This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          sGQdN5Fh2qMPZoTc4Agg6O5a5Bnml97g9UPzW0TmhD8=
Subject key identifier:   EB:E8:59:3A:BB:53:C7:F6:C8:FD:1C:E9:B8:81:FD:43:35:11:05:67
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       3F0AFE2DEE5E331F28049E0E2EC0479CBB096263
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:01 +0000
ROA not before:           Wed 12 Nov 2025 19:45:01 +0000
ROA not after:            Wed 11 Nov 2026 19:50:01 +0000
asID:                     52270
IP address blocks:        190.105.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0a:fe:2d:ee:5e:33:1f:28:04:9e:0e:2e:c0:47:9c:bb:09:62:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:01 2025 GMT
            Not After : Nov 11 19:50:01 2026 GMT
        Subject: CN=EBE8593ABB53C7F6C8FD1CE9B881FD4335110567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:78:62:5a:fe:9f:b4:65:4e:ae:bb:37:bf:
                    96:8c:81:78:30:cb:b2:49:8f:6e:32:78:ae:b7:bc:
                    fc:e4:5e:0a:58:58:02:44:ac:df:de:7e:88:6d:f2:
                    e2:c6:92:2d:e7:30:4e:32:3c:5a:23:24:78:d2:f5:
                    92:5d:ff:f0:ec:ab:81:00:9e:44:d0:87:5c:4e:e6:
                    13:20:f6:7b:a5:25:13:21:a3:e3:31:20:36:6f:71:
                    7d:ba:7e:41:d0:e5:a0:78:ef:04:cb:58:ef:3a:85:
                    34:52:4b:cf:32:db:d0:68:ba:25:f4:eb:ec:9e:b3:
                    c7:c1:b7:1a:96:c3:e3:7f:f4:1a:42:60:af:9d:89:
                    c9:c3:4b:e2:76:71:91:ad:98:51:77:ce:18:43:d9:
                    88:ba:bb:b6:a4:53:dc:82:cb:f6:7c:91:33:f6:c1:
                    aa:4e:16:7c:d3:24:f5:f6:7f:cd:c3:65:57:a3:03:
                    7e:0c:86:db:a9:40:97:5c:a1:8d:63:40:4e:19:a1:
                    5d:06:52:03:f6:73:1e:34:df:9c:17:92:8e:f2:6a:
                    6e:33:8f:d8:12:1d:c1:d9:0e:9c:f2:b4:34:6d:79:
                    70:b4:3a:af:56:05:36:7d:11:12:d0:91:d0:fa:93:
                    98:14:cd:1f:17:70:00:01:2b:ff:47:96:ce:81:22:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:59:3A:BB:53:C7:F6:C8:FD:1C:E9:B8:81:FD:43:35:11:05:67
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230312e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:f6:7b:97:da:5f:42:3c:a1:7d:45:4f:fb:9f:8c:83:8f:
         bd:04:70:06:2e:cc:33:5a:bd:af:0c:17:4f:0d:4c:88:76:c1:
         68:ab:64:ba:92:49:78:ad:d9:3d:9d:f9:4e:67:66:f5:91:60:
         e1:9b:88:a9:ef:e7:19:fb:59:41:e7:d6:3d:d2:55:94:35:61:
         40:38:45:13:d8:f3:60:92:84:da:ca:99:9d:a1:00:43:61:9d:
         01:ff:fe:73:ca:6c:57:df:4b:fe:7f:cb:e3:c6:f4:2a:be:da:
         af:8a:ac:b4:fc:26:71:e1:66:45:f6:5e:a3:f8:22:00:45:e7:
         7a:f8:31:71:03:fb:b1:1b:72:e8:8b:2f:4c:66:73:5a:98:b0:
         3f:1d:f7:93:03:56:e7:79:31:98:46:47:fa:41:57:77:e4:d2:
         a2:4c:36:e0:f4:20:53:7a:2f:60:c0:ac:19:ce:5f:3a:03:e4:
         07:fb:6e:f2:5b:e3:e2:48:c1:d3:8c:6c:e9:b0:21:bc:30:da:
         f5:73:0a:c6:dd:cd:b9:7a:43:91:a7:e2:8d:a4:32:d0:bb:83:
         fd:12:64:78:e6:53:44:1a:3b:27:a7:b1:5f:8e:a3:9c:0a:db:
         99:f8:04:fa:43:9b:ce:2b:b2:23:ce:58:c1:33:63:b9:56:66:
         13:e9:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:09 2025 by rpki-client