This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
File:                     3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa (raw, json)
Hash identifier:          WJ+j/eQ1Koffn/O+Vp25dwwLjsOKoavmpaICoZes0Mc=
Subject key identifier:   7C:3C:85:0E:BE:DD:C7:00:04:CA:4E:53:97:D2:BD:83:F6:54:F3:0D
Certificate issuer:       /CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
Certificate serial:       312ABBC4EF65D4E7EC2A0A3E9D241A571DDE5F1F
Authority key identifier: 1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
Signing time:             Wed 05 Nov 2025 22:51:48 +0000
ROA not before:           Wed 05 Nov 2025 22:46:48 +0000
ROA not after:            Wed 04 Nov 2026 22:51:48 +0000
asID:                     269927
IP address blocks:        207.191.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 06:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:bb:c4:ef:65:d4:e7:ec:2a:0a:3e:9d:24:1a:57:1d:de:5f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
        Validity
            Not Before: Nov  5 22:46:48 2025 GMT
            Not After : Nov  4 22:51:48 2026 GMT
        Subject: CN=7C3C850EBEDDC70004CA4E5397D2BD83F654F30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:ae:d5:18:fa:89:cd:6f:76:7d:42:e3:82:
                    c5:9a:dc:f0:c0:2c:40:66:46:c0:cc:05:f3:99:2e:
                    a8:0d:6c:93:79:93:3b:d2:7e:10:41:2f:1a:21:9e:
                    f1:5e:02:b8:19:13:ed:a4:91:6b:9c:d8:09:9b:b1:
                    32:b5:e4:93:c7:6b:60:0e:72:5e:c5:fe:17:7b:79:
                    bb:91:51:2a:75:b3:9f:22:ae:7f:ff:c6:a5:d6:64:
                    1f:05:cd:20:cb:7a:24:0b:b0:2b:82:68:13:45:bf:
                    68:0c:65:0f:1d:a3:9b:f2:25:f2:ef:fc:ce:9f:3d:
                    79:5e:2a:89:43:e9:6a:ae:39:fc:6a:73:c6:c1:0b:
                    e8:1a:bd:ea:d6:0e:eb:59:6a:7b:71:85:0a:d0:13:
                    99:fa:98:72:a1:db:a3:67:08:6e:b3:a9:bb:a1:43:
                    65:a9:fc:a4:43:6b:97:ba:62:78:0e:4f:cc:c3:d7:
                    3b:ff:ce:fb:f6:45:e5:e0:7f:c9:ba:8a:57:a8:dd:
                    c5:fd:37:83:1c:2c:a1:48:a7:e9:57:6d:fa:4a:03:
                    13:db:8f:c1:d4:64:46:0b:ac:96:9b:3d:0b:bb:ec:
                    1f:b2:27:0d:83:d3:c5:f8:7c:7d:da:10:e2:ee:33:
                    ce:f6:b3:01:59:00:33:82:d1:6a:87:f0:c1:12:54:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3C:85:0E:BE:DD:C7:00:04:CA:4E:53:97:D2:BD:83:F6:54:F3:0D
            X509v3 Authority Key Identifier:
                keyid:1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:09:49:c7:96:bd:87:87:62:c8:04:62:1f:1e:9d:01:42:
         47:3f:52:cc:a3:e7:06:79:0d:21:15:0e:2a:1c:6a:e4:32:a3:
