This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa
File:                     3230302e38352e3135342e302f32342d3234203d3e203532323730.roa (raw, json)
Hash identifier:          1EOFwWQiis/KP3wp9bkSuO38a5rv/8pRki4VZZod6XM=
Subject key identifier:   F0:BE:4B:E6:FB:EE:2A:C3:A5:57:19:D6:66:3C:E7:91:93:6C:DA:98
Certificate issuer:       /CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
Certificate serial:       5AFDE46615DBF548616BE59A5DBAE2487DA170B6
Authority key identifier: 67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa
Signing time:             Wed 12 Nov 2025 19:50:05 +0000
ROA not before:           Wed 12 Nov 2025 19:45:05 +0000
ROA not after:            Wed 11 Nov 2026 19:50:05 +0000
asID:                     52270
IP address blocks:        200.85.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fd:e4:66:15:db:f5:48:61:6b:e5:9a:5d:ba:e2:48:7d:a1:70:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67735E199F976E0CB1BA18DA329E6E4A778BD009
        Validity
            Not Before: Nov 12 19:45:05 2025 GMT
            Not After : Nov 11 19:50:05 2026 GMT
        Subject: CN=F0BE4BE6FBEE2AC3A55719D6663CE791936CDA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:66:c2:96:55:bf:28:b6:1d:73:ce:cf:2d:
                    fe:08:0b:fb:9f:0d:8c:0f:33:18:59:9a:8a:be:f9:
                    61:a2:05:61:52:15:89:31:5b:f3:ec:9b:01:12:37:
                    ff:10:7a:8a:0e:90:ac:dd:d5:4d:9d:59:11:b7:16:
                    59:7b:bc:a7:48:99:1b:3c:42:8d:ce:69:c0:17:0e:
                    c4:f9:61:e5:15:b5:8d:8a:2e:e9:68:06:80:d4:eb:
                    d8:0a:1c:ef:19:fe:52:4e:79:a7:a5:6c:c5:46:ab:
                    cf:d4:9a:f8:78:31:29:a7:06:b4:a5:d7:41:9e:bc:
                    c4:b1:2b:2f:54:10:ed:fd:76:bb:20:24:13:77:2e:
                    0d:62:a5:58:3f:c8:c8:3d:84:b2:91:f8:0a:13:d1:
                    8c:71:5f:49:fb:5d:fc:20:14:68:2b:25:91:58:cc:
                    b0:97:4a:a5:02:4e:7b:59:27:65:72:9a:17:e2:4d:
                    ec:cb:ea:73:84:7c:3d:17:76:db:b0:74:1c:a1:9d:
                    fe:39:1f:57:18:d6:63:1a:76:64:80:78:7b:4e:cf:
                    df:34:b9:17:9e:7b:6d:da:b4:d8:56:ef:06:4b:6c:
                    ee:87:f6:16:13:61:c5:5e:3c:f1:5f:f6:55:b7:35:
                    5e:13:7e:6f:d8:ed:82:a0:0e:b6:3a:f0:10:56:70:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:4B:E6:FB:EE:2A:C3:A5:57:19:D6:66:3C:E7:91:93:6C:DA:98
            X509v3 Authority Key Identifier:
                keyid:67:73:5E:19:9F:97:6E:0C:B1:BA:18:DA:32:9E:6E:4A:77:8B:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67735E199F976E0CB1BA18DA329E6E4A778BD009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEB2B3C949E193B16CB6133D771F01F00F9EF7BB33083B2A78B76180B0BDE48A/0/3230302e38352e3135342e302f32342d3234203d3e203532323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:58:ea:48:91:23:b8:75:9b:b6:de:fa:40:ab:0f:62:ae:fd:
         f3:29:7c:05:bc:30:43:85:5c:24:a7:9b:15:66:09:dd:f3:5b:
         3c:49:28:92:03:fd:48:a5:fe:c4:ed:77:d5:94:c7:36:91:23:
         ff:4a:29:fe:15:93:cb:88:29:8a:0a:e7:36:3d:82:80:7c:e3:
         3c:3a:d9:50:e1:aa:83:90:74:7d:d3:6a:57:cb:41:9f:0e:6b:
         ab:00:a2:ea:d2:1f:ca:1b:55:c1:cf:6e:4d:80:6e:d1:55:de:
         bf:70:41:f2:f7:ca:75:77:82:b7:b8:5d:fb:dd:f0:5a:a0:57:
         84:9b:3e:a4:82:43:98:c5:ad:5c:a4:7e:4c:99:28:76:22:0f:
         65:a9:09:eb:6e:76:b6:91:e1:e5:bc:5d:6c:00:a4:07:77:52:
         9c:60:5f:e9:6c:5a:99:d0:6f:3d:65:39:63:d5:24:2b:2b:53:
         9c:a8:90:14:75:85:30:18:b4:5d:d5:a2:29:0c:2e:af:9a:61:
         d9:69:0b:0e:44:2a:08:fd:3a:07:53:96:80:c2:39:48:43:94:
         8b:cc:ba:6e:e1:57:c5:d6:9c:75:ef:9b:bc:bd:4c:e7:df:78:
         41:4a:59:43:19:62:13:ed:0a:14:a6:5a:17:26:61:c0:fc:0e:
         86:67:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:12 2025 by rpki-client