This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235322e302f32342d3234203d3e20323732383433.roa
File:                     3139302e3139362e3235322e302f32342d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          r48dyCuxthcanw3cmQ1IuOlyUR9cQDtP2m4Odt4jwqU=
Subject key identifier:   96:B0:C4:5C:98:0A:2B:C4:C5:B7:65:37:E0:7A:A4:F2:11:4F:1F:A1
Certificate issuer:       /CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
Certificate serial:       4422DEC9ABDB68C513CBB1465B924A454881BF41
Authority key identifier: 36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235322e302f32342d3234203d3e20323732383433.roa
Signing time:             Thu 20 Nov 2025 19:10:00 +0000
ROA not before:           Thu 20 Nov 2025 19:05:00 +0000
ROA not after:            Thu 19 Nov 2026 19:10:00 +0000
asID:                     272843
IP address blocks:        190.196.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 06:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:22:de:c9:ab:db:68:c5:13:cb:b1:46:5b:92:4a:45:48:81:bf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
        Validity
            Not Before: Nov 20 19:05:00 2025 GMT
            Not After : Nov 19 19:10:00 2026 GMT
        Subject: CN=96B0C45C980A2BC4C5B76537E07AA4F2114F1FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:2c:ae:55:4b:9c:2a:17:74:d1:87:1a:59:
                    ae:ad:f2:9d:df:75:89:76:6b:f5:05:47:f6:34:27:
                    61:ef:ba:a5:8e:06:99:2b:fc:fe:84:53:6f:cb:58:
                    ec:67:26:af:8b:e1:d0:c9:d6:4b:6e:bf:a9:d1:4b:
                    69:e8:84:09:80:ea:4f:16:6a:6c:02:eb:d8:a9:00:
                    ea:cc:97:91:97:89:b5:a2:65:6d:b4:1a:37:12:5a:
                    6a:c0:61:16:35:9c:4a:97:58:a3:60:3f:dc:2d:b6:
                    10:e5:5a:a8:cd:1c:e9:8d:38:02:fb:e1:79:72:48:
                    8c:76:7d:75:0f:c3:a8:a1:e0:e5:eb:2d:c2:a0:aa:
                    ef:00:df:9c:d5:03:c8:45:01:6c:78:7c:b1:f4:29:
                    7b:63:d9:2e:ef:ed:af:bb:d2:01:f3:0b:aa:77:06:
                    af:44:6b:6e:37:d6:74:31:0d:e7:1f:4d:8b:0e:b1:
                    12:78:3e:90:a0:f1:60:8d:79:06:34:d9:50:fd:5e:
                    eb:48:ed:2b:7d:66:54:01:27:71:c8:a6:ee:fa:e2:
                    8a:df:23:91:21:92:ae:00:20:56:58:ef:14:2b:bc:
                    ad:d5:a2:1e:aa:40:4d:2a:36:7d:b1:86:b1:63:99:
                    fe:3d:92:2e:06:31:03:9c:f8:9b:dc:d4:6b:32:76:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B0:C4:5C:98:0A:2B:C4:C5:B7:65:37:E0:7A:A4:F2:11:4F:1F:A1
            X509v3 Authority Key Identifier:
                keyid:36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235322e302f32342d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:77:32:e5:43:16:85:19:5b:4e:40:5f:15:48:d4:af:17:9d:
