This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233392e302f32342d3234203d3e203532323730.roa
File:                     3139302e3130352e3233392e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          X2offx/jdi5E1kp9txOnNEEYJ4Gg9u1Acugx0Tvx21o=
Subject key identifier:   40:62:27:3A:37:24:B7:DC:6B:C4:B4:A4:68:D6:B8:98:B7:D5:E2:D2
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       6B0D1BB6A54CB885B09C1BE06CC5BAD71EDA974A
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233392e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:00 +0000
ROA not before:           Wed 12 Nov 2025 19:45:00 +0000
ROA not after:            Wed 11 Nov 2026 19:50:00 +0000
asID:                     52270
IP address blocks:        190.105.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0d:1b:b6:a5:4c:b8:85:b0:9c:1b:e0:6c:c5:ba:d7:1e:da:97:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:00 2025 GMT
            Not After : Nov 11 19:50:00 2026 GMT
        Subject: CN=4062273A3724B7DC6BC4B4A468D6B898B7D5E2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:f2:83:fc:43:a2:26:72:01:6f:0e:5c:0f:
                    68:d6:49:8f:41:5d:17:b9:61:c6:20:61:2c:6f:05:
                    66:c3:bd:2e:a4:b3:06:7b:19:39:4f:92:b8:f2:24:
                    1c:48:b1:23:89:35:1f:73:55:77:ce:71:0a:6e:a8:
                    8d:6c:88:31:ff:f0:4e:be:7c:8d:0a:97:d5:5d:af:
                    de:fd:f4:f0:6f:c4:80:9d:b0:e5:7d:87:dd:1a:91:
                    5d:18:7c:e9:13:c1:2e:e0:d4:97:18:b8:3d:94:6f:
                    40:8e:6f:d0:c4:46:09:ba:fd:f2:83:9b:6e:ed:dc:
                    3f:87:d7:f4:93:3a:48:96:9d:74:af:50:5e:f1:62:
                    15:0e:b3:b8:1b:24:68:40:83:09:bf:0a:1c:f2:2d:
                    cd:a1:d5:fb:2c:1f:e6:3c:a5:b4:a4:24:c1:78:96:
                    3e:56:6f:2f:9c:a0:16:0e:88:6f:7a:da:ac:2f:8b:
                    ab:05:27:99:cd:6a:f3:a0:5b:ea:18:46:0e:bb:dc:
                    9f:ab:dd:16:96:43:24:37:11:16:09:6d:b5:ae:3c:
                    2c:c7:e5:6a:bf:4c:a5:b2:f2:3a:ba:1c:bc:70:83:
                    87:ba:c8:9b:9a:6e:62:ec:86:76:ea:55:15:67:d7:
                    b5:54:5a:bf:d2:2f:86:e1:0a:1b:11:4a:db:cc:30:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:27:3A:37:24:B7:DC:6B:C4:B4:A4:68:D6:B8:98:B7:D5:E2:D2
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3139302e3130352e3233392e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:77:69:d4:88:0a:93:3c:e5:f0:30:a8:e2:68:3e:d4:e4:
         ce:3a:b8:7f:24:11:e9:43:70:e3:61:41:97:2d:4a:3f:8e:24:
         d8:c3:5d:af:c1:31:55:ba:9f:1a:a0:73:2e:3b:a2:6e:53:f9:
         8f:04:c9:b2:ea:41:cb:81:e8:2a:5c:41:10:86:6c:8e:4c:6d:
         56:7b:b5:55:03:13:8b:c3:7d:3e:4e:1c:7b:2b:23:1c:e2:5c:
         91:25:8e:08:1c:db:89:85:f3:cd:34:ad:a9:38:2d:38:05:dd:
         6a:3c:23:9a:08:32:26:3a:69:fc:b0:b7:b8:be:18:8f:fb:9b:
         d6:9e:59:78:2e:3d:1f:67:8a:3d:41:be:e0:94:65:45:7d:e1:
         08:94:11:10:bb:e9:ec:f5:ad:17:79:09:f0:b0:ce:d6:89:b9:
         6a:5c:5f:9a:58:6d:c0:f0:a1:a3:8b:f9:d6:c4:f6:8b:c3:3d:
         98:92:ac:fb:68:72:a4:0d:f4:2c:0e:6c:b5:28:c3:26:2f:d1:
         ff:33:aa:dc:8c:71:97:c6:51:71:86:bd:99:85:7e:33:4d:89:
         cf:a9:4c:ac:ad:3b:fb:2e:d3:30:23:4a:2e:02:b6:f7:63:65:
         43:7e:3e:32:8f:03:be:07:0a:29:76:b5:0c:12:8d:07:30:da:
         35:f2:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:09 2025 by rpki-client