This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/3230302e31302e3139312e302f32342d3234203d3e20323634363530.roa
File:                     3230302e31302e3139312e302f32342d3234203d3e20323634363530.roa (raw, json)
Hash identifier:          wz6j3naEpGvDxLWIVHWi3/5cG80RihtaTeA/Sq2W/WI=
Subject key identifier:   2C:AC:D6:14:08:25:4B:67:E2:2D:8D:45:6D:33:79:07:04:E3:47:DD
Certificate issuer:       /CN=E13DF25932B461EA2CDEF6604083F2D237A0A51F
Certificate serial:       5984309FA8032B14B604BF4C112EC44B6CCF3199
Authority key identifier: E1:3D:F2:59:32:B4:61:EA:2C:DE:F6:60:40:83:F2:D2:37:A0:A5:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/3230302e31302e3139312e302f32342d3234203d3e20323634363530.roa
Signing time:             Tue 02 Dec 2025 01:10:00 +0000
ROA not before:           Tue 02 Dec 2025 01:05:00 +0000
ROA not after:            Tue 01 Dec 2026 01:10:00 +0000
asID:                     264650
IP address blocks:        200.10.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:84:30:9f:a8:03:2b:14:b6:04:bf:4c:11:2e:c4:4b:6c:cf:31:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E13DF25932B461EA2CDEF6604083F2D237A0A51F
        Validity
            Not Before: Dec  2 01:05:00 2025 GMT
            Not After : Dec  1 01:10:00 2026 GMT
        Subject: CN=2CACD61408254B67E22D8D456D33790704E347DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:e2:94:a7:b5:8e:62:f8:97:ad:b3:80:5a:
                    26:ae:64:95:c6:18:46:67:4a:f1:0e:08:d5:1b:b3:
                    e3:f7:8e:d1:32:ae:c7:56:86:c3:00:d4:3a:e9:3c:
                    70:85:d2:45:88:d8:ab:c1:41:7f:50:87:72:d1:2a:
                    49:ae:ce:d8:ac:aa:28:f1:bf:e3:d1:52:75:62:9d:
                    e8:9c:8d:6a:e6:9b:ce:d7:76:42:f0:6a:68:de:f4:
                    31:5b:4f:21:91:b1:9c:d9:dc:8e:8b:60:58:da:ce:
                    c8:c8:87:7a:a6:6d:6a:3a:8b:11:0a:f1:47:71:73:
                    6f:30:5a:6d:c5:05:88:bf:dc:4e:71:52:3f:c2:10:
                    4b:26:3a:22:96:5d:d2:6a:0b:28:85:ff:6a:b9:8a:
                    27:a3:96:d6:32:83:27:30:9d:f5:b7:c9:30:ff:46:
                    6e:72:1e:9b:73:4e:ba:f2:16:56:4f:19:a0:d8:62:
                    47:c8:26:67:6e:ad:af:ff:1d:71:0c:bd:05:04:37:
                    80:35:ab:2c:39:4c:80:0c:66:1e:46:a7:02:ba:6e:
                    cf:ee:c2:ed:5e:f5:cf:b7:a5:46:de:fe:5c:ba:32:
                    4e:4e:34:77:b8:7d:42:05:33:22:93:e7:d3:4f:45:
                    3a:e5:74:0c:c8:62:58:41:cf:3f:c6:89:5a:fc:1a:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AC:D6:14:08:25:4B:67:E2:2D:8D:45:6D:33:79:07:04:E3:47:DD
            X509v3 Authority Key Identifier:
                keyid:E1:3D:F2:59:32:B4:61:EA:2C:DE:F6:60:40:83:F2:D2:37:A0:A5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E13DF25932B461EA2CDEF6604083F2D237A0A51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05A1F4E6E240A287B53DD1A8072B56DF02C20D0839C10B86ADE780AF14C8A06F/0/3230302e31302e3139312e302f32342d3234203d3e20323634363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:54:8e:ba:fa:76:31:14:8a:2c:9e:b8:51:03:72:8b:d3:
         3b:96:27:e0:42:18:b7:0c:1c:1e:ef:1e:98:59:0f:d0:42:4c:
         ad:fb:50:aa:92:b8:dc:2d:60:79:ce:2d:a8:e3:6e:f5:c4:d6:
         c7:fc:7b:e3:23:84:b5:2d:48:bc:69:7b:04:a6:f9:2e:f8:ee:
         08:33:19:fe:30:4f:6e:5e:25:97:9d:77:02:85:d2:98:35:ba:
         f7:67:cb:df:6a:22:89:fa:96:db:4d:b9:5e:96:a1:f5:94:e5:
         11:e0:1d:78:17:7a:f4:32:98:ff:36:ef:52:b2:74:af:1a:5e:
         96:10:ad:ae:4a:d8:82:cf:f3:ba:58:92:9d:48:76:22:d5:1f:
         29:97:3d:ff:76:c4:58:d3:36:9d:fa:60:1a:08:0d:e5:28:30:
         fe:c7:6c:91:e8:53:59:66:6a:0c:0c:a6:85:23:22:db:d3:25:
         f1:ab:4a:88:57:5c:86:53:65:88:f3:1b:09:79:a2:20:67:c6:
         4c:58:d3:2b:86:31:71:3b:e6:b1:e2:6d:1f:aa:36:18:8f:b1:
         56:24:48:0d:37:eb:83:11:9c:36:70:1b:ef:ca:3f:f2:e4:41:
         1c:91:bb:54:1c:ce:8b:c1:d9:59:1d:02:9b:2b:87:a5:57:70:
         e0:74:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:34:14 2025 by rpki-client