This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232322e302f32332d3234203d3e20323732383033.roa
File:                     3138362e352e3232322e302f32332d3234203d3e20323732383033.roa (raw, json)
Hash identifier:          2bM4ank+qhXMgbaLhWO5SKjMX4SN345n1biW5Uj/7Tg=
Subject key identifier:   C0:17:BC:52:F3:2E:D5:1C:DC:BB:74:9A:50:A2:66:EC:26:9A:EF:23
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       3E592E5FDC84FD3F22C5EBD5E1B0A11FBAECB6D7
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232322e302f32332d3234203d3e20323732383033.roa
Signing time:             Fri 14 Nov 2025 17:52:36 +0000
ROA not before:           Fri 14 Nov 2025 17:47:36 +0000
ROA not after:            Fri 13 Nov 2026 17:52:36 +0000
asID:                     272803
IP address blocks:        186.5.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 08:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:2e:5f:dc:84:fd:3f:22:c5:eb:d5:e1:b0:a1:1f:ba:ec:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Nov 14 17:47:36 2025 GMT
            Not After : Nov 13 17:52:36 2026 GMT
        Subject: CN=C017BC52F32ED51CDCBB749A50A266EC269AEF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:69:44:3e:bf:81:6d:92:f5:e4:4f:ef:ff:95:
                    5e:e3:85:04:21:b6:22:0b:64:00:05:7d:f3:4e:76:
                    57:86:51:07:b0:90:38:48:f0:15:a9:8b:c9:79:3b:
                    a9:6f:17:2f:7a:07:fd:81:54:b4:41:6d:53:95:16:
                    11:2e:97:56:d2:05:37:db:b7:6e:94:a3:c9:57:c0:
                    6d:7f:13:68:e3:4f:2e:c7:de:77:3d:fd:74:8c:1e:
                    7f:4b:0b:e2:9a:5a:4f:a2:90:5c:c9:7b:d1:e6:69:
                    2b:6f:75:d4:96:2f:e0:66:93:63:6f:d0:ee:24:c6:
                    bc:3b:a2:ac:d7:f3:48:0a:58:64:6e:29:89:b3:d9:
                    c7:4c:a3:26:d7:ce:b4:b4:c4:91:eb:d7:24:cd:7a:
                    26:5e:00:2a:e9:69:f6:7d:ef:de:36:1a:c4:91:e0:
                    3b:c7:2a:7c:07:a6:ab:a2:1d:4f:3c:88:69:64:86:
                    3c:50:b9:26:d7:e1:f7:12:5b:70:e6:98:ca:69:42:
                    2b:9e:c0:27:38:b1:3b:b6:3a:ef:b1:b0:6d:e1:1b:
                    68:01:19:7b:ce:7f:e3:f0:dd:aa:7b:61:d3:e0:9b:
                    65:97:b3:33:b6:ad:5c:a2:27:c1:2d:02:55:01:41:
                    99:5c:33:62:a8:fa:db:95:4b:54:e9:14:30:e8:e7:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:BC:52:F3:2E:D5:1C:DC:BB:74:9A:50:A2:66:EC:26:9A:EF:23
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/3138362e352e3232322e302f32332d3234203d3e20323732383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:71:80:bb:27:fb:92:3e:42:53:b0:9c:c5:91:43:36:47:
         8f:76:42:c9:19:44:32:8f:e7:fa:45:81:0c:e4:4f:e8:ab:bb:
         c8:d3:60:32:a8:a6:94:e9:ee:e3:9e:e8:b5:83:60:32:0d:1d:
         6f:3a:aa:06:94:98:04:b7:dc:52:8c:7c:ff:92:35:b9:f0:ee:
         d7:21:f9:8c:23:f0:7d:36:81:c4:4d:be:48:ce:8f:be:e7:f9:
         37:d3:f1:3b:f4:74:a3:44:af:5f:72:d9:67:b5:66:0b:91:da:
         f3:71:c7:4f:e5:65:61:70:90:16:06:41:21:0d:74:2f:1e:7a:
         92:dc:c3:26:4f:83:0d:cc:31:9d:3d:80:47:1b:74:61:eb:34:
         66:af:80:68:8f:2f:46:d6:a1:6d:49:1e:ee:61:f7:1a:3a:21:
         4e:cc:d6:7e:6f:52:bb:46:2d:26:e4:6e:d5:81:34:17:ec:df:
         e0:96:38:01:b2:22:dc:88:0f:69:bf:6f:04:9f:48:97:16:45:
         c5:92:ec:37:e7:53:6d:f7:30:6e:80:25:eb:cc:b9:f5:bc:d6:
         02:e2:61:5a:cb:26:d3:3c:24:5c:86:26:d7:f6:a3:9a:38:78:
         bb:fb:e7:f9:e2:29:ea:83:84:3d:06:6d:e9:46:6e:2b:46:b7:
         bc:0c:71:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPlkuX9yE/T8ixevV4bChH7rsttcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQzNzJBQ0RFRkIxREEyQzM1QkRDOUI3RjRFODFGNEVE
ODU3RUI1ODAeFw0yNTExMTQxNzQ3MzZaFw0yNjExMTMxNzUyMzZaMDMxMTAvBgNV
BAMTKEMwMTdCQzUyRjMyRUQ1MUNEQ0JCNzQ5QTUwQTI2NkVDMjY5QUVGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaUQ+v4FtkvXkT+//lV7jhQQh
tiILZAAFffNOdleGUQewkDhI8BWpi8l5O6lvFy96B/2BVLRBbVOVFhEul1bSBTfb
t26Uo8lXwG1/E2jjTy7H3nc9/XSMHn9LC+KaWk+ikFzJe9HmaStvddSWL+Bmk2Nv
0O4kxrw7oqzX80gKWGRuKYmz2cdMoybXzrS0xJHr1yTNeiZeACrpafZ97942GsSR
4DvHKnwHpquiHU88iGlkhjxQuSbX4fcSW3DmmMppQiuewCc4sTu2Ou+xsG3hG2gB
GXvOf+Pw3ap7YdPgm2WXszO2rVyiJ8EtAlUBQZlcM2Ko+tuVS1TpFDDo54tbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwBe8UvMu1Rzcu3SaUKJm7Caa7yMwHwYDVR0j
BBgwFoAU7Tcqze+x2iw1vcm39OgfTthX61gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzMxRjBGNEE2QzMyNkY1MTIyQ0FDRDRDNjQ3NTVDRTFB
QkQ5MDQ0NUM2NzVCMjY1RjczODE0QUUyQTkzN0E5LzAvRUQzNzJBQ0RFRkIxREEy
QzM1QkRDOUI3RjRFODFGNEVEODU3RUI1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDM3MkFDREVGQjFEQTJDMzVC
REM5QjdGNEU4MUY0RUQ4NTdFQjU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczMUYwRjRBNkMzMjZGNTEyMkNBQ0Q0QzY0NzU1Q0UxQUJEOTA0NDVD
Njc1QjI2NUY3MzgxNEFFMkE5MzdBOS8wLzMxMzgzNjJlMzUyZTMyMzIzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczMjM4MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAboF3jAN
BgkqhkiG9w0BAQsFAAOCAQEAEU5xgLsn+5I+QlOwnMWRQzZHj3ZCyRlEMo/n+kWB
DORP6Ku7yNNgMqimlOnu457otYNgMg0dbzqqBpSYBLfcUox8/5I1ufDu1yH5jCPw
fTaBxE2+SM6Pvuf5N9PxO/R0o0SvX3LZZ7VmC5Ha83HHT+VlYXCQFgZBIQ10Lx56
ktzDJk+DDcwxnT2ARxt0Yes0Zq+AaI8vRtahbUke7mH3GjohTszWfm9Su0YtJuRu
1YE0F+zf4JY4AbIi3IgPab9vBJ9IlxZFxZLsN+dTbfcwboAl68y59bzWAuJhWssm
0zwkXIYm1/ajmjh4u/vn+eIp6oOEPQZt6UZuK0a3vAxxcw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:05:51 2025 by rpki-client