This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230342e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3230342e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          ado24fXiPGETPnUo9DGFTAicKMDTt+MSsQfVcfOYpVE=
Subject key identifier:   88:FD:55:87:C3:A3:42:B4:37:69:28:A2:B3:43:F0:62:99:5D:9D:06
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       1202681E4BC18F260E25F9451C4AB62AF4211DD4
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230342e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:02 +0000
ROA not before:           Wed 12 Nov 2025 19:45:02 +0000
ROA not after:            Wed 11 Nov 2026 19:50:02 +0000
asID:                     52270
IP address blocks:        190.105.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:02:68:1e:4b:c1:8f:26:0e:25:f9:45:1c:4a:b6:2a:f4:21:1d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:02 2025 GMT
            Not After : Nov 11 19:50:02 2026 GMT
        Subject: CN=88FD5587C3A342B4376928A2B343F062995D9D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:d4:65:b6:c4:62:e1:72:1f:96:19:33:b0:
                    81:31:ec:71:02:19:36:9d:95:5b:5f:84:80:c4:c0:
                    6e:c5:da:a7:ad:33:be:59:0d:a5:26:ee:22:61:65:
                    40:3c:7a:eb:c2:ab:66:1b:a2:f3:1f:08:4c:07:aa:
                    81:b3:a5:09:6c:ba:21:1d:27:fc:c0:1e:c3:0e:8d:
                    6a:d5:8d:54:e1:a0:1c:a7:ae:1c:2b:38:a2:64:a4:
                    5e:59:dc:ba:2a:24:9b:4c:a1:2a:29:0b:b0:1e:c3:
                    23:6f:e1:d1:60:84:33:ff:ea:6d:d7:4d:48:0a:ae:
                    73:a6:3e:15:07:61:6b:9e:f3:a5:03:1d:be:e4:c8:
                    3c:1e:cd:66:b8:37:b2:07:56:b9:3f:26:a4:da:fd:
                    16:85:dd:90:c1:a3:57:45:3c:83:24:eb:11:e3:8b:
                    6f:93:ec:fb:b4:70:17:58:a2:fc:b8:0a:a9:ed:49:
                    8c:e2:cb:5f:ad:c2:d8:62:ff:a0:25:31:62:6e:87:
                    83:f2:49:35:da:e0:91:42:ef:95:22:84:1c:2f:7c:
                    da:3b:8d:80:01:ab:5d:f8:7d:65:79:82:cf:a8:2b:
                    42:5b:07:ee:67:1e:69:a3:11:07:3b:40:ac:39:44:
                    fe:73:ff:57:ba:6a:68:c6:8b:fd:c2:6d:23:53:a1:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:55:87:C3:A3:42:B4:37:69:28:A2:B3:43:F0:62:99:5D:9D:06
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3230342e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:89:86:3b:6e:4b:7b:e6:f9:41:fd:b5:24:47:9d:20:a7:
         91:52:06:ce:90:49:93:fc:da:f7:d8:1f:4d:c2:97:1e:bd:a1:
         2c:b2:50:5b:e8:a2:97:cf:b3:67:b0:46:e5:97:00:2a:d9:d9:
         27:b0:3c:aa:59:9c:13:3c:d5:11:ae:e7:8a:a3:04:e4:05:59:
         eb:58:8b:a4:3c:da:58:8c:64:be:b7:54:c1:11:71:ba:e6:1a:
         89:e4:f3:f4:59:cd:32:9a:db:cf:12:bc:83:fb:e0:85:51:e1:
         44:13:c2:63:c6:c0:8b:5b:47:cd:67:35:39:7c:02:69:76:9c:
         27:12:5a:3c:b0:e6:6d:bc:fe:65:86:93:e3:67:b0:34:58:82:
         f4:f1:74:f9:17:2c:29:26:77:38:c8:b0:55:93:27:13:a0:81:
         0b:40:28:20:6f:7e:36:98:54:b0:a8:3b:0c:4f:2e:57:28:49:
         77:c3:bf:cf:a1:b5:31:e7:79:1a:88:67:30:05:66:77:8c:c1:
         27:2d:d8:92:da:e4:9c:5d:2e:b1:11:03:78:1d:d9:3c:71:cf:
         ca:a5:07:e5:1e:1c:f5:d9:bb:79:1a:5d:ba:16:0b:f1:43:4c:
         9b:b6:b4:3b:24:cc:d9:83:d5:bb:e5:2b:61:25:5e:7e:3f:04:
         80:b6:40:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEgJoHkvBjyYOJflFHEq2KvQhHdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MzVFMTk5Rjk3NkUwQ0IxQkExOERBMzI5RTZFNEE3
NzhCRDAwOTAeFw0yNTExMTIxOTQ1MDJaFw0yNjExMTExOTUwMDJaMDMxMTAvBgNV
BAMTKDg4RkQ1NTg3QzNBMzQyQjQzNzY5MjhBMkIzNDNGMDYyOTk1RDlEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sdRltsRi4XIflhkzsIEx7HEC
GTadlVtfhIDEwG7F2qetM75ZDaUm7iJhZUA8euvCq2YbovMfCEwHqoGzpQlsuiEd
J/zAHsMOjWrVjVThoBynrhwrOKJkpF5Z3LoqJJtMoSopC7AewyNv4dFghDP/6m3X
TUgKrnOmPhUHYWue86UDHb7kyDwezWa4N7IHVrk/JqTa/RaF3ZDBo1dFPIMk6xHj
i2+T7Pu0cBdYovy4CqntSYziy1+twthi/6AlMWJuh4PySTXa4JFC75UihBwvfNo7
jYABq134fWV5gs+oK0JbB+5nHmmjEQc7QKw5RP5z/1e6amjGi/3CbSNToREHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiP1Vh8OjQrQ3aSiis0PwYpldnQYwHwYDVR0j
BBgwFoAUZ3NeGZ+XbgyxuhjaMp5uSneL0AkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERUIyQjNDOTQ5RTE5M0IxNkNCNjEzM0Q3NzFGMDFGMDBG
OUVGN0JCMzMwODNCMkE3OEI3NjE4MEIwQkRFNDhBLzAvNjc3MzVFMTk5Rjk3NkUw
Q0IxQkExOERBMzI5RTZFNEE3NzhCRDAwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzczNUUxOTlGOTc2RTBDQjFC
QTE4REEzMjlFNkU0QTc3OEJEMDA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREVCMkIzQzk0OUUxOTNCMTZDQjYxMzNENzcxRjAxRjAwRjlFRjdCQjMz
MDgzQjJBNzhCNzYxODBCMEJERTQ4QS8wLzMxMzkzMDJlMzEzMDM1MmUzMjMwMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmnM
MA0GCSqGSIb3DQEBCwUAA4IBAQAqsImGO25Le+b5Qf21JEedIKeRUgbOkEmT/Nr3
2B9NwpcevaEsslBb6KKXz7NnsEbllwAq2dknsDyqWZwTPNURrueKowTkBVnrWIuk
PNpYjGS+t1TBEXG65hqJ5PP0Wc0ymtvPEryD++CFUeFEE8JjxsCLW0fNZzU5fAJp
dpwnElo8sOZtvP5lhpPjZ7A0WIL08XT5FywpJnc4yLBVkycToIELQCggb342mFSw
qDsMTy5XKEl3w7/PobUx53kaiGcwBWZ3jMEnLdiS2uScXS6xEQN4Hdk8cc/KpQfl
Hhz12bt5Gl26FgvxQ0ybtrQ7JMzZg9W75SthJV5+PwSAtkDx
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:10 2025 by rpki-client