This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          5kONJaQHzUGe2zDL8sJ2VG4NSZ9yOT9voEVtp3K8g7I=
Subject key identifier:   D5:01:19:5B:C3:83:5E:58:B3:B1:2B:89:C7:9F:CF:7A:80:9E:74:00
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       379104DEBC6478026AF22DF7C64A54728A2D6F75
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:00 +0000
ROA not before:           Wed 12 Nov 2025 19:45:00 +0000
ROA not after:            Wed 11 Nov 2026 19:50:00 +0000
asID:                     52270
IP address blocks:        190.105.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:91:04:de:bc:64:78:02:6a:f2:2d:f7:c6:4a:54:72:8a:2d:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:00 2025 GMT
            Not After : Nov 11 19:50:00 2026 GMT
        Subject: CN=D501195BC3835E58B3B12B89C79FCF7A809E7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:64:f0:4e:dd:81:a1:f0:9d:59:0c:47:81:
                    52:a8:9f:45:c2:bb:7a:81:ba:6a:da:bc:34:f9:ca:
                    bc:2c:25:2c:07:dd:f0:d7:64:71:60:50:d7:92:10:
                    6e:21:9d:31:bc:c9:61:33:4c:45:40:4d:90:d8:c9:
                    9a:96:10:79:7d:6b:84:2b:db:c0:3d:e6:f4:b8:bf:
                    d0:64:cc:29:b2:be:3d:41:a8:bf:51:aa:cb:92:d9:
                    ef:58:da:ec:9e:84:1a:70:54:bb:b8:3e:34:f8:4c:
                    ee:b6:f0:83:11:10:8d:cf:a8:80:85:fe:05:66:b2:
                    cb:29:73:69:98:aa:2f:17:8d:ee:80:7b:61:01:cf:
                    c1:e2:ca:78:58:15:6d:75:b1:b5:61:5c:cb:20:07:
                    56:60:5f:3d:69:54:58:fc:bb:a1:7d:ea:95:46:04:
                    d6:b6:48:ab:08:97:6a:c4:c0:fe:08:73:83:ca:d8:
                    e9:03:8e:13:75:ed:ba:4e:33:06:bb:3d:57:d3:55:
                    fc:3f:b9:f4:06:cc:ee:38:75:97:bf:86:c0:9e:fc:
                    d3:0b:2a:50:ed:a2:04:3b:bf:80:4e:ae:6c:f0:ac:
                    25:9c:59:f5:a7:01:bc:ae:ef:38:53:7e:a0:d2:65:
                    34:8a:c7:9d:2a:77:94:84:06:fe:b4:16:26:9c:37:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:19:5B:C3:83:5E:58:B3:B1:2B:89:C7:9F:CF:7A:80:9E:74:00
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233312e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:a2:ad:78:b4:d2:36:d7:61:1b:9e:0b:90:4f:6a:4b:87:
         4c:ea:cf:b9:61:8f:ef:95:54:5d:45:a5:6a:f0:da:cb:e0:92:
         43:d3:6c:40:65:83:db:62:e0:7a:f1:e2:94:d8:59:5e:3b:0b:
         76:b8:2c:fd:f5:78:79:23:0c:d9:05:84:7f:fc:6b:7a:1a:bc:
         fa:2d:bf:18:d6:5a:74:8b:96:82:c8:ff:c4:22:c8:b0:f4:e4:
         07:01:11:15:4e:43:14:77:e7:31:1a:a3:9e:89:f5:c2:4e:10:
         8b:c6:48:cb:a9:ad:05:3a:54:cb:ef:ad:e5:fe:01:7a:e0:b6:
         44:b9:25:35:96:d4:77:f3:da:e7:f8:6a:a6:4f:04:5f:c3:08:
         e7:d4:94:ee:91:a6:dd:09:7a:d1:ee:21:02:b2:53:9c:e6:2a:
         37:2a:c2:1c:33:1c:b9:be:25:eb:9f:9b:f7:31:14:07:70:8f:
         7a:e8:7c:ef:62:89:00:42:0b:06:64:fd:a9:7d:3e:a7:6d:d7:
         2a:05:5d:94:5f:05:3f:2e:26:9a:46:03:b8:7d:23:86:c0:1b:
         aa:31:68:76:20:51:f2:49:bc:05:bd:14:8e:ce:d3:28:6f:c5:
         5f:ec:d8:56:cb:3d:b3:9d:b9:32:c8:c6:78:52:fa:13:6b:0d:
         fc:bd:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:11 2025 by rpki-client