:a0:62:63:d7:0a:42:e9:4b:
         57:46:94:4f:4b:49:7a:e3:a2:3a:c9:fc:cd:f7:39:dc:f1:66:
         7b:30:e8:c9:bd:db:9a:a6:40:0f:5c:4c:2c:72:e4:2e:d3:8c:
         c9:47:69:70:6b:7f:a1:1d:db:89:46:da:33:a7:bb:c0:8d:ad:
         f0:cb:a8:70:60:fe:34:2b:ec:61:30:63:c2:93:95:ba:b6:af:
         26:41:05:71:8d:cb:b9:4d:21:23:85:f5:2e:bb:b8:47:37:dc:
         46:a8:eb:72:4c:e9:3d:1a:12:8c:36:16:a4:79:d2:b8:a9:d1:
         72:d6:0d:85:1c:8d:32:c6:2a:91:36:5d:2c:c5:3d:d3:b2:6f:
         8c:e0:07:8c:94:ab:e3:de:31:e0:21:df:1c:38:ca:f1:32:ef:
         7c:61:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:04:05 2025 by rpki-client