         e1:44:89:66:3a:b2:6e:2e:d7:a9:d3:d7:fc:fc:ff:ad:6d:a2:
         96:8d:e7:41:dc:3c:19:d1:a2:9e:33:42:b7:a6:18:a9:c7:e0:
         a0:c3:6f:23:c7:d2:62:a3:ea:dc:5e:39:79:e8:65:d0:12:51:
         90:e1:e0:6d:79:94:9d:a2:b5:75:da:47:68:43:1b:2c:00:00:
         19:57:61:25:fe:20:c4:24:f2:a2:3b:98:8a:61:22:05:0f:5d:
         b9:c2:a7:60:82:67:c8:f5:20:55:61:9f:63:ca:85:b5:fd:98:
         39:35:46:d2:a8:db:5d:d1:44:e9:a7:4a:36:7f:83:f5:d1:f2:
         64:09:f7:0c:7e:75:95:ba:ae:c8:63:71:f6:bd:dd:7f:7a:10:
         5c:78:76:65:b2:ce:8f:80:b9:9c:6e:e7:d0:30:2d:c7:c6:1e:
         31:2a:5b:3a:50:7b:4b:99:2e:74:f4:89:fd:83:11:a5:6f:eb:
         db:01:c6:7e:7e:c7:46:e1:c3:2e:81:6a:08:60:c0:4f:07:a1:
         3b:48:60:63:f9:51:34:49:9b:85:73:09:b7:c4:80:3b:58:2c:
         80:70:7b:e5:a4:4f:49:f9:b0:52:73:6f:b9:12:fd:1c:2b:82:
         86:5f:63:8e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURCLeyavbaMUTy7FGW5JKRUiBv0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY1Nzk4MTY0QTdBN0RBMzBENUNDRjkxREJFN0E3RjQw
NDcyMTM0QjAeFw0yNTExMjAxOTA1MDBaFw0yNjExMTkxOTEwMDBaMDMxMTAvBgNV
BAMTKDk2QjBDNDVDOTgwQTJCQzRDNUI3NjUzN0UwN0FBNEYyMTE0RjFGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlyyuVUucKhd00YcaWa6t8p3f
dYl2a/UFR/Y0J2HvuqWOBpkr/P6EU2/LWOxnJq+L4dDJ1ktuv6nRS2nohAmA6k8W
amwC69ipAOrMl5GXibWiZW20GjcSWmrAYRY1nEqXWKNgP9wtthDlWqjNHOmNOAL7
4XlySIx2fXUPw6ih4OXrLcKgqu8A35zVA8hFAWx4fLH0KXtj2S7v7a+70gHzC6p3
Bq9Ea2431nQxDecfTYsOsRJ4PpCg8WCNeQY02VD9XutI7St9ZlQBJ3HIpu764orf
I5Ehkq4AIFZY7xQrvK3Voh6qQE0qNn2xhrFjmf49ki4GMQOc+Jvc1Gsydi4jAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUlrDEXJgKK8TFt2U34Hqk8hFPH6EwHwYDVR0j
BBgwFoAUNleYFkp6faMNXM+R2+en9ARyE0swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDJENDMwMkE1ODQzQTMxNUJDNEMzODhGQ0I0NTZCMTYz
OEY2NTNGQ0FFRkM1QkYzNjhDNDFDQUZGNThGQ0ZELzAvMzY1Nzk4MTY0QTdBN0RB
MzBENUNDRjkxREJFN0E3RjQwNDcyMTM0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjU3OTgxNjRBN0E3REEzMEQ1
Q0NGOTFEQkU3QTdGNDA0NzIxMzRCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQyRDQzMDJBNTg0M0EzMTVCQzRDMzg4RkNCNDU2QjE2MzhGNjUzRkNB
RUZDNUJGMzY4QzQxQ0FGRjU4RkNGRC8wLzMxMzkzMDJlMzEzOTM2MmUzMjM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM0MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xPwwDQYJKoZIhvcNAQELBQADggEBACV3MuVDFoUZW05AXxVI1K8XneFEiWY6sm4u
16nT1/z8/61topaN50HcPBnRop4zQremGKnH4KDDbyPH0mKj6txeOXnoZdASUZDh
4G15lJ2itXXaR2hDGywAABlXYSX+IMQk8qI7mIphIgUPXbnCp2CCZ8j1IFVhn2PK
hbX9mDk1RtKo213RROmnSjZ/g/XR8mQJ9wx+dZW6rshjcfa93X96EFx4dmWyzo+A
uZxu59AwLcfGHjEqWzpQe0uZLnT0if2DEaVv69sBxn5+x0bhwy6BaghgwE8HoTtI
YGP5UTRJm4VzCbfEgDtYLIBwe+WkT0n5sFJzb7kS/RwrgoZfY44=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:20 2025 by rpki-client