This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa
File:                     3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa (raw, json)
Hash identifier:          80VDx/fNA8cO1GjbrLcA8/A9YPUAVfyvZrVlvL9TuQM=
Subject key identifier:   7F:9F:60:9E:F2:12:2C:D2:07:3F:BF:AB:F8:82:AC:69:47:7A:9E:21
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       4BE4F7249AFDA3D6D6A0D00BA4D90277A1E0FAED
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa
Signing time:             Mon 17 Nov 2025 15:52:51 +0000
ROA not before:           Mon 17 Nov 2025 15:47:51 +0000
ROA not after:            Mon 16 Nov 2026 15:52:51 +0000
asID:                     262249
IP address blocks:        200.108.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e4:f7:24:9a:fd:a3:d6:d6:a0:d0:0b:a4:d9:02:77:a1:e0:fa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 15:47:51 2025 GMT
            Not After : Nov 16 15:52:51 2026 GMT
        Subject: CN=7F9F609EF2122CD2073FBFABF882AC69477A9E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:ae:f3:d3:14:bf:fc:54:8f:c6:81:8a:55:
                    57:92:7d:f6:ea:b0:86:a9:16:8c:e6:53:8c:b2:1a:
                    e8:06:57:1b:52:13:49:ca:78:ba:f9:22:51:cb:b7:
                    28:f1:42:cd:a8:47:b7:ca:13:57:a0:fc:18:97:77:
                    4d:2f:01:1a:7a:cb:60:5c:7b:0c:e3:a2:c0:07:ac:
                    9f:ed:b0:a9:42:ab:92:9d:93:18:20:fb:80:f2:6b:
                    e0:2d:a2:02:f0:de:40:16:fe:bc:07:72:69:f3:6d:
                    81:cd:24:20:a2:bd:5e:54:0c:e1:27:8a:7e:95:fd:
                    35:c3:ab:ae:bf:83:ec:1f:8d:41:7d:0e:d8:9b:65:
                    7a:e6:af:a0:8e:4d:33:a4:91:3f:96:a8:0f:71:b0:
                    c5:e3:29:91:4d:df:d3:82:80:ba:33:e2:2a:89:1c:
                    5c:c7:7a:ec:58:77:b7:cf:88:69:d3:59:01:74:e9:
                    06:3f:f7:be:ca:ca:4b:69:32:66:78:1d:78:77:72:
                    0e:4c:10:82:9c:a2:6c:6d:31:8c:f0:b6:7f:67:02:
                    75:ed:6e:21:36:d2:ec:75:84:c2:f7:31:30:e6:7f:
                    89:00:bd:6c:db:5b:4c:b9:7d:df:fe:33:ba:8b:7c:
                    b3:aa:81:44:9b:86:3f:75:37:71:aa:47:28:06:10:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:60:9E:F2:12:2C:D2:07:3F:BF:AB:F8:82:AC:69:47:7A:9E:21
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3230302e3130382e3135302e302f32342d3234203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:ea:7b:a1:0f:23:ab:a8:7f:af:ce:ca:eb:7d:b8:e7:46:
         fa:3c:58:3f:81:23:ea:1c:90:74:0c:ae:70:5c:d0:ad:c3:ef:
         2f:29:3a:b2:75:6a:75:0f:d6:20:f3:18:20:bf:9b:d1:44:6c:
         6f:f1:35:3c:26:32:d8:50:82:3f:7e:18:c4:7c:ca:1c:19:32:
         5b:14:9a:e1:6b:1b:a4:f6:2b:35:13:59:66:0f:59:ae:68:82:
         6f:81:4e:5d:d5:bf:eb:3d:50:87:bb:61:60:38:4d:94:35:f6:
         8b:87:bc:6a:93:ca:51:05:04:9b:da:16:18:c3:ee:25:7d:66:
         a6:89:f8:43:f9:42:ff:b7:75:fd:d0:a9:f3:b3:db:6b:e0:24:
         42:1e:4b:47:c9:a6:8e:6c:0f:b6:12:74:20:24:f1:41:37:c8:
         ce:48:8c:f4:d5:62:d5:71:4a:49:86:4f:ad:88:68:bc:e0:3c:
         ac:69:4a:8d:09:1a:2f:6e:94:d7:02:ef:90:b3:81:ca:63:88:
         fe:24:b0:75:9c:57:40:73:b8:a5:4f:37:81:6e:b7:ab:55:55:
         09:93:a3:7a:1d:96:17:8c:ec:dd:36:1c:1d:36:fe:3d:9f:9d:
         a5:de:9c:58:7d:37:24:2d:86:2e:f6:ea:9e:df:c8:b9:ae:89:
         24:c7:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:43:06 2025 by rpki-client