         c8:73:7c:65:8f:92:d9:7e:67:43:a7:a5:5c:90:77:52:29:16:
         15:22:d8:ba:f0:2c:ce:be:de:64:da:f4:64:69:50:e4:48:58:
         31:2e:e5:43:64:52:6e:1e:55:76:e2:cf:d4:93:5a:66:49:31:
         60:cd:06:7d:3e:84:ae:2f:a3:00:ee:59:e3:b7:7f:b2:ca:11:
         8e:91:a5:57:a8:83:39:42:8c:78:a7:ec:09:41:b8:f4:e3:bd:
         d8:90:7a:a1:30:d6:8f:f6:aa:a8:4e:c4:2b:b4:2e:34:2d:e7:
         5b:21:26:33:98:f9:67:ce:1e:06:0e:39:de:cc:3f:a4:a1:68:
         3f:b8:d2:09:c0:10:f9:a0:09:4a:8e:db:eb:97:83:fb:ec:75:
         aa:88:a2:f6:2f:24:2b:94:d1:f5:6f:34:1c:46:bc:b7:d8:8b:
         b9:26:58:a0:5e:b8:30:c0:92:3e:7e:cf:6c:ae:89:c8:df:d5:
         cb:09:36:41:ee:51:13:09:49:0e:c5:ac:1c:7d:ec:a7:9c:4b:
         d6:ff:74:9a:48:1f:5b:96:05:b4:77:10:ce:40:29:b4:88:d3:
         89:8a:64:bb
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMSq7xO9l1OfsKgo+nSQaVx3eXx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMzMDBFMUMzNUEwRjAzREIyNUU5OTc2NkNGM0RCNDRE
QTY3ODNDNDAeFw0yNTExMDUyMjQ2NDhaFw0yNjExMDQyMjUxNDhaMDMxMTAvBgNV
BAMTKDdDM0M4NTBFQkVEREM3MDAwNENBNEU1Mzk3RDJCRDgzRjY1NEYzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvq7VGPqJzW92fULjgsWa3PDA
LEBmRsDMBfOZLqgNbJN5kzvSfhBBLxohnvFeArgZE+2kkWuc2AmbsTK15JPHa2AO
cl7F/hd7ebuRUSp1s58irn//xqXWZB8FzSDLeiQLsCuCaBNFv2gMZQ8do5vyJfLv
/M6fPXleKolD6WquOfxqc8bBC+gaverWDutZantxhQrQE5n6mHKh26NnCG6zqbuh
Q2Wp/KRDa5e6YngOT8zD1zv/zvv2ReXgf8m6ileo3cX9N4McLKFIp+lXbfpKAxPb
j8HUZEYLrJabPQu77B+yJw2D08X4fH3aEOLuM872swFZADOC0WqH8MESVOFPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfDyFDr7dxwAEyk5Tl9K9g/ZU8w0wHwYDVR0j
BBgwFoAUHDAOHDWg8D2yXpl2bPPbRNpng8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xREExQjI1MUE1QUM2NUNFM0ZGNDQyNEExREU0NEQzMTlB
MUVCOTMwM0I1NDlDNzUxNEU4MDgyOTJFODY5RkQ3LzAvMUMzMDBFMUMzNUEwRjAz
REIyNUU5OTc2NkNGM0RCNDREQTY3ODNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQzMwMEUxQzM1QTBGMDNEQjI1
RTk5NzY2Q0YzREI0NERBNjc4M0M0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMURBMUIyNTFBNUFDNjVDRTNGRjQ0MjRBMURFNDREMzE5QTFFQjkzMDNC
NTQ5Qzc1MTRFODA4MjkyRTg2OUZENy8wLzMyMzAzNzJlMzEzOTMxMmUzMTM3MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzOTMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADP
v60wDQYJKoZIhvcNAQELBQADggEBADUaCUnHlr2Hh2LIBGIfHp0BQkc/Usyj5wZ5
DSEVDiocauQyo8hzfGWPktl+Z0OnpVyQd1IpFhUi2LrwLM6+3mTa9GRpUORIWDEu
5UNkUm4eVXbiz9STWmZJMWDNBn0+hK4vowDuWeO3f7LKEY6RpVeogzlCjHin7AlB
uPTjvdiQeqEw1o/2qqhOxCu0LjQt51shJjOY+WfOHgYOOd7MP6ShaD+40gnAEPmg
CUqO2+uXg/vsdaqIovYvJCuU0fVvNBxGvLfYi7kmWKBeuDDAkj5+z2yuicjf1csJ
NkHuURMJSQ7FrBx97KecS9b/dJpIH1uWBbR3EM5AKbSI04mKZLs=
-----END CERTIFICATE-----
Generated at Sun Dec 7 10:08:28 2025 by rpki-client