This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa
File:                     3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa (raw, json)
Hash identifier:          BBHNgtHTCetSv41M77wRaNdRLPhHLbhg/woJpndq4uc=
Subject key identifier:   DE:05:F8:77:EA:BC:0A:7B:04:28:FE:AA:99:9C:6A:EF:0C:D5:EA:9B
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       37689E07025BAFD8F2C742B44E9EE77D8F24A780
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:40:00 +0000
ROA not before:           Wed 12 Nov 2025 19:35:00 +0000
ROA not after:            Wed 11 Nov 2026 19:40:00 +0000
asID:                     52270
IP address blocks:        190.105.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:68:9e:07:02:5b:af:d8:f2:c7:42:b4:4e:9e:e7:7d:8f:24:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:35:00 2025 GMT
            Not After : Nov 11 19:40:00 2026 GMT
        Subject: CN=DE05F877EABC0A7B0428FEAA999C6AEF0CD5EA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:2c:78:0d:4f:09:9b:43:07:9a:1a:9e:1f:
                    de:e2:18:0b:52:f5:68:f5:8a:b1:21:ed:e8:ac:f0:
                    5f:91:a6:23:3f:9d:1b:c6:82:17:04:3c:cc:5f:39:
                    1e:78:a0:80:53:89:db:5d:70:be:a8:a4:50:54:bb:
                    ae:1f:fb:bc:14:9f:a6:cc:02:dd:da:82:96:62:85:
                    df:d1:a0:ab:ad:b4:a5:ea:20:1f:07:76:ce:b5:ba:
                    f4:19:43:42:eb:32:e0:64:f7:7f:21:35:a2:73:80:
                    23:e9:a4:6b:fc:0c:17:80:e4:23:b7:21:d7:17:2c:
                    b9:96:22:65:70:8b:f0:85:99:d7:3b:2e:26:6d:d8:
                    da:3b:c4:aa:6f:2e:9d:34:ae:a9:13:c9:b7:e2:b0:
                    10:97:9f:a2:cf:3d:ab:2b:a6:35:81:b8:75:21:c8:
                    da:93:2b:9c:69:98:c4:80:75:4d:30:b6:b9:df:84:
                    a6:00:99:54:2c:af:cb:30:e1:10:d2:66:b7:d8:a2:
                    f8:c7:9f:b8:e0:05:38:84:d2:e4:25:dc:ac:17:7c:
                    e9:b7:e6:a1:2f:17:8a:6d:a5:75:3e:1e:6d:8b:32:
                    9c:65:e5:a1:0f:ac:10:a1:db:0f:49:d4:6d:19:1c:
                    76:b8:8e:13:6e:48:0c:39:bb:55:b7:d0:db:47:5d:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:F8:77:EA:BC:0A:7B:04:28:FE:AA:99:9C:6A:EF:0C:D5:EA:9B
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3232342e302f32302d3230203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:fe:0a:ec:2f:8a:12:9b:5b:7f:15:3d:b3:d7:13:3d:6a:
         96:29:44:68:9d:e7:c0:e6:10:1a:f8:92:68:17:cb:9a:07:ae:
         06:41:03:58:05:fb:e8:f7:52:fd:39:45:b0:ad:fb:95:b2:c3:
         01:22:e9:af:18:b1:4a:ff:be:fc:26:92:b6:09:b5:7c:78:09:
         b8:63:87:b2:b4:76:a0:69:93:92:a0:77:ba:71:48:a1:e4:85:
         b0:a8:e8:2e:fe:45:f2:58:b9:f2:7d:04:7c:88:b6:19:6c:6d:
         d3:d2:4a:3f:34:8e:e8:4e:42:ca:d0:85:e5:0e:24:a0:e5:ea:
         e6:ad:e4:ac:ca:83:20:75:9f:5e:1e:b1:b7:a3:9f:67:a0:75:
         b3:67:06:de:50:bf:a2:38:41:27:5d:21:90:73:63:7d:b1:4c:
         69:ac:dc:bf:4c:3c:6d:4b:eb:cd:6b:80:4a:ab:cc:71:c5:a6:
         99:38:e2:c6:ee:5d:2d:76:3a:19:16:d6:e0:37:bf:e3:88:88:
         b8:e3:8f:54:7c:8d:2e:2a:59:23:d0:b4:3f:11:d8:32:6e:2e:
         45:5b:16:af:9a:ee:bf:f4:81:53:f5:9a:f2:9e:e7:2d:d1:50:
         93:50:c5:be:13:b2:20:68:ec:0d:eb:0f:30:4a:32:f2:41:df:
         69:f6:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:08 2025 by rpki-client