This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
File:                     3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          LJVgzWNI/rVeYlOK8HSMJUEVPCOHT9qfkYd0WYI+01Y=
Subject key identifier:   95:CB:CD:A6:94:FA:60:5D:D0:3A:95:47:5B:30:85:B4:92:03:71:77
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       67C9C0A0BB26BB4AE987CEC6D0394FBEFDAF19B2
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 05 Nov 2025 19:51:44 +0000
ROA not before:           Wed 05 Nov 2025 19:46:44 +0000
ROA not after:            Wed 04 Nov 2026 19:51:44 +0000
asID:                     262196
IP address blocks:        190.184.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 11:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:c0:a0:bb:26:bb:4a:e9:87:ce:c6:d0:39:4f:be:fd:af:19:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Nov  5 19:46:44 2025 GMT
            Not After : Nov  4 19:51:44 2026 GMT
        Subject: CN=95CBCDA694FA605DD03A95475B3085B492037177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:7c:b7:60:4d:14:99:4b:83:87:0d:e8:4d:
                    c0:de:97:94:67:0b:26:75:f5:7b:30:64:5b:79:82:
                    8d:63:3a:ed:37:48:9c:cf:c5:21:05:05:34:78:81:
                    5f:31:2f:ef:b4:c0:b3:32:9a:e8:b7:df:f9:d5:65:
                    8f:08:92:1b:66:00:d4:99:1c:5d:29:d0:8e:2e:1d:
                    e9:ba:83:42:43:b8:ad:ed:eb:01:ef:f3:4a:87:b1:
                    c4:9d:71:bc:66:ea:2f:bc:c2:d8:e4:1e:de:b6:0f:
                    f4:8a:8b:9f:82:d5:2f:78:7a:f0:25:54:56:eb:cc:
                    93:1a:fb:26:5b:d3:0d:ee:63:49:ef:69:18:6b:5e:
                    d7:3e:df:b5:80:10:ee:b8:e5:03:d6:ff:2c:0d:c5:
                    2c:04:7b:5c:5c:eb:3b:23:07:ee:af:6e:af:12:47:
                    39:16:57:c4:9b:8c:c0:94:af:d8:6b:a1:93:19:97:
                    10:c7:32:82:0c:0b:b9:e1:e1:86:cc:76:6b:2a:7c:
                    d4:67:03:75:5d:e7:e7:27:60:65:4c:b3:2f:1e:cf:
                    a9:76:81:8f:85:5a:9a:73:b3:79:27:b2:7c:10:98:
                    1b:66:95:c5:93:9e:af:3e:aa:0e:ca:e9:37:19:f1:
                    e6:39:80:74:6f:ac:14:04:9d:42:22:ef:cb:8c:99:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CB:CD:A6:94:FA:60:5D:D0:3A:95:47:5B:30:85:B4:92:03:71:77
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:40:67:11:1f:dc:7e:10:cf:a7:8b:ce:ef:f2:74:64:57:88:
         5e:f0:87:67:da:36:59:f9:0d:c9:d0:93:c2:53:73:e2:49:76:
         21:c7:80:81:8c:ca:2f:99:b3:e6:86:99:d8:4f:16:85:7b:af:
         a5:22:02:db:ca:bc:f3:ca:d9:4c:9a:d3:b0:fe:5e:05:89:38:
         76:c1:b4:70:da:5c:de:4e:77:29:da:d3:73:60:61:d1:16:ea:
         26:f9:2b:e9:58:77:3c:72:29:a1:45:73:b4:94:aa:6f:15:37:
         ca:9f:25:2a:bc:ea:b9:a2:60:51:de:ba:d5:65:f2:6b:24:03:
         db:08:e9:42:e6:07:41:fa:37:78:54:81:dc:ad:a1:a0:2e:bd:
         0c:4f:ff:3b:d6:ba:57:c3:ee:d0:aa:ca:3b:af:be:0b:a4:2b:
         e8:cb:f1:53:00:72:07:19:1a:7d:22:7d:5d:6c:72:5e:37:8a:
         46:4f:6e:67:bc:7b:a2:4b:48:b8:13:a5:d0:a9:30:74:e2:ba:
         64:34:84:4d:cc:dc:21:9f:14:a2:74:9f:45:29:68:e6:71:2e:
         10:eb:28:e7:a9:47:7d:12:7d:77:8f:f8:eb:27:c4:59:ee:c8:
         34:41:95:dc:91:46:a7:fd:ef:dc:1f:61:fe:90:11:85:e1:ff:
         3e:68:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:38:36 2025 by rpki-client