This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230302e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3230302e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          Lasbqtkw9utvoW2lZjtzsMiCHb9L4mRIMxkZV7ijcDg=
Subject key identifier:   66:CE:51:EC:5A:1F:CD:E5:8C:DE:E7:47:9B:77:BF:DC:93:B0:66:A5
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       39C241E5789A42826D392C21E01A91A45269C0E9
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230302e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:02 +0000
ROA not before:           Wed 12 Nov 2025 19:45:02 +0000
ROA not after:            Wed 11 Nov 2026 19:50:02 +0000
asID:                     52270
IP address blocks:        190.105.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c2:41:e5:78:9a:42:82:6d:39:2c:21:e0:1a:91:a4:52:69:c0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:02 2025 GMT
            Not After : Nov 11 19:50:02 2026 GMT
        Subject: CN=66CE51EC5A1FCDE58CDEE7479B77BFDC93B066A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:cb:37:82:48:5b:21:76:13:2d:94:cb:00:
                    33:b1:ce:9b:33:f5:c1:cc:b6:a1:5e:e6:a8:28:e4:
                    36:1a:7a:31:04:6d:91:20:78:f1:5d:75:4a:9e:09:
                    07:66:31:0a:a7:d8:5f:bc:13:70:a0:05:50:2c:13:
                    2e:b7:5c:bc:41:5a:6a:a4:39:6d:bc:f6:cc:78:6a:
                    36:84:10:48:f7:58:1c:c3:21:8f:bf:6d:56:06:ce:
                    86:3f:fe:1f:31:c0:80:0a:9f:8b:d7:bd:00:fc:1e:
                    22:b2:ba:28:94:eb:8e:cd:c6:73:a5:5f:c1:0a:bc:
                    85:2a:7d:13:f6:ea:44:72:f9:30:d2:04:b8:3a:5d:
                    bd:29:25:16:00:9a:aa:e5:82:71:4e:2a:4b:72:61:
                    14:06:e1:10:ab:a0:89:8b:72:f6:87:c7:4f:1c:01:
                    5e:6a:4e:13:8f:8b:73:9c:09:1d:a9:04:98:7a:c3:
                    bd:a8:ef:ec:a7:14:a5:e8:81:92:ae:d2:a5:3f:93:
                    68:f1:cb:71:b1:87:62:2b:86:7c:4f:e2:de:e3:58:
                    34:54:c1:86:37:aa:4f:67:cb:20:eb:3b:8d:d8:35:
                    f5:32:49:94:cd:cd:4d:ac:ec:b4:5a:f5:fb:8d:d2:
                    53:0c:0c:c2:6a:d9:4e:28:f2:ca:68:80:7c:74:91:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:51:EC:5A:1F:CD:E5:8C:DE:E7:47:9B:77:BF:DC:93:B0:66:A5
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230302e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:7d:af:e5:25:dd:45:a9:e9:28:d3:3f:fe:ae:47:ae:eb:
         14:32:50:c6:90:6c:f3:cd:95:06:d5:0f:f5:7e:ca:57:45:58:
         22:94:4b:0b:9f:d1:b1:17:d7:3f:a7:fb:bd:63:ce:80:63:07:
         4f:91:e5:26:68:b9:a2:ce:76:36:33:72:e7:44:ed:fb:b4:e7:
         ff:bc:a7:a4:2a:e5:c9:19:32:d6:11:f9:03:0c:9f:6e:45:b0:
         ab:cf:af:95:a8:3a:a5:47:e5:5a:7e:ba:83:e2:a8:40:d4:8d:
         ec:cc:2b:96:32:97:01:ca:e2:1c:37:b7:dd:c8:ff:9c:d2:9a:
         57:62:58:a0:de:3c:6b:f1:b7:c0:c1:c1:c4:d8:c0:94:78:2c:
         9d:95:bd:6c:77:b3:c4:61:d9:b5:76:0c:c8:0a:a2:ae:1d:24:
         a8:ca:2d:6e:74:af:e9:c0:d7:09:b0:f0:f3:b5:bc:4f:67:3a:
         6f:f3:e9:31:cd:9d:3e:32:9d:ad:6e:4b:19:07:94:dc:54:ea:
         73:2a:ac:0b:95:99:fe:03:4f:ed:08:fd:24:9e:94:09:89:15:
         e8:1d:7a:f5:a9:b1:ae:1a:2b:ba:01:ea:f4:46:86:08:74:9a:
         72:ac:5d:04:fb:50:3f:26:fc:c4:ac:4e:d0:83:e6:1a:95:51:
         79:85:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:08 2025 by rpki-client