This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38322e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          eba8drUdxSwnl2wZZYWgLud95Zo4W0Bgdli2GoJEBuY=
Subject key identifier:   11:B4:0D:E6:AD:FB:D6:AC:25:A0:EA:D0:4F:A4:C9:EF:91:16:14:09
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       272FEC3A642F53CAFE27BEB427740CE32FCF2F72
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38322e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 02 Dec 2025 20:10:01 +0000
ROA not before:           Tue 02 Dec 2025 20:05:01 +0000
ROA not after:            Tue 01 Dec 2026 20:10:01 +0000
asID:                     18678
IP address blocks:        190.108.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2f:ec:3a:64:2f:53:ca:fe:27:be:b4:27:74:0c:e3:2f:cf:2f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Dec  2 20:05:01 2025 GMT
            Not After : Dec  1 20:10:01 2026 GMT
        Subject: CN=11B40DE6ADFBD6AC25A0EAD04FA4C9EF91161409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:5b:1e:b9:d9:ab:7a:0e:9a:46:ef:0e:70:
                    19:e3:6d:33:c4:d0:16:12:f5:a5:04:d6:06:78:9f:
                    7a:d9:8d:2c:4c:68:cf:7b:19:cc:ce:9c:ff:55:39:
                    df:23:65:74:d4:31:52:70:18:34:de:ea:82:00:18:
                    da:ee:be:ca:17:45:f3:81:a6:33:7c:fb:47:23:20:
                    42:42:ed:12:24:1c:68:bf:b5:b2:02:31:38:5d:25:
                    6c:1a:60:c3:6b:e1:d7:82:bb:11:52:b7:05:e5:87:
                    0e:74:1a:29:57:ff:97:d2:d0:ea:1f:d4:a1:41:0e:
                    2b:7b:99:98:ab:3f:5b:db:12:87:a2:57:bc:be:73:
                    f2:38:1f:ec:df:e4:81:2d:3f:d5:78:e9:3a:65:10:
                    0e:50:ae:9e:e0:ec:ec:c0:ff:5b:e7:e6:fd:cb:56:
                    3a:e6:9d:6b:85:b1:c4:cb:28:3b:bb:3b:e0:f6:17:
                    49:45:b9:e3:48:ed:bc:9d:b5:c8:bf:75:d5:ba:c8:
                    5f:3b:58:1c:5d:fe:ed:18:91:7f:49:aa:af:5d:b7:
                    94:15:a6:ec:52:07:b7:85:f6:4e:ac:cb:f1:1a:61:
                    58:39:86:d0:bc:ce:d6:ba:21:cf:02:6f:02:6f:3b:
                    f5:88:ba:88:84:7f:38:c7:35:11:58:d9:b0:8c:20:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:0D:E6:AD:FB:D6:AC:25:A0:EA:D0:4F:A4:C9:EF:91:16:14:09
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f6:5f:e2:20:db:e9:6a:b4:85:ab:b1:2f:d4:5f:c7:99:f8:
         7e:ea:c7:49:d0:ad:b5:7c:6e:d9:75:a1:24:82:f2:71:08:47:
         40:de:77:9b:aa:70:c3:a8:d6:68:ce:df:8c:07:36:0c:a5:34:
         b8:a9:e8:fb:e2:d8:ba:8b:3f:90:00:5d:b6:1d:a2:9a:bb:65:
         06:6a:9f:f4:2d:2f:04:11:2b:16:29:65:3f:fd:45:a5:c7:63:
         e7:c4:e1:34:24:d5:d5:c7:c6:03:95:d3:23:e1:44:b4:da:bd:
         b9:8b:36:03:01:8b:c1:39:de:b2:1b:40:be:6a:7a:ed:c6:fe:
         c0:b8:55:0b:8d:ca:e8:5f:af:56:d2:c1:e6:9e:44:bf:ac:6a:
         0a:32:c5:7e:c6:6d:c1:fc:9d:b1:f6:75:78:30:2c:f0:f7:fd:
         df:23:c7:a1:ed:80:11:51:34:9d:58:0e:ba:13:e3:f1:15:6f:
         b2:40:6a:a2:71:7b:df:46:be:fd:de:2a:75:ad:ac:eb:95:d6:
         ff:44:f6:a7:10:72:06:ad:02:66:15:d7:7d:52:ab:1d:5d:6a:
         16:b8:8d:0b:aa:68:64:16:c9:02:ab:2f:bf:e4:71:c7:fc:6c:
         5c:0c:6b:03:63:84:9e:f6:53:ce:c8:d5:4f:89:2f:bd:46:a1:
         e5:ad:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:27:49 2025 by rpki-client