This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232302e302f32342d3234203d3e20323730303739.roa
File:                     3138362e352e3232302e302f32342d3234203d3e20323730303739.roa (raw, json)
Hash identifier:          9NomGRM0EXs+nf1PalJkANKndUHxUFxix0tIcInZR+0=
Subject key identifier:   DC:B4:98:F7:F1:EA:69:28:00:22:42:6D:EF:61:3F:65:94:EE:C7:8B
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       088D383B5ADD7597E00C19AF7FF17065694F2799
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232302e302f32342d3234203d3e20323730303739.roa
Signing time:             Fri 28 Nov 2025 13:53:47 +0000
ROA not before:           Fri 28 Nov 2025 13:48:47 +0000
ROA not after:            Fri 27 Nov 2026 13:53:47 +0000
asID:                     270079
IP address blocks:        186.5.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 08:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8d:38:3b:5a:dd:75:97:e0:0c:19:af:7f:f1:70:65:69:4f:27:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Nov 28 13:48:47 2025 GMT
            Not After : Nov 27 13:53:47 2026 GMT
        Subject: CN=DCB498F7F1EA69280022426DEF613F6594EEC78B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:a4:e0:ef:f0:d7:9e:15:de:1c:2d:73:3a:
                    95:12:01:80:ff:bf:86:3a:94:55:3b:b1:b6:d3:60:
                    17:53:07:e1:84:e9:f4:3b:58:8a:8f:40:0a:46:b2:
                    54:58:80:5e:d2:f7:f4:b7:69:da:c0:b6:44:b4:82:
                    95:7d:60:04:6b:5f:cc:1b:b4:3c:5a:74:77:d2:c3:
                    f0:c0:85:6d:3d:22:a9:35:7d:08:bd:ed:53:9b:5f:
                    5e:e1:91:c5:49:41:b1:70:6c:ae:a9:a6:5c:cb:df:
                    b1:f4:25:24:4b:3b:94:29:d0:3f:ab:48:d6:f8:ab:
                    37:9e:2e:d8:2f:21:1e:51:02:4d:46:82:a2:46:62:
                    ec:60:f3:12:ba:cf:22:07:f0:10:e3:a8:5f:8e:65:
                    9c:88:f0:cc:e2:a5:76:89:90:e2:e3:aa:c8:f8:9a:
                    d6:f4:ba:ca:a4:42:45:25:94:09:28:87:38:5f:7a:
                    68:86:64:d8:8a:8d:4c:c3:5b:f3:66:e8:61:b2:7e:
                    c6:c6:b9:8d:f5:df:4e:3a:21:17:4a:9b:0e:7e:5e:
                    eb:70:b5:4d:47:c5:61:26:11:cf:7f:73:f8:33:b9:
                    e5:d2:a9:8d:c2:60:3f:26:4b:4e:5a:75:b5:85:0a:
                    50:a8:d7:60:c7:21:d2:82:d7:41:1a:3f:86:5f:be:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:98:F7:F1:EA:69:28:00:22:42:6D:EF:61:3F:65:94:EE:C7:8B
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232302e302f32342d3234203d3e20323730303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:11:7a:ca:a6:27:af:62:ac:fc:8a:bf:2a:35:73:db:97:58:
         4e:f9:91:4b:39:c5:40:6a:1c:07:bb:7c:a9:7e:25:27:e3:55:
         90:11:14:ca:ce:44:25:2c:1d:53:ef:e2:47:e8:90:20:17:ad:
         b9:f0:72:5e:1c:50:c0:6a:ea:95:3e:a3:02:43:b9:3d:cb:c1:
         75:b7:9c:a2:c6:d2:1c:88:0d:ad:12:3a:36:68:bb:f8:23:b4:
         b9:45:14:f4:c8:56:28:f3:10:dc:e6:47:e6:11:2e:56:b5:41:
         85:2b:80:e1:91:5b:6f:b9:37:23:71:aa:c6:43:21:52:64:07:
         6b:da:ab:32:36:b3:06:0d:c3:d3:95:c9:8c:b1:86:e3:53:42:
         d8:e1:41:93:f4:5f:62:2e:f5:50:77:67:0d:e2:42:1e:51:01:
         66:fa:5f:bc:10:89:be:d0:e3:29:3f:2e:24:89:86:03:4b:13:
         23:7c:21:5a:f4:f5:d8:52:19:ef:d2:c8:16:fa:06:cd:bc:19:
         fd:76:4f:57:bc:a6:f7:ee:e8:a7:8a:7b:64:0e:3d:1e:68:6a:
         9d:5f:3f:ad:01:75:35:81:a7:1c:88:2c:34:ca:35:92:77:96:
         50:cf:a5:8d:34:84:68:7b:0c:90:76:af:f9:fa:83:2b:44:db:
         35:ea:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:05:54 2025 by rpki-client