This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa
File:                     3230302e3131352e31382e302f32342d3234203d3e203532343239.roa (raw, json)
Hash identifier:          yWF0HN74STULFB5cHztRUVd6JTijzWc0PW3XeJWU/Gw=
Subject key identifier:   C9:69:A9:29:B8:60:C3:A3:6F:05:08:93:87:E9:C9:D9:23:A4:AA:93
Certificate issuer:       /CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
Certificate serial:       4BFB16B088DD2B8B93894AAB465EA66832CFB2CF
Authority key identifier: F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa
Signing time:             Fri 14 Nov 2025 00:52:33 +0000
ROA not before:           Fri 14 Nov 2025 00:47:33 +0000
ROA not after:            Fri 13 Nov 2026 00:52:33 +0000
asID:                     52429
IP address blocks:        200.115.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 02:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fb:16:b0:88:dd:2b:8b:93:89:4a:ab:46:5e:a6:68:32:cf:b2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
        Validity
            Not Before: Nov 14 00:47:33 2025 GMT
            Not After : Nov 13 00:52:33 2026 GMT
        Subject: CN=C969A929B860C3A36F05089387E9C9D923A4AA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:4e:07:61:58:1d:5c:4c:2f:55:ce:53:d3:
                    ef:a3:8e:f6:29:de:bb:5d:ad:5e:76:e1:57:30:88:
                    aa:c7:21:75:bb:55:4d:c6:e0:0c:2b:a9:ed:88:63:
                    d6:24:76:4b:04:a1:b5:24:2c:57:95:fd:31:ec:35:
                    23:c8:1a:32:49:f3:0e:3e:4c:5a:18:fc:b5:c5:64:
                    0f:8a:a5:0d:f6:55:bb:55:73:fc:8e:6e:4f:cc:b1:
                    04:bb:37:0b:4b:76:d5:25:c5:60:36:5a:cb:12:09:
                    e6:de:3e:e7:b0:9c:ba:1f:31:ea:03:5c:10:53:0d:
                    c8:06:71:a9:8c:5f:12:6c:63:7a:88:0d:6c:10:f1:
                    8a:09:04:20:48:76:87:67:ec:42:9f:bc:b5:f9:ac:
                    85:65:83:8d:4f:96:08:74:b6:b3:63:d7:78:c9:b8:
                    ab:ed:f8:49:3a:b5:20:6d:b9:00:96:3d:13:84:dd:
                    39:27:1d:cb:f0:bc:4b:ec:7e:04:36:52:4c:fb:64:
                    f6:9b:59:49:fa:2a:8a:6b:ea:45:b2:18:9b:9b:31:
                    8c:5e:70:d3:4a:44:68:45:f7:81:d6:45:40:0b:31:
                    59:9c:f9:1d:bd:72:6b:9a:e3:b3:bb:bd:9c:ea:ec:
                    5e:3a:05:c2:52:16:30:2e:4b:c5:c6:a6:93:92:b7:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:A9:29:B8:60:C3:A3:6F:05:08:93:87:E9:C9:D9:23:A4:AA:93
            X509v3 Authority Key Identifier:
                keyid:F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e203532343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:14:ae:ee:7e:c0:96:31:5e:9d:bb:7e:ae:df:33:cf:23:
         87:45:b3:8e:a1:ca:5a:02:f2:ca:a0:95:92:90:e7:8a:be:86:
         e9:d7:73:67:f7:0a:6f:c5:9a:b4:f5:94:c5:37:46:f7:48:f0:
         63:67:6b:59:23:ce:a4:7f:6d:47:0b:1a:fa:0c:eb:52:14:5b:
         e9:aa:26:d0:1e:eb:f2:f5:85:ad:15:a4:b4:b9:8b:88:cf:ce:
         6e:ec:51:cb:c5:7c:0c:d8:52:c9:b1:c0:51:03:4f:e5:8d:0f:
         0f:b1:c2:36:cf:e4:55:d5:0d:63:d7:ff:1f:a5:48:2a:2f:4f:
         c8:a0:14:82:b0:80:2f:2a:43:4d:75:c6:61:fb:60:52:ee:37:
         e9:f0:08:08:bb:f1:53:fe:b2:03:69:0c:1c:37:59:71:73:11:
         a9:25:2f:02:07:d3:50:ae:65:64:7a:87:14:38:fe:26:11:47:
         f7:32:ea:8e:94:af:30:60:a1:b7:2a:0a:66:39:86:9e:cc:80:
         7e:7f:14:48:ce:c9:4d:86:fe:a6:6e:37:ad:51:1f:06:be:e6:
         95:7e:fb:aa:df:12:dc:3f:12:6f:0f:51:82:a5:d3:fd:ad:ed:
         f1:7f:54:11:f2:4f:80:46:7e:e1:9f:0f:35:a6:cd:11:8f:c2:
         37:f2:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:17:31 2025 by rpki-client