This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa
File:                     3137372e3235302e33322e302f32302d3230203d3e203237373638.roa (raw, json)
Hash identifier:          +e4WHWb5AtQr2OgwMb8Snazgc4/zryCOGYfvLOAxtrg=
Subject key identifier:   3E:D4:85:6E:D3:EB:18:DE:94:8F:C4:6A:0B:18:A9:2A:66:DC:2E:E8
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       0275A11A207BA967698845D983F4EBE6BB3AC0AA
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa
Signing time:             Fri 07 Nov 2025 18:51:56 +0000
ROA not before:           Fri 07 Nov 2025 18:46:56 +0000
ROA not after:            Fri 06 Nov 2026 18:51:56 +0000
asID:                     27768
IP address blocks:        177.250.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:75:a1:1a:20:7b:a9:67:69:88:45:d9:83:f4:eb:e6:bb:3a:c0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  7 18:46:56 2025 GMT
            Not After : Nov  6 18:51:56 2026 GMT
        Subject: CN=3ED4856ED3EB18DE948FC46A0B18A92A66DC2EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:90:d7:b7:22:c9:b1:35:58:f9:b5:db:da:
                    e9:f2:59:d1:7c:40:86:b1:4e:22:55:a4:66:f0:34:
                    92:99:ee:b8:38:2a:4d:bf:b5:dc:28:cd:79:b9:24:
                    57:72:de:17:0b:9a:dc:38:d1:1d:35:6c:dc:59:2e:
                    03:9e:34:92:df:23:e9:04:59:37:01:0c:7c:f7:6b:
                    6f:b4:d0:b5:4a:42:74:2d:e8:ea:8f:e3:cb:02:8e:
                    b9:7a:05:63:77:66:04:e8:63:84:d4:d6:6b:37:39:
                    61:d8:d5:3f:f2:83:d8:c4:b4:38:f9:24:96:53:b4:
                    dd:ee:9c:be:54:8d:42:4c:8d:2b:fc:e7:35:cb:dc:
                    ca:6d:ec:fc:e3:be:70:4c:f5:0a:d0:3e:38:36:ef:
                    31:4a:db:6b:ed:9a:24:5e:fe:f9:dc:66:80:ba:e8:
                    3c:dd:0e:78:39:dc:52:2c:7d:cb:08:03:6a:ef:cb:
                    15:0d:56:a8:e8:fa:64:95:cf:c6:9f:ea:14:c5:3d:
                    b7:86:85:96:b0:1d:76:0f:a1:a9:d9:3e:ab:3a:ed:
                    dd:a5:58:c4:cc:e4:65:a4:be:fe:58:b2:12:39:88:
                    6f:ee:c2:bf:7f:8c:47:7f:2a:dc:c2:09:96:f7:b1:
                    32:64:aa:20:03:81:9a:55:d8:9a:86:e6:27:eb:e5:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D4:85:6E:D3:EB:18:DE:94:8F:C4:6A:0B:18:A9:2A:66:DC:2E:E8
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:68:61:12:c0:8c:32:47:3c:b9:92:54:d4:50:22:9d:73:
         73:7d:42:b5:38:84:b8:8e:d5:ed:bf:2b:60:9f:a3:db:f7:0d:
         49:f5:ad:d5:d5:78:a4:ee:80:d3:cf:0e:12:10:1c:21:aa:70:
         84:f6:21:0a:d8:5f:80:a6:8d:9e:8f:bc:6d:30:c7:6a:ca:57:
         e0:c0:38:bb:f3:d1:40:8e:52:0a:37:7b:7c:ec:b3:11:7b:15:
         2f:7a:d0:ee:9f:63:bc:4f:88:4f:f7:72:46:86:c5:c4:bc:48:
         ac:98:02:ce:88:3b:0a:6a:92:e1:eb:f7:f0:66:cf:8a:21:a5:
         db:fd:5a:4c:4c:32:10:ff:b7:e7:7b:76:93:f6:e5:4b:0b:5d:
         2c:2b:33:bd:2d:fc:4c:8b:64:14:fd:ae:92:89:4a:b2:3a:92:
         e9:45:e6:e8:b8:5e:31:7d:8f:87:54:4a:51:a0:da:61:bb:10:
         0b:46:94:db:28:0e:74:81:a7:08:14:18:94:2c:12:cc:8c:2e:
         cb:6a:33:18:6c:44:c7:54:e2:48:1a:e4:4a:43:07:44:c0:d3:
         f5:9e:85:58:8e:8e:f5:5f:fa:3a:6d:43:33:89:2c:6e:7f:24:
         bf:8a:76:47:00:b6:76:f4:d7:91:21:01:80:80:ab:2b:b1:ac:
         26:00:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:26 2025 by rpki-client