This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          1l+LCCRbh52Tu3Dt7xLuGsZC/vahOy9V/8ZWdAYKDRY=
Subject key identifier:   F3:47:E7:D7:85:33:C3:0D:36:36:50:9A:6F:9D:CF:8D:68:AE:65:ED
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       0D52018C5E27A4F471DCD65D7F50B28278CB740F
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 15:52:52 +0000
ROA not before:           Mon 17 Nov 2025 15:47:52 +0000
ROA not after:            Mon 16 Nov 2026 15:52:52 +0000
asID:                     262249
IP address blocks:        200.108.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:01:8c:5e:27:a4:f4:71:dc:d6:5d:7f:50:b2:82:78:cb:74:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 15:47:52 2025 GMT
            Not After : Nov 16 15:52:52 2026 GMT
        Subject: CN=F347E7D78533C30D3636509A6F9DCF8D68AE65ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:30:35:bc:1d:f4:55:ce:37:20:3a:8f:cd:
                    21:ef:65:8e:45:70:19:17:c2:a3:c5:21:3d:34:a5:
                    af:91:49:98:94:fd:f7:c6:14:3f:2c:d6:a8:e3:04:
                    29:82:da:e5:89:3e:e9:38:2e:62:33:f7:4b:2a:a7:
                    ea:e0:91:3a:9d:60:8a:54:e5:8b:d3:e1:8d:af:f2:
                    b6:39:ed:8a:01:ff:3d:10:0d:de:0c:7a:8e:d6:f5:
                    03:8f:98:7d:df:fa:a4:31:27:49:fe:e0:29:68:64:
                    9e:da:99:0f:e3:f9:25:b5:fc:46:9f:9e:8a:88:f5:
                    b9:45:f2:2e:03:44:15:f6:f7:9d:46:8a:a8:0a:bc:
                    71:88:86:de:99:e8:d1:fe:2d:50:fe:af:14:9b:5b:
                    eb:ac:87:f0:89:34:33:99:4f:50:d0:08:8a:34:38:
                    df:86:fa:5b:52:6e:b8:5d:6e:f3:d0:ba:17:69:42:
                    62:63:f5:4a:b1:03:c7:28:a4:3d:49:54:29:3b:68:
                    cf:06:83:de:84:49:b6:d3:10:50:5f:21:78:9e:b4:
                    0f:42:c7:95:ae:2f:09:0a:59:55:8c:d9:c6:91:b3:
                    25:2b:0a:73:0b:d7:c9:41:ed:b1:6e:8c:f0:d5:40:
                    2b:f1:89:8e:e7:a8:18:47:a4:02:d0:ae:ab:52:66:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:47:E7:D7:85:33:C3:0D:36:36:50:9A:6F:9D:CF:8D:68:AE:65:ED
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3134392e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:38:78:b1:69:b5:43:3c:44:67:63:cf:45:5f:a8:13:06:
         92:82:52:9e:18:a0:8f:94:38:46:7c:b1:4b:34:a9:3c:fa:c3:
         cb:65:3f:76:b9:d6:0d:03:13:50:c2:cf:fa:c0:37:b6:15:57:
         46:76:f7:5e:bf:52:3a:92:4c:80:16:c2:8b:a9:68:22:24:d1:
         28:56:1f:2b:48:34:70:ac:aa:0c:5d:ad:0e:53:85:ac:52:f5:
         3f:a0:1d:c1:8d:6d:b1:74:a4:11:13:94:77:b4:9a:ae:cd:64:
         23:2c:27:73:d0:4c:49:de:54:d9:76:9f:b4:58:32:b1:bd:7a:
         65:b0:ae:0e:53:99:49:0c:ad:e2:93:fd:de:c3:39:e5:50:62:
         90:20:f6:5e:55:59:70:bf:cd:e6:8b:df:7a:ee:6f:23:43:b4:
         b0:0c:5c:2b:d1:4c:1b:7b:be:b9:10:95:47:71:b9:18:a7:4f:
         1d:a8:24:fa:5b:e8:0b:ce:27:1a:0a:0a:03:21:87:3c:3c:ab:
         29:b1:8e:b4:f9:2f:6b:4c:28:09:af:bf:a3:f1:67:49:b0:df:
         57:c9:be:e0:16:4b:38:b7:8b:4a:93:50:4e:fd:42:35:56:16:
         ff:b2:d5:dd:92:8b:48:4a:60:97:ee:a0:d3:df:85:ff:c8:1b:
         db:58:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:43:04 2025 by rpki-client