This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          EnJFx2G9M2WS5mQnNEj65jgOkA/dFLhmvzxGtT7mka0=
Subject key identifier:   05:E8:00:97:4A:DB:8D:28:BC:E9:76:58:CF:80:B5:4B:2D:EA:D9:44
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       4FFB51E6FC47147063D3EB970390F786ED5F32F7
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 15:52:51 +0000
ROA not before:           Mon 17 Nov 2025 15:47:51 +0000
ROA not after:            Mon 16 Nov 2026 15:52:51 +0000
asID:                     262249
IP address blocks:        200.108.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fb:51:e6:fc:47:14:70:63:d3:eb:97:03:90:f7:86:ed:5f:32:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 15:47:51 2025 GMT
            Not After : Nov 16 15:52:51 2026 GMT
        Subject: CN=05E800974ADB8D28BCE97658CF80B54B2DEAD944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:01:d7:ff:bf:19:ba:21:e4:14:82:4c:57:
                    c7:4d:5c:d0:b9:e6:96:8a:a0:02:92:7f:b6:eb:4a:
                    03:71:ff:cd:63:c3:aa:6e:f0:ef:b2:72:bd:50:71:
                    60:94:54:d4:9a:c0:eb:a7:ae:f8:3a:d1:ec:17:28:
                    da:5d:4a:2f:fd:04:4f:1f:3e:02:9f:8d:4f:3e:49:
                    ac:e0:e4:01:f5:c6:76:e4:05:09:6b:e0:64:94:65:
                    0f:7c:e1:30:12:a2:8a:53:4c:7e:6c:f0:57:a3:c0:
                    22:e7:6e:b2:eb:e1:3d:c4:40:04:5d:29:7a:93:f8:
                    ec:bd:87:4f:99:cf:b6:26:f7:65:f4:20:fc:ab:24:
                    f0:eb:db:cd:36:67:90:c9:38:57:79:f0:0b:97:b7:
                    a6:88:d1:5f:99:8d:9c:59:37:5e:cf:41:47:f4:ca:
                    12:51:37:df:b1:ee:0a:76:05:b8:0d:15:bf:75:b7:
                    89:dc:80:96:86:90:e1:57:a2:5d:62:5e:20:cd:b5:
                    c3:40:07:64:25:e6:d0:1f:a2:82:6c:05:b4:2c:65:
                    90:b7:a9:2e:e6:38:6a:d5:98:14:65:bc:cf:92:55:
                    9c:63:4e:33:cf:49:d2:85:27:79:31:cb:da:3b:4f:
                    7f:5e:e0:b5:12:89:64:85:35:25:26:42:ce:39:f9:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E8:00:97:4A:DB:8D:28:BC:E9:76:58:CF:80:B5:4B:2D:EA:D9:44
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134342e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:cc:ff:ec:ac:50:f1:c3:4a:22:27:bb:80:e1:2d:e2:ac:
         6a:b8:df:e9:79:ea:3f:e7:2c:8d:45:af:56:44:4b:c5:b3:ed:
         f9:10:77:1f:da:d3:11:7e:e5:a7:c6:66:af:f8:6a:ed:4f:80:
         be:5c:b3:1c:7f:5d:68:9c:4a:45:4d:2f:e2:16:0c:98:e2:ee:
         4f:49:46:4d:49:ef:33:b3:b9:0e:4b:fa:79:72:95:01:7e:04:
         66:e7:e0:0e:8f:1d:15:15:53:6c:ed:52:82:7e:31:9b:10:ba:
         5b:95:42:34:dc:73:a5:d7:cd:f9:71:25:d7:d9:b4:bd:3c:fa:
         fe:9b:79:12:24:08:c6:6b:92:42:36:24:af:3d:e9:90:63:c3:
         9e:c2:a4:45:03:bd:68:f4:86:e6:78:35:92:63:6e:28:b2:37:
         8c:d0:46:e5:ba:b9:b4:bd:96:9d:26:90:6b:af:14:43:b3:3b:
         48:67:07:6c:b9:01:2e:1c:a3:5a:1d:ac:c4:e1:42:2d:50:9d:
         ff:e6:7e:47:ec:4b:61:84:40:0d:1d:6f:57:51:97:fb:3e:a2:
         a7:ab:e3:b4:76:f1:9f:b0:7b:57:5b:82:41:8a:be:9e:05:c3:
         fa:a0:e4:8d:0b:fd:ef:cf:83:5f:af:92:44:5b:6a:4f:37:a2:
         21:37:9d:37
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUT/tR5vxHFHBj0+uXA5D3hu1fMvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhFNkQ5QzA2RTREOEZGQ0RDQzIyQUZGNEI0Q0EzOTJD
MUE3RDYwMDAeFw0yNTExMTcxNTQ3NTFaFw0yNjExMTYxNTUyNTFaMDMxMTAvBgNV
BAMTKDA1RTgwMDk3NEFEQjhEMjhCQ0U5NzY1OENGODBCNTRCMkRFQUQ5NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmsAHX/78ZuiHkFIJMV8dNXNC5
5paKoAKSf7brSgNx/81jw6pu8O+ycr1QcWCUVNSawOunrvg60ewXKNpdSi/9BE8f
PgKfjU8+Sazg5AH1xnbkBQlr4GSUZQ984TASoopTTH5s8FejwCLnbrLr4T3EQARd
KXqT+Oy9h0+Zz7Ym92X0IPyrJPDr2802Z5DJOFd58AuXt6aI0V+ZjZxZN17PQUf0
yhJRN9+x7gp2BbgNFb91t4ncgJaGkOFXol1iXiDNtcNAB2Ql5tAfooJsBbQsZZC3
qS7mOGrVmBRlvM+SVZxjTjPPSdKFJ3kxy9o7T39e4LUSiWSFNSUmQs45+fdNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUBegAl0rbjSi86XZYz4C1Sy3q2UQwHwYDVR0j
BBgwFoAU2ObZwG5Nj/zcwir/S0yjksGn1gAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRjY4MzYwQzQzNUVFMTQ2MTJDMTk0NEREOEI3QTY1RUI5
MDkzN0VDMkMxRDY4RkE0MkNCMDZDQTdFMzAwRjNDLzAvRDhFNkQ5QzA2RTREOEZG
Q0RDQzIyQUZGNEI0Q0EzOTJDMUE3RDYwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEU2RDlDMDZFNEQ4RkZDREND
MjJBRkY0QjRDQTM5MkMxQTdENjAwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkY2ODM2MEM0MzVFRTE0NjEyQzE5NDRERDhCN0E2NUVCOTA5MzdFQzJD
MUQ2OEZBNDJDQjA2Q0E3RTMwMEYzQy8wLzMyMzAzMDJlMzEzMDM4MmUzMTM0MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
bJAwDQYJKoZIhvcNAQELBQADggEBABUdzP/srFDxw0oiJ7uA4S3irGq43+l56j/n
LI1Fr1ZES8Wz7fkQdx/a0xF+5afGZq/4au1PgL5csxx/XWicSkVNL+IWDJji7k9J
Rk1J7zOzuQ5L+nlylQF+BGbn4A6PHRUVU2ztUoJ+MZsQuluVQjTcc6XXzflxJdfZ
tL08+v6beRIkCMZrkkI2JK896ZBjw57CpEUDvWj0huZ4NZJjbiiyN4zQRuW6ubS9
lp0mkGuvFEOzO0hnB2y5AS4co1odrMThQi1Qnf/mfkfsS2GEQA0db1dRl/s+oqer
47R28Z+we1dbgkGKvp4Fw/qg5I0L/e/Pg1+vkkRbak83oiE3nTc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:43:07 2025 by rpki-client