This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa
File:                     3138362e352e3231382e302f32332d3234203d3e20323730303739.roa (raw, json)
Hash identifier:          I0UXHsQjbGY9lEhiKk/mCSF9maq4EnTlp43zG3INlag=
Subject key identifier:   82:41:03:69:53:32:79:55:48:31:E3:5E:B1:50:20:1B:88:5B:4B:99
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       17DDD149CA61E788CBA12FC99BE2CEC2169C6BBE
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa
Signing time:             Fri 28 Nov 2025 13:53:47 +0000
ROA not before:           Fri 28 Nov 2025 13:48:47 +0000
ROA not after:            Fri 27 Nov 2026 13:53:47 +0000
asID:                     270079
IP address blocks:        186.5.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 08:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dd:d1:49:ca:61:e7:88:cb:a1:2f:c9:9b:e2:ce:c2:16:9c:6b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Nov 28 13:48:47 2025 GMT
            Not After : Nov 27 13:53:47 2026 GMT
        Subject: CN=82410369533279554831E35EB150201B885B4B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:c9:8c:27:06:25:7b:65:ba:b2:01:7b:04:
                    b4:e5:fd:26:2d:f4:db:b7:32:81:58:4e:e4:f5:3a:
                    78:0b:c0:ca:e4:1e:0d:c8:1d:b8:2c:33:f2:67:90:
                    90:c2:b6:18:ed:0e:8a:f9:94:9a:f6:ef:b8:73:ea:
                    20:3c:87:a7:eb:4f:00:e6:6c:48:c5:84:3f:1d:58:
                    2c:cb:e6:20:ad:7e:b1:e4:74:7a:21:67:38:25:bc:
                    b1:dc:31:8c:9b:c3:7b:83:21:20:1d:f6:53:6e:f3:
                    6b:d3:4c:72:68:56:58:df:f0:5a:8d:5b:11:e6:fb:
                    3d:03:6b:48:12:99:dc:cb:f9:f5:18:42:cf:9c:76:
                    80:93:73:3f:ee:cc:64:6d:f4:7b:64:fe:41:41:80:
                    a7:d2:9a:4e:57:7c:86:23:26:af:e1:ed:09:77:98:
                    a8:60:c8:b9:e1:4d:88:1c:55:4b:fa:17:00:bb:97:
                    48:01:ce:50:f7:39:06:46:83:69:eb:ba:91:fc:36:
                    4b:74:31:01:e8:12:f0:6a:1a:da:08:9d:98:93:92:
                    95:41:41:c1:da:0b:45:a2:0e:43:4b:fd:b0:0d:b8:
                    58:3d:7d:3a:34:83:46:6d:dc:1d:29:55:87:c4:95:
                    17:cd:39:1a:76:8a:23:ba:37:0a:6f:f5:3c:01:0a:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:41:03:69:53:32:79:55:48:31:E3:5E:B1:50:20:1B:88:5B:4B:99
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3231382e302f32332d3234203d3e20323730303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:a1:a7:d0:9c:4f:89:88:eb:7f:08:83:01:27:c1:28:39:
         f7:37:28:83:c2:74:26:37:10:23:88:50:20:3a:0f:5d:85:88:
         a5:9e:e0:8f:aa:c6:c1:e2:ec:99:df:93:50:2f:ef:cd:eb:7b:
         2a:70:73:ca:ad:91:9d:c3:62:bf:79:18:a4:94:b5:ad:e6:37:
         5b:04:81:c7:27:cf:b0:c0:ca:c7:5e:c4:ef:72:7b:a8:4f:3e:
         cb:9f:5b:14:6c:8a:bd:92:53:76:9b:64:92:1c:5e:89:86:24:
         7e:f7:20:06:c3:56:d7:22:68:89:4e:48:96:1a:69:2a:e1:31:
         4b:da:5f:36:fa:7c:60:86:13:03:f9:37:5e:da:5c:16:b9:56:
         9f:e7:c1:29:33:88:84:ba:1c:73:b9:cc:c5:f6:02:80:de:31:
         de:35:2a:22:7e:14:f4:f9:ad:6f:42:51:3c:e5:16:21:82:c4:
         31:7a:bf:a8:5b:4f:65:93:eb:cf:e4:96:28:75:39:bf:0e:9f:
         e2:0a:cc:1c:86:88:aa:98:c5:c2:7a:f7:11:cf:cb:73:a9:8d:
         39:79:af:f4:e5:ad:6e:92:2c:e3:f6:8b:0c:7a:6b:5f:5a:75:
         ea:55:ad:6c:86:99:66:13:26:44:c9:60:fa:44:b4:ca:bd:80:
         fe:32:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:05:50 2025 by rpki-client