This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa
File:                     3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa (raw, json)
Hash identifier:          XXAb4s56oObfUvBVgYNZC8yyf5inJnjYBfKroaRCvtE=
Subject key identifier:   DE:14:ED:CE:1E:DD:6E:F2:31:3E:F9:5C:74:88:63:A2:D6:63:DA:8D
Certificate issuer:       /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial:       3D8F9ABC56619B08545D2E3106C273F1D55D0C60
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa
Signing time:             Fri 07 Nov 2025 18:15:00 +0000
ROA not before:           Fri 07 Nov 2025 18:10:00 +0000
ROA not after:            Fri 06 Nov 2026 18:15:00 +0000
asID:                     61481
IP address blocks:        186.189.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
                          rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 22:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:9a:bc:56:61:9b:08:54:5d:2e:31:06:c2:73:f1:d5:5d:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
        Validity
            Not Before: Nov  7 18:10:00 2025 GMT
            Not After : Nov  6 18:15:00 2026 GMT
        Subject: CN=DE14EDCE1EDD6EF2313EF95C748863A2D663DA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:4e:bf:27:09:d6:35:f5:e5:04:fe:57:6f:
                    41:02:3b:3e:ad:18:20:b9:8e:59:82:92:22:43:9d:
                    d8:b5:40:11:f9:29:cb:7b:f3:df:8c:8a:2f:ad:36:
                    0d:ce:27:13:ab:03:eb:2a:99:c5:9d:04:74:c7:38:
                    f0:bc:f1:cf:37:9e:ca:31:00:96:2d:66:74:14:de:
                    75:87:ce:33:00:e4:33:1e:ae:24:8c:7f:04:e2:b6:
                    16:e0:15:4f:4e:f4:5a:a8:f5:39:49:aa:e2:4f:4d:
                    44:d8:a8:46:a6:61:26:85:69:b0:8b:3f:d8:f0:c2:
                    dc:be:67:0e:b3:1e:77:9f:1e:52:4e:2b:a8:cc:35:
                    f1:01:22:a8:6c:18:24:a7:56:39:fd:7a:83:c9:1e:
                    26:cf:5e:40:13:01:bc:7c:ad:a9:48:38:2b:0c:c4:
                    5a:b0:e3:e8:65:c3:43:a2:aa:23:03:c1:18:94:6f:
                    8a:b2:d0:d8:fb:a6:58:17:2a:7c:1e:5c:da:8d:de:
                    cb:86:cb:3a:f6:39:25:cb:c5:53:d9:8b:33:89:d7:
                    9d:a9:8b:6b:0e:3c:76:0c:c1:1e:fa:63:d2:51:ab:
                    30:b6:bc:d2:a1:e2:0c:e3:db:11:bd:ea:96:22:a2:
                    e3:f4:0b:29:33:f0:2d:6e:69:f2:f5:34:28:fa:9f:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:14:ED:CE:1E:DD:6E:F2:31:3E:F9:5C:74:88:63:A2:D6:63:DA:8D
            X509v3 Authority Key Identifier:
                keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:8d:bb:f5:d9:8f:c8:7a:40:28:9e:6d:97:9c:d1:bd:8b:
         cd:9e:3d:02:2e:63:83:2b:74:a5:15:56:4f:ec:9f:f5:03:17:
         ee:10:a9:b2:cb:c8:f0:61:4b:1c:7f:65:ed:be:83:2e:e0:c8:
         65:24:30:a8:b9:04:8d:90:f9:6a:08:57:fa:a6:08:ba:85:c7:
         26:12:8a:e3:50:05:48:c7:92:a7:fe:59:59:61:cf:22:ac:2a:
         62:44:c2:f2:97:f9:e7:15:61:17:57:1b:40:5d:bc:b6:25:9d:
         b4:5a:71:f7:8c:2e:15:42:69:26:63:98:e2:8f:a5:0f:6c:6a:
         a7:59:e1:55:48:da:89:09:97:9e:c6:ae:d4:eb:b0:92:55:95:
         e5:87:1d:be:ee:28:2a:de:77:a8:8a:51:6b:16:b6:a9:ea:15:
         6e:98:0d:30:d5:d1:e3:49:58:fb:9b:3b:11:b6:75:8f:18:d3:
         da:6c:df:9b:1e:bc:46:66:d5:d0:f0:af:b6:09:39:97:51:e0:
         13:54:42:64:39:bf:07:a1:35:f7:bd:dd:a1:c9:39:5d:08:9d:
         ee:88:12:ce:e6:cc:68:b7:ea:2d:28:ad:3b:1c:de:90:b6:92:
         47:a1:fe:b2:64:7a:e7:12:1e:63:eb:d7:63:35:38:e9:e3:a4:
         ee:c4:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:03 2025 by rpki-client