This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa
File:                     3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa (raw, json)
Hash identifier:          rVra91ZpnlvSyNcizMeIWh8UTZBnTsUHK39L7t5sDuA=
Subject key identifier:   0A:AA:F7:39:C4:80:21:53:65:42:13:95:93:AE:EE:65:CD:36:24:EC
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       5AFB08A6B702B5C89D058FE5B6DBAE2D66D62EDF
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa
Signing time:             Sat 08 Nov 2025 22:52:03 +0000
ROA not before:           Sat 08 Nov 2025 22:47:03 +0000
ROA not after:            Sat 07 Nov 2026 22:52:03 +0000
asID:                     27866
IP address blocks:        177.250.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:08:a6:b7:02:b5:c8:9d:05:8f:e5:b6:db:ae:2d:66:d6:2e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  8 22:47:03 2025 GMT
            Not After : Nov  7 22:52:03 2026 GMT
        Subject: CN=0AAAF739C48021536542139593AEEE65CD3624EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:3c:32:e7:f4:41:df:ba:84:1a:0e:90:da:
                    3b:31:d5:8b:bf:34:e5:20:66:99:6a:bc:d0:ae:19:
                    67:f5:ef:c8:c0:9f:0e:f0:f8:cd:11:f0:dd:ce:b9:
                    60:87:33:f8:13:29:8b:fb:af:21:af:af:11:fe:06:
                    6e:8a:9e:74:f4:9f:f8:13:cc:98:aa:42:2b:26:4b:
                    72:da:2c:12:f6:fd:5d:e5:b4:14:23:eb:ec:4b:38:
                    72:4b:88:71:bf:80:ab:8d:10:1d:14:74:3f:a8:89:
                    8a:b5:fc:0e:a7:5e:a3:fa:25:bd:9c:a2:09:1f:b9:
                    4f:af:37:ee:13:c0:f7:9a:7c:8d:2d:cb:3e:dd:7a:
                    3a:9c:b5:17:aa:b7:85:15:40:88:c6:eb:c2:b9:6a:
                    5b:60:6b:a2:4b:18:21:74:7a:44:0b:85:33:e8:dd:
                    1d:5b:38:0b:9b:6b:54:39:e5:a6:2d:de:0b:44:f1:
                    50:fb:5a:13:ba:2e:67:dd:1a:8e:2c:9e:66:50:01:
                    d0:0c:e8:2e:ef:a9:02:44:ee:9a:4c:3d:38:d2:96:
                    8c:3f:ff:fd:ff:2c:40:14:0f:f7:ef:9c:63:13:96:
                    f1:a3:ba:7b:38:ca:39:74:d1:3b:99:4f:08:77:7f:
                    d6:c5:30:87:b9:54:49:a0:47:9b:5f:35:96:60:9f:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:F7:39:C4:80:21:53:65:42:13:95:93:AE:EE:65:CD:36:24:EC
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3235322e302f32322d3232203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:61:58:9d:76:cc:c4:2f:6e:cc:b0:3c:db:93:7a:7b:25:
         0d:89:03:0b:e5:82:4b:39:e5:4b:f4:43:98:a4:be:c8:65:38:
         60:83:2a:b8:d0:9d:0b:36:1d:d5:96:7d:48:c5:43:9f:4c:f7:
         ed:2f:c5:9e:36:9c:33:e1:85:68:32:41:f4:98:11:9d:3d:92:
         cd:90:2a:22:28:80:d2:58:3d:0b:19:52:77:8e:ca:ac:5e:67:
         67:70:33:5c:ca:4d:55:fe:26:ce:bb:c4:6d:7b:8b:0a:b9:62:
         43:34:dd:bb:75:f4:e0:ec:7d:13:ed:74:23:9b:2d:ab:d8:76:
         bc:83:fd:b6:05:3a:db:3d:90:63:41:58:a6:37:3a:3f:1b:73:
         54:2c:0a:9d:20:b6:0f:bc:c2:f2:e0:5b:51:3b:63:ae:ed:db:
         b6:61:f9:51:11:04:40:1e:b1:0c:7e:3a:b3:ab:54:2c:38:c5:
         9b:cd:8e:4d:ff:36:30:84:89:5e:bc:9b:42:28:03:32:c8:2d:
         51:53:f1:1e:90:10:7e:43:18:ed:9d:a2:92:18:f6:93:6c:83:
         67:63:fb:81:22:14:4e:13:7b:5a:92:84:8c:3a:84:e0:49:06:
         18:12:cb:38:b3:71:97:10:8b:19:70:08:3b:9c:03:7f:79:70:
         d7:8a:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:23:32 2025 by rpki-client