This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233332e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233332e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          X2hc8o1eL7UrMbJAQCpmMzNRxTMbeQdwmc/NbJZ6CmE=
Subject key identifier:   1F:0C:40:34:05:70:26:2B:BB:23:36:4B:49:5B:6B:7D:B0:80:AB:FC
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       55D79DD67CD9FE10A7267CE357ABE7B8E43DBC14
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233332e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:03 +0000
ROA not before:           Wed 12 Nov 2025 19:45:03 +0000
ROA not after:            Wed 11 Nov 2026 19:50:03 +0000
asID:                     52270
IP address blocks:        190.105.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:9d:d6:7c:d9:fe:10:a7:26:7c:e3:57:ab:e7:b8:e4:3d:bc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:03 2025 GMT
            Not After : Nov 11 19:50:03 2026 GMT
        Subject: CN=1F0C40340570262BBB23364B495B6B7DB080ABFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:58:f9:4c:ee:d7:49:12:59:e5:57:db:99:
                    bf:a3:68:f0:fd:d1:70:c7:bc:8c:e6:54:c0:3c:57:
                    12:ce:9a:13:88:0a:b8:b3:86:e5:e2:d9:4e:06:c4:
                    0f:a0:78:f1:52:35:60:0f:64:28:09:5b:07:73:b5:
                    00:ed:dd:c6:83:52:a8:23:01:98:50:e8:7e:4f:a5:
                    18:81:be:7c:e1:c9:e7:77:af:ec:2e:40:47:f1:19:
                    53:c5:8f:62:11:b9:55:6c:a8:1d:e5:e6:b9:5f:f3:
                    5c:dc:f4:78:32:04:9e:97:61:17:25:63:d3:87:95:
                    5f:64:9c:12:d0:14:34:1d:e5:e6:b8:40:71:94:a8:
                    17:a3:b8:80:51:2e:1a:e1:1e:93:3e:39:fb:ca:20:
                    5b:00:4b:c9:04:05:b6:b1:ff:12:4b:e4:25:b6:c7:
                    af:6a:7c:83:f8:b3:38:55:96:21:45:f3:a3:e9:d4:
                    80:d8:de:8b:8b:26:ec:80:89:c6:83:39:77:90:0a:
                    9a:61:d2:b5:36:c4:77:90:bc:37:ad:f4:6a:73:1c:
                    19:20:d0:0e:9e:e3:84:47:5f:f0:87:cf:8a:83:81:
                    ba:d1:19:24:35:ac:64:63:6f:89:ef:28:a3:cc:51:
                    0e:18:73:a3:99:23:95:3d:53:df:16:aa:e7:ab:05:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0C:40:34:05:70:26:2B:BB:23:36:4B:49:5B:6B:7D:B0:80:AB:FC
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233332e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:df:5f:2e:d7:ef:3c:57:33:d5:76:5c:89:2d:b3:ac:ed:
         8b:2a:d5:2b:db:41:4e:da:f5:bc:d8:47:7b:69:1f:4e:72:86:
         f8:70:2c:56:59:fb:66:d9:47:e4:d5:c5:4e:20:6c:a6:64:07:
         2e:67:7d:a1:44:a1:d0:6a:bc:5a:de:cf:74:b7:7f:20:d3:75:
         67:d7:0c:92:84:f6:49:b3:8f:cd:15:2e:5d:27:35:6e:dc:cc:
         59:18:b2:cc:1c:65:fe:17:d6:c6:9e:a3:58:12:24:44:96:97:
         77:0c:e5:04:00:ad:ca:20:ac:0d:3c:b1:22:3f:06:a5:4d:7d:
         43:0a:da:b8:b3:7f:86:16:d4:16:8a:ee:e5:ee:b4:7e:8c:5e:
         b6:39:53:92:a1:a1:af:da:e1:8c:14:d1:9f:35:9b:45:0d:c9:
         84:0c:70:71:da:31:b0:a7:3d:14:fa:e6:7c:2e:64:a3:1a:bc:
         ee:67:eb:7b:0b:14:c4:fc:6a:72:e1:da:1f:3f:a7:67:7f:84:
         78:ea:0e:e1:c9:72:5d:b5:2d:f8:d0:f2:f0:27:98:4a:0f:8e:
         51:d6:fb:68:50:9d:fd:c6:a8:96:3c:58:eb:2e:d0:a1:59:f2:
         42:9a:21:39:d3:9b:02:85:32:5d:1c:df:24:ca:86:b5:80:f4:
         db:a4:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:09 2025 by rpki-client