This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f32302d3230203d3e203237373638.roa
File:                     3137372e3235302e36342e302f32302d3230203d3e203237373638.roa (raw, json)
Hash identifier:          +ykz6QJC74P/Vr+zWzjHbaO6JSrqdw6/lo24EI50oVk=
Subject key identifier:   46:7A:03:9A:DE:E6:9F:D1:2D:EF:D8:76:FC:9A:69:3C:6B:1C:0E:AE
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       4391C9F2AE7D746903D0511B52775DBDD9E61382
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f32302d3230203d3e203237373638.roa
Signing time:             Fri 07 Nov 2025 18:51:55 +0000
ROA not before:           Fri 07 Nov 2025 18:46:55 +0000
ROA not after:            Fri 06 Nov 2026 18:51:55 +0000
asID:                     27768
IP address blocks:        177.250.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:c9:f2:ae:7d:74:69:03:d0:51:1b:52:77:5d:bd:d9:e6:13:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  7 18:46:55 2025 GMT
            Not After : Nov  6 18:51:55 2026 GMT
        Subject: CN=467A039ADEE69FD12DEFD876FC9A693C6B1C0EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:7f:1b:9d:7f:f0:1d:a7:be:c7:a0:31:24:
                    9f:0e:e4:37:d8:75:41:78:49:1d:a0:ef:f9:0a:b3:
                    7d:b4:f4:9b:12:a3:4e:3b:07:b2:1c:86:99:05:9a:
                    25:2f:ed:11:e1:18:73:12:c4:c6:36:90:fd:45:89:
                    bb:ff:5e:c9:d6:44:95:33:41:eb:7d:7b:bc:9d:8c:
                    b4:9a:e8:f5:bc:27:f1:85:34:40:ce:a1:36:0a:94:
                    d9:40:f7:ae:62:a9:e3:10:d8:1d:a9:33:b4:4c:59:
                    d9:ef:7c:90:c7:09:d5:dd:76:5f:e4:ff:45:65:d2:
                    fe:a1:fb:03:2f:89:2b:e7:8e:f3:78:e2:53:6e:6d:
                    85:a3:93:42:6f:59:f7:d5:5e:d1:7b:a0:32:98:1c:
                    33:d5:c5:27:eb:66:bf:b8:bc:64:3b:36:72:eb:4a:
                    73:1a:9c:08:d4:8d:bf:3d:87:46:ce:33:d4:ea:9e:
                    65:4c:cc:2d:b5:07:fd:85:f3:00:a0:90:31:3f:87:
                    0c:6f:fb:55:23:b9:85:d3:48:22:35:58:53:c9:d8:
                    74:cc:8d:a1:e6:9b:e7:97:9f:42:e8:48:42:8f:af:
                    8a:ce:48:12:89:ee:32:d9:56:e7:fe:d5:11:a8:89:
                    13:72:e0:84:9a:a0:34:8f:a2:9d:3d:ec:9f:b2:e6:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7A:03:9A:DE:E6:9F:D1:2D:EF:D8:76:FC:9A:69:3C:6B:1C:0E:AE
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e36342e302f32302d3230203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:91:57:ec:d9:4e:47:83:cd:47:f2:6f:e8:a8:77:d4:fc:04:
         89:3e:03:af:3c:f2:c3:03:d4:68:d8:84:1d:d1:ca:d3:2b:7b:
         3d:ff:f7:3f:8a:46:84:4f:08:6b:f7:df:f7:5a:3d:8c:9d:fd:
         e6:d5:6f:38:bb:cd:bc:c1:5f:4a:7c:76:81:6e:f7:72:ab:46:
         47:7c:45:c5:f3:7f:87:71:ff:7d:c2:9c:a0:5e:5d:06:68:5e:
         33:b5:de:82:11:fc:7c:c5:c5:85:91:c6:3a:ec:3b:82:f1:d4:
         c2:ee:b3:6f:29:3c:ad:29:a7:7c:56:28:c3:67:cc:4b:3e:2d:
         39:d0:23:1e:ad:e9:a5:f7:64:98:6f:9c:f2:8d:4c:2e:5e:20:
         db:ea:14:0d:43:6e:09:b5:13:74:e3:e8:64:65:6c:29:f8:f0:
         ed:7b:e5:18:3f:34:d3:6e:db:5f:42:e6:c5:ad:9c:bc:36:95:
         75:a0:7d:0c:27:87:9f:85:4f:52:5e:99:43:2d:61:23:ac:d1:
         48:e8:dc:f7:d3:d1:91:1e:41:f7:f2:e0:15:1a:d0:f2:e6:8b:
         2b:12:96:95:8b:d7:08:41:43:06:3c:ce:d4:94:4c:1e:10:cb:
         3b:be:37:fe:75:82:fa:dd:b7:26:99:21:3d:02:84:12:f4:77:
         f4:c1:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:29 2025 by rpki-client