This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa
File:                     3230302e38352e3135332e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          ENBcBoRa1H55SkOq6GvSb//eYqJ1Dc0BcMTHkzoIw4w=
Subject key identifier:   EB:4D:BE:F2:BB:A3:F6:21:D9:78:EC:9C:E6:F9:44:C6:45:CC:CE:ED
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       53C9D12F4F9B549C62B57F3D80F9F33DCD10FCE7
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:06 +0000
ROA not before:           Wed 12 Nov 2025 19:45:06 +0000
ROA not after:            Wed 11 Nov 2026 19:50:06 +0000
asID:                     52270
IP address blocks:        200.85.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c9:d1:2f:4f:9b:54:9c:62:b5:7f:3d:80:f9:f3:3d:cd:10:fc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:06 2025 GMT
            Not After : Nov 11 19:50:06 2026 GMT
        Subject: CN=EB4DBEF2BBA3F621D978EC9CE6F944C645CCCEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:11:7d:6c:fb:ba:d8:c8:0d:bd:d8:5f:f0:
                    38:66:01:03:0b:85:ef:cc:8c:3b:85:e4:a9:d6:c8:
                    69:38:50:1d:ee:ae:95:2b:c6:a2:a4:ab:8c:c5:09:
                    00:b3:65:2c:89:04:f6:fa:cb:ff:d6:6c:6a:db:11:
                    12:0e:fd:d6:2c:24:40:ae:75:a4:7b:df:f1:6c:99:
                    55:48:95:22:94:fb:4e:e1:87:d8:f4:a9:14:d2:6a:
                    2e:e3:78:68:bc:20:ec:9d:b5:a0:52:35:49:04:f8:
                    ca:f1:55:87:11:55:1d:48:e8:95:9b:da:1f:bb:cf:
                    cd:85:13:e6:c1:58:e4:80:6d:58:5c:3e:14:27:fc:
                    e0:92:f7:86:94:cf:99:84:13:fa:f7:d7:23:af:b5:
                    21:28:cc:61:da:1e:f9:ae:99:99:11:6a:c0:2e:9f:
                    1b:74:37:d0:3c:da:25:12:dd:39:9b:2e:dd:9b:73:
                    f0:c7:26:5b:e5:c3:23:53:14:d2:50:b2:be:09:8b:
                    7e:d9:de:89:31:db:ac:90:eb:7a:a0:03:0d:b2:1c:
                    58:c4:f7:55:f6:30:93:cb:3a:4a:3d:ab:3f:81:3e:
                    92:ea:95:45:86:8f:27:a3:2a:c0:24:36:91:6f:45:
                    aa:71:ce:75:61:89:a5:b8:20:df:f8:e4:2e:a4:0d:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:BE:F2:BB:A3:F6:21:D9:78:EC:9C:E6:F9:44:C6:45:CC:CE:ED
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135332e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:a2:6a:f7:da:ca:e0:c5:70:0c:93:a0:cf:d0:04:b6:d5:
         72:b5:92:b2:ac:d4:a8:7f:27:8f:18:34:c9:ba:2c:81:59:a7:
         43:72:53:a8:43:81:93:99:64:56:3f:2d:40:3c:13:26:46:2c:
         e6:3d:57:54:06:68:cb:c2:7e:e4:4e:a6:0a:a4:bc:b3:43:c1:
         d6:a9:93:36:96:25:15:0d:2e:e1:b9:d9:30:d7:d0:d1:d4:5c:
         e3:e8:1f:70:ed:7a:db:e0:0b:c9:3d:2f:01:7b:41:d4:28:34:
         e1:c8:72:12:d2:ee:9a:89:d1:11:0d:da:39:7f:2b:35:63:f8:
         3d:25:ad:f8:3f:5d:f1:6a:4c:85:a0:cd:77:1a:8c:4f:b7:23:
         4a:30:49:dc:81:d4:75:5c:e7:54:19:90:32:6c:21:13:fa:b1:
         21:fd:fd:bf:7d:d3:d6:b4:6b:48:2f:55:36:47:57:af:4d:99:
         ba:d1:9d:cc:38:1e:07:3e:57:c7:13:b0:8f:d6:3c:d1:ea:95:
         2a:24:c8:de:36:0e:69:d8:98:65:6e:66:cf:6f:4a:b9:b3:37:
         c2:1d:c4:1c:7f:06:a5:00:ca:a9:92:d0:98:ad:60:e9:c2:7d:
         09:2c:61:b5:77:d5:1b:88:54:82:a5:cf:49:0f:70:75:66:3f:
         0d:f3:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:11 2025 by rpki-client