This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa
File:                     3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          +L9cT5d7OEnrXaA5NMcjOBP0rTHgwDloTTrMWJBSjEs=
Subject key identifier:   AA:53:03:E5:92:B1:4D:36:DB:02:B3:88:B7:E2:B2:03:81:7C:5B:E5
Certificate issuer:       /CN=70A0634CDDA54F198C3B25579480179B4AA10A30
Certificate serial:       732775D632A4D1EF0CF587B2F85AE2122D71D888
Authority key identifier: 70:A0:63:4C:DD:A5:4F:19:8C:3B:25:57:94:80:17:9B:4A:A1:0A:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70A0634CDDA54F198C3B25579480179B4AA10A30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa
Signing time:             Fri 05 Dec 2025 21:45:00 +0000
ROA not before:           Fri 05 Dec 2025 21:40:00 +0000
ROA not after:            Fri 04 Dec 2026 21:45:00 +0000
asID:                     198949
IP address blocks:        185.237.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/70A0634CDDA54F198C3B25579480179B4AA10A30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/70A0634CDDA54F198C3B25579480179B4AA10A30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70A0634CDDA54F198C3B25579480179B4AA10A30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:27:75:d6:32:a4:d1:ef:0c:f5:87:b2:f8:5a:e2:12:2d:71:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70A0634CDDA54F198C3B25579480179B4AA10A30
        Validity
            Not Before: Dec  5 21:40:00 2025 GMT
            Not After : Dec  4 21:45:00 2026 GMT
        Subject: CN=AA5303E592B14D36DB02B388B7E2B203817C5BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:4e:19:0b:4a:75:dd:46:f9:bc:86:99:1c:
                    93:69:ed:98:30:5c:92:04:a7:f4:85:af:8e:a7:b3:
                    ee:12:b2:da:bb:0f:cb:84:ce:4e:69:24:13:1b:00:
                    1d:c9:1e:a5:04:1f:c7:cc:d4:11:b7:fe:30:74:d1:
                    d2:ae:0c:f0:d4:8d:97:4e:dc:d4:f8:80:95:b1:66:
                    43:74:dd:46:ee:59:f5:ea:5b:73:26:e6:e4:b1:66:
                    f0:32:a5:d5:ca:8a:14:66:24:e8:b0:97:62:5f:9b:
                    15:0a:05:11:fc:54:33:df:c8:d8:9f:95:01:f5:4c:
                    88:58:9e:72:16:43:d4:c9:7c:bd:3f:35:fc:f7:ba:
                    73:76:0b:71:d6:93:d0:60:db:4e:61:f6:ec:2b:06:
                    76:a8:19:9a:6e:a4:58:bd:4d:c4:52:77:1c:41:b3:
                    1a:85:c1:0f:36:73:6d:4b:da:a4:e6:49:e7:07:99:
                    2c:3c:c7:d3:e8:ee:34:ec:81:ea:15:bd:26:fc:d6:
                    ff:1a:51:e3:e6:96:7b:1a:f5:55:0b:a2:12:23:57:
                    8d:7f:8a:74:35:dc:f9:d2:8a:4e:4b:d3:6f:82:04:
                    56:d0:b2:10:c3:76:e0:af:03:6f:95:be:3f:3f:7e:
                    db:5a:37:7d:00:9e:18:13:23:3b:7e:32:38:3c:d0:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:53:03:E5:92:B1:4D:36:DB:02:B3:88:B7:E2:B2:03:81:7C:5B:E5
            X509v3 Authority Key Identifier:
                keyid:70:A0:63:4C:DD:A5:4F:19:8C:3B:25:57:94:80:17:9B:4A:A1:0A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/70A0634CDDA54F198C3B25579480179B4AA10A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70A0634CDDA54F198C3B25579480179B4AA10A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9469D57C5B16733AC3597D8FBE6920A1E2BB28C0C2F800770517249D0150E952/0/3138352e3233372e3233322e302f32342d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:0f:9b:e3:92:ea:a1:b0:0a:4f:5c:45:89:7d:47:d9:0d:
         5f:48:c3:58:e1:d3:33:ba:f2:eb:e3:6c:77:0d:a4:08:ee:fd:
         dc:3a:cd:ef:6a:71:78:17:04:74:7c:cb:a1:19:d9:f0:11:0a:
         5e:6f:27:16:db:d7:42:42:0c:ce:56:2b:a0:19:35:94:a5:79:
         8f:77:fa:ad:d3:6b:7e:fd:62:70:a0:e7:43:27:64:59:eb:4a:
         d4:de:69:04:a5:9b:b9:3e:40:0f:b2:54:a8:b1:2f:c1:3a:e5:
         4f:79:8b:24:46:22:0d:f2:e7:09:fa:0d:b9:48:e2:7e:74:18:
         0c:0d:68:1f:a0:cc:78:c9:cf:9a:61:c8:de:e4:9d:12:1f:13:
         c1:6d:11:b2:9d:95:78:f0:b2:c6:2c:e7:75:b1:34:4d:8e:b7:
         2b:5d:de:4a:ef:08:d5:56:a9:34:07:b7:91:4b:ff:29:79:96:
         ab:da:33:9c:91:37:a9:6a:a3:6d:03:42:af:c2:c5:91:f8:a9:
         f9:18:2f:56:db:f1:15:75:1d:8a:ee:63:ca:4a:71:f2:7c:88:
         f2:cb:e9:f4:d4:7f:8c:6d:da:20:59:41:29:2d:e7:77:2b:77:
         a0:b9:87:c3:30:49:d6:57:2c:e1:ea:25:35:09:d5:eb:cc:ab:
         45:9a:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:35:43 2025 by rpki-client