This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f32302d3230203d3e203237373638.roa
File:                     3137372e3235302e302e302f32302d3230203d3e203237373638.roa (raw, json)
Hash identifier:          5RZE/P/7ngmApeqS6Xprsqc8sBVsPR+bJtkV+8qKzAo=
Subject key identifier:   5E:1F:03:EF:4A:61:54:7A:B9:16:4B:91:E5:E4:98:02:0A:98:08:BD
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       63E927418BF940CE1136DEBA76AB9ED248627638
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f32302d3230203d3e203237373638.roa
Signing time:             Fri 07 Nov 2025 18:51:57 +0000
ROA not before:           Fri 07 Nov 2025 18:46:57 +0000
ROA not after:            Fri 06 Nov 2026 18:51:57 +0000
asID:                     27768
IP address blocks:        177.250.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:27:41:8b:f9:40:ce:11:36:de:ba:76:ab:9e:d2:48:62:76:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  7 18:46:57 2025 GMT
            Not After : Nov  6 18:51:57 2026 GMT
        Subject: CN=5E1F03EF4A61547AB9164B91E5E498020A9808BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:72:f3:5b:9d:3c:62:da:ed:f2:1d:70:a3:29:
                    72:3f:69:6d:f2:3f:75:0a:f0:b2:88:65:69:12:06:
                    61:b0:83:8e:28:67:fe:82:ee:3b:7c:d6:42:09:6f:
                    af:5c:9e:a5:51:c4:bf:f2:ba:5c:07:31:4a:1a:d8:
                    85:3d:2c:d2:56:c0:c9:07:4b:05:af:f6:b7:1c:2f:
                    d6:5b:fd:e3:94:f8:ed:2a:01:5a:ec:b3:7c:66:ee:
                    ca:49:ab:bd:cb:c3:56:20:9b:40:9b:3c:54:fc:46:
                    a0:af:ac:c2:a6:de:ad:de:52:aa:a9:88:41:20:a5:
                    25:27:3d:5b:df:95:90:b1:be:a8:82:1d:27:a4:ba:
                    b2:19:fe:d3:60:e3:8c:b5:89:46:b1:9b:ca:1d:bb:
                    fd:cd:8c:81:c6:eb:79:b3:52:78:e3:8a:20:2c:4a:
                    cb:e2:cf:98:37:eb:33:f6:fd:29:38:2b:03:f9:1b:
                    59:b1:9c:bc:73:51:fa:24:1f:d0:5e:d2:ed:ff:35:
                    26:c0:a6:d2:8e:8d:81:5a:b1:31:02:d6:32:6a:a9:
                    eb:d9:57:3c:79:3e:88:fe:fd:c2:6c:6b:d5:79:50:
                    96:81:a5:4c:d9:3a:42:b8:ed:ab:ec:20:7c:da:ef:
                    12:76:8b:f5:78:52:6e:eb:8e:be:1c:81:90:63:71:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:03:EF:4A:61:54:7A:B9:16:4B:91:E5:E4:98:02:0A:98:08:BD
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f32302d3230203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:44:d8:f0:84:c0:36:b6:d5:57:82:87:c0:84:7b:2e:7b:
         87:85:7f:91:f8:d9:a3:41:84:5c:78:2d:d2:fb:7c:ac:26:8c:
         c0:88:09:d0:24:84:35:d8:7f:ae:1e:31:5e:bd:4f:e8:4d:54:
         d5:a0:e7:eb:1f:5f:1c:e5:6f:6f:e1:f1:d1:04:22:84:7a:61:
         e8:86:c2:b0:96:1a:12:7c:4f:8f:3f:e5:1e:41:96:2c:f1:75:
         a5:67:ce:4e:d5:29:4a:3d:dc:52:39:f3:37:b1:a3:ec:16:92:
         69:9c:20:a4:b0:76:0b:bb:41:c6:55:78:74:29:c1:d1:5c:12:
         03:24:3a:36:a7:32:15:36:fe:6f:d2:63:27:a9:7c:90:d8:b0:
         c7:20:70:e3:83:13:eb:43:d7:fe:8b:ad:7a:0b:0e:7f:4d:56:
         f3:4f:79:70:b6:53:49:89:92:ea:c2:2a:c0:a9:72:a4:6b:8e:
         5b:e3:54:dd:de:5a:a6:49:57:db:0d:a4:77:12:fc:d1:51:71:
         6e:61:ce:14:ec:fa:4b:47:4a:aa:9a:fd:dc:85:05:92:3f:6b:
         69:83:33:9d:77:b9:4f:f9:cc:66:ff:44:4d:6b:56:58:72:b6:
         23:3c:95:87:77:6b:b6:ff:d4:42:da:3c:63:42:7e:8f:d0:76:
         d4:01:ee:62
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUY+knQYv5QM4RNt66dque0khidjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNTExMDcxODQ2NTdaFw0yNjExMDYxODUxNTdaMDMxMTAvBgNV
BAMTKDVFMUYwM0VGNEE2MTU0N0FCOTE2NEI5MUU1RTQ5ODAyMEE5ODA4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcvNbnTxi2u3yHXCjKXI/aW3y
P3UK8LKIZWkSBmGwg44oZ/6C7jt81kIJb69cnqVRxL/yulwHMUoa2IU9LNJWwMkH
SwWv9rccL9Zb/eOU+O0qAVrss3xm7spJq73Lw1Ygm0CbPFT8RqCvrMKm3q3eUqqp
iEEgpSUnPVvflZCxvqiCHSekurIZ/tNg44y1iUaxm8odu/3NjIHG63mzUnjjiiAs
Ssviz5g36zP2/Sk4KwP5G1mxnLxzUfokH9Be0u3/NSbAptKOjYFasTEC1jJqqevZ
Vzx5Poj+/cJsa9V5UJaBpUzZOkK47avsIHza7xJ2i/V4Um7rjr4cgZBjcSv3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXh8D70phVHq5FkuR5eSYAgqYCL0wHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMxMzczNzJlMzIzNTMwMmUzMDJlMzAy
ZjMyMzAyZDMyMzAyMDNkM2UyMDMyMzczNzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASx+gAwDQYJ
KoZIhvcNAQELBQADggEBAGj3RNjwhMA2ttVXgofAhHsue4eFf5H42aNBhFx4LdL7
fKwmjMCICdAkhDXYf64eMV69T+hNVNWg5+sfXxzlb2/h8dEEIoR6YeiGwrCWGhJ8
T48/5R5BlizxdaVnzk7VKUo93FI58zexo+wWkmmcIKSwdgu7QcZVeHQpwdFcEgMk
OjanMhU2/m/SYyepfJDYsMcgcOODE+tD1/6LrXoLDn9NVvNPeXC2U0mJkurCKsCp
cqRrjlvjVN3eWqZJV9sNpHcS/NFRcW5hzhTs+ktHSqqa/dyFBZI/a2mDM513uU/5
zGb/RE1rVlhytiM8lYd3a7b/1ELaPGNCfo/QdtQB7mI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:27 2025 by rpki-client