This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e32372e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          RGZIv+8z4Ga1Z5Jlx74pIMVvbUVnFUV/oR4IzI7RB5s=
Subject key identifier:   C7:D2:AD:37:68:3B:2E:BC:D3:DA:18:D2:56:87:C3:45:68:75:11:27
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3798506E2A56F22E8BD8664D3765703AC030FB17
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 08 Nov 2025 23:52:04 +0000
ROA not before:           Sat 08 Nov 2025 23:47:04 +0000
ROA not after:            Sat 07 Nov 2026 23:52:04 +0000
asID:                     27768
IP address blocks:        201.217.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:50:6e:2a:56:f2:2e:8b:d8:66:4d:37:65:70:3a:c0:30:fb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Nov  8 23:47:04 2025 GMT
            Not After : Nov  7 23:52:04 2026 GMT
        Subject: CN=C7D2AD37683B2EBCD3DA18D25687C34568751127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:a3:de:5e:3c:1b:d1:00:cf:de:7b:aa:1e:
                    52:9f:ce:2f:b0:0c:46:bf:83:6d:d4:1f:c6:1b:e8:
                    c8:50:e8:48:b8:51:2b:2e:16:d2:ea:e1:04:78:6c:
                    1f:3e:cc:90:21:c3:ff:9b:53:0e:b0:c4:bb:af:68:
                    68:5c:24:4d:98:31:83:ac:fa:ff:f2:bb:7b:45:7f:
                    a6:82:e8:cd:8e:5a:54:87:86:b4:a5:a7:cd:d7:60:
                    d1:e7:fd:0e:f5:00:67:14:1f:0e:a8:9b:c5:47:90:
                    a9:92:52:35:05:47:3e:7f:1a:1b:37:c1:d7:0d:1a:
                    ef:ad:ce:ca:6a:c2:16:e2:37:ed:cb:0e:df:a3:95:
                    63:d7:ee:de:44:67:8d:7b:e7:5b:47:37:59:d7:dd:
                    d6:c9:82:5c:7f:c7:4e:22:a4:b8:52:44:1b:cc:e1:
                    2c:34:e8:28:4f:1e:38:c1:20:e9:d1:fb:ce:90:7e:
                    21:54:08:dd:67:12:7d:36:15:f0:50:e7:e9:50:7c:
                    c8:9f:2e:86:e6:e1:54:a0:b8:2d:ca:b7:1c:69:46:
                    5a:1f:f8:01:0e:10:22:e6:20:77:a0:d6:16:bf:10:
                    4c:19:6a:4b:e9:e6:8b:37:f0:ef:a4:81:71:43:f5:
                    5a:bc:d7:60:33:7e:ad:c3:ce:19:64:34:a2:ba:66:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:AD:37:68:3B:2E:BC:D3:DA:18:D2:56:87:C3:45:68:75:11:27
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32372e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:02:f2:c3:0c:b7:44:af:cc:b8:43:3f:94:0e:07:0c:ae:b9:
         a8:39:34:54:89:33:56:9c:1e:52:1f:e8:dc:20:8e:f3:b9:62:
         ef:73:85:ca:43:ac:bb:f5:dd:e7:a6:6b:5e:6c:70:b7:52:bf:
         d5:5b:35:01:41:34:5c:7b:f5:72:c5:ab:e9:95:cb:92:f3:09:
         68:8f:5a:2f:02:e2:7a:72:4c:29:f1:27:c4:af:b1:1c:5e:a1:
         5b:af:a5:f3:6f:0f:14:9d:a4:d2:85:dc:06:dd:dd:1e:c1:e1:
         a9:81:52:d9:14:d4:75:14:5f:9a:77:bf:11:96:9f:2b:39:e3:
         9c:50:34:d3:bf:e3:6a:12:f9:95:3d:4f:5e:26:b1:52:38:87:
         a2:fe:cd:90:29:eb:12:3e:bb:48:2e:e6:e1:a2:b9:33:25:29:
         86:ce:59:7a:ac:0c:fd:93:e0:e6:a7:98:e5:34:93:49:23:7d:
         e8:71:a2:9b:d8:57:69:f3:9f:c4:8e:7b:62:f1:6f:4b:a1:ac:
         55:c2:0c:b2:44:0b:19:d1:c6:eb:d1:60:ef:a0:a5:ff:96:51:
         60:db:e2:17:e7:01:b4:0b:1f:d6:e0:f0:fa:47:fc:e5:ae:66:
         ed:61:e2:24:4d:2e:e2:6d:fd:1e:3c:62:81:9a:c9:35:74:73:
         38:fe:f3:8b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN5hQbipW8i6L2GZNN2VwOsAw+xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNTExMDgyMzQ3MDRaFw0yNjExMDcyMzUyMDRaMDMxMTAvBgNV
BAMTKEM3RDJBRDM3NjgzQjJFQkNEM0RBMThEMjU2ODdDMzQ1Njg3NTExMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/6PeXjwb0QDP3nuqHlKfzi+w
DEa/g23UH8Yb6MhQ6Ei4USsuFtLq4QR4bB8+zJAhw/+bUw6wxLuvaGhcJE2YMYOs
+v/yu3tFf6aC6M2OWlSHhrSlp83XYNHn/Q71AGcUHw6om8VHkKmSUjUFRz5/Ghs3
wdcNGu+tzspqwhbiN+3LDt+jlWPX7t5EZ41751tHN1nX3dbJglx/x04ipLhSRBvM
4Sw06ChPHjjBIOnR+86QfiFUCN1nEn02FfBQ5+lQfMifLobm4VSguC3KtxxpRlof
+AEOECLmIHeg1ha/EEwZakvp5os38O+kgXFD9Vq812Azfq3DzhlkNKK6ZvKRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUx9KtN2g7LrzT2hjSVofDRWh1EScwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMnZGzAN
BgkqhkiG9w0BAQsFAAOCAQEAcwLywwy3RK/MuEM/lA4HDK65qDk0VIkzVpweUh/o
3CCO87li73OFykOsu/Xd56ZrXmxwt1K/1Vs1AUE0XHv1csWr6ZXLkvMJaI9aLwLi
enJMKfEnxK+xHF6hW6+l828PFJ2k0oXcBt3dHsHhqYFS2RTUdRRfmne/EZafKznj
nFA007/jahL5lT1PXiaxUjiHov7NkCnrEj67SC7m4aK5MyUphs5ZeqwM/ZPg5qeY
5TSTSSN96HGim9hXafOfxI57YvFvS6GsVcIMskQLGdHG69Fg76Cl/5ZRYNviF+cB
tAsf1uDw+kf85a5m7WHiJE0u4m39HjxigZrJNXRzOP7ziw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:27 2025 by rpki-client