This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233382e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233382e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          0rdcLZMy8/ifEkRKToKXlDxGSBILI6fzRFJ++Uiy60c=
Subject key identifier:   79:D8:B2:6C:CC:A5:AC:D5:85:48:BC:82:13:9F:6B:1E:FA:06:5C:10
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       34D9F6DA8C4EDA096A5AC79F463B60989C9A531D
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233382e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:02 +0000
ROA not before:           Wed 12 Nov 2025 19:45:02 +0000
ROA not after:            Wed 11 Nov 2026 19:50:02 +0000
asID:                     52270
IP address blocks:        190.105.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d9:f6:da:8c:4e:da:09:6a:5a:c7:9f:46:3b:60:98:9c:9a:53:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:02 2025 GMT
            Not After : Nov 11 19:50:02 2026 GMT
        Subject: CN=79D8B26CCCA5ACD58548BC82139F6B1EFA065C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a1:7b:e7:a6:f8:61:e5:f1:d9:73:a9:c9:f7:
                    9a:7e:e3:80:7d:b5:ae:d6:f0:84:b1:c2:82:c6:12:
                    38:61:18:6c:46:74:a8:dd:53:0c:19:cf:17:86:fc:
                    88:e2:dc:25:80:6e:f3:57:72:7c:0d:85:41:90:95:
                    cc:32:a1:01:78:28:f0:ca:bb:4f:b5:07:17:68:48:
                    43:68:29:51:fe:51:27:f0:43:b2:c7:5c:58:b3:9f:
                    e9:4b:e2:2b:1e:55:2e:c4:f3:49:61:db:30:64:fc:
                    4f:a6:0b:e3:a0:c6:3e:9a:85:70:55:ab:7d:c4:01:
                    73:00:f5:48:9f:96:77:e7:11:ad:c3:4c:9b:ed:af:
                    29:5b:41:57:eb:86:41:d7:08:39:85:f1:09:df:77:
                    a3:c4:db:98:0b:0c:25:d0:dc:a7:4a:f9:81:af:fb:
                    91:50:eb:46:f9:8c:b1:b4:9b:a2:2e:3c:67:8e:e7:
                    67:09:20:90:2a:25:0c:da:04:a2:fd:40:63:3f:a4:
                    7a:6d:c1:48:7c:05:c4:ac:16:6e:42:f8:9d:27:7c:
                    90:37:71:96:3b:52:3d:f4:ca:a5:65:ac:94:2c:d5:
                    c3:15:93:ab:c7:14:63:ad:ba:36:a0:69:45:e4:cf:
                    52:52:c4:a8:41:e7:09:16:5a:1f:e1:e7:ce:00:1a:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D8:B2:6C:CC:A5:AC:D5:85:48:BC:82:13:9F:6B:1E:FA:06:5C:10
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233382e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:05:40:28:30:57:8f:3a:66:fa:97:ca:67:95:83:e6:3c:
         f6:1a:54:d9:52:20:a1:87:39:33:d7:8c:b5:d1:58:c4:58:7d:
         0f:1c:be:9e:75:11:1e:6c:9a:62:e7:e0:25:45:96:ef:85:b1:
         01:98:68:c4:08:2d:ab:34:5c:39:7b:4b:30:e4:4e:2f:1c:30:
         b0:c0:12:71:6b:dd:03:fe:54:02:5f:7d:c3:7b:3f:a6:95:db:
         c8:d9:a1:64:1d:c5:46:58:b2:8f:07:7e:2f:be:a7:54:15:a6:
         3b:c1:27:5c:4a:07:b6:a4:64:59:34:da:76:40:2d:91:71:8d:
         fb:92:2b:d9:84:ef:a5:bf:ed:29:50:87:eb:f8:1c:52:38:7d:
         51:e1:8d:de:d6:46:d9:0e:8c:1e:26:32:6c:c6:ab:1a:b7:01:
         6b:a3:61:04:ab:a6:ed:60:f0:86:2c:d3:c1:6b:b6:53:2d:5c:
         48:70:ca:81:94:11:5e:69:d7:26:a4:79:4a:e3:3e:99:d1:0a:
         a2:59:b8:d2:68:6d:42:e8:03:d9:96:b3:d8:25:a3:94:00:08:
         50:ec:4f:37:6a:f4:51:70:52:db:9a:ba:76:7f:57:bc:64:b4:
         ba:73:ef:09:38:b3:99:07:79:90:28:de:16:38:88:5b:6a:32:
         f3:9a:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:08 2025 by rpki-client