This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa
File:                     3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          Noh+5Gw72os9tptCNThRPrT13QOuhfJ4Ydg4UyiE4fo=
Subject key identifier:   B7:E5:B1:7E:5E:D1:49:50:45:9C:82:B6:98:6A:FE:76:30:F9:FB:39
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       176D5F0AD317FB11A6EAC0473983777500D2F26D
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa
Signing time:             Sat 08 Nov 2025 21:52:02 +0000
ROA not before:           Sat 08 Nov 2025 21:47:02 +0000
ROA not after:            Sat 07 Nov 2026 21:52:02 +0000
asID:                     265606
IP address blocks:        200.225.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 01:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6d:5f:0a:d3:17:fb:11:a6:ea:c0:47:39:83:77:75:00:d2:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Nov  8 21:47:02 2025 GMT
            Not After : Nov  7 21:52:02 2026 GMT
        Subject: CN=B7E5B17E5ED14950459C82B6986AFE7630F9FB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:fd:40:3f:72:18:5a:df:61:0e:6f:cc:03:
                    f2:ec:bc:29:6e:fe:8b:8c:c9:5c:eb:da:92:8c:7c:
                    a7:88:57:f1:d4:44:86:b0:95:3c:d9:1f:3c:49:60:
                    b5:78:cc:b2:51:8f:af:a8:39:05:bb:b3:4c:a0:fd:
                    b0:ae:a4:91:08:66:21:fa:7b:43:90:27:07:ae:10:
                    34:ae:0a:5c:b1:57:2c:c8:d4:1f:9e:83:dc:9b:c7:
                    24:dd:53:ee:a0:35:d6:f3:6c:b4:d6:6b:9c:6c:e9:
                    1b:0c:89:2d:07:44:a4:86:bc:8c:bc:5f:2a:0a:8d:
                    f5:53:ed:2d:96:67:c1:da:93:b9:dc:5f:3b:5a:4f:
                    a3:9a:ae:59:f2:51:bc:e7:75:ca:fe:8d:64:5f:a3:
                    b2:31:c9:f0:ab:7e:1e:51:3d:15:dc:46:9a:ef:f9:
                    cc:79:a5:c3:45:74:cb:ce:10:f6:0e:87:51:a2:ff:
                    3c:f7:76:43:99:9f:7a:8e:9a:28:81:95:33:43:56:
                    71:74:f6:3e:c5:fa:41:51:20:20:4b:ef:1b:1e:db:
                    b7:b1:74:d5:d8:c3:7d:5f:d2:bc:d0:48:46:86:12:
                    08:c4:a0:99:c5:de:2e:20:28:58:26:ac:58:42:bf:
                    57:69:1c:26:f4:88:22:e1:d7:0d:a3:75:2d:fc:c4:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E5:B1:7E:5E:D1:49:50:45:9C:82:B6:98:6A:FE:76:30:F9:FB:39
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3230302e3232352e36302e302f32332d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:ad:21:4e:aa:b2:d6:92:f0:9f:91:5c:b9:7f:9b:59:61:
         16:1e:81:25:55:1a:ba:75:de:48:2a:08:7f:51:fd:f0:7f:52:
         4c:9c:15:17:e6:28:ce:1b:05:92:b8:62:ec:ef:4d:f5:43:9e:
         f9:5d:87:25:f5:fb:8a:2b:16:c2:e3:0a:7e:e1:7d:dc:13:bc:
         6c:66:40:8b:2a:1b:23:39:6b:02:67:86:59:a4:0c:72:5c:03:
         b2:27:b9:5e:fb:2e:db:e4:e2:ee:00:b1:d2:45:66:e9:8a:63:
         6a:f2:36:d4:18:f2:8c:a5:75:d1:bd:70:99:ad:3d:47:f2:09:
         33:a0:70:c8:a5:d2:a8:af:02:57:8f:97:2d:70:91:e9:7c:0a:
         99:eb:56:aa:17:6e:e4:70:85:eb:3d:7d:b0:14:6c:eb:d4:d0:
         30:2c:2a:b2:42:dc:15:58:3d:d4:54:ac:2e:d9:73:a3:a3:2c:
         86:18:73:4d:a2:94:f3:de:60:26:70:11:a5:84:16:ff:e8:85:
         22:a5:77:00:6c:5c:ab:8f:1d:6b:12:34:70:c9:9e:3e:33:45:
         df:b6:72:cc:8b:74:d1:93:86:17:25:36:95:f0:96:c6:ef:9f:
         a8:a2:61:23:15:f2:21:37:06:d2:1b:72:8d:0e:c7:d1:e1:3b:
         c7:24:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:19:10 2025 by rpki-client