This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3230382e302f32302d3234203d3e203237373539.roa
File:                     3139302e3132302e3230382e302f32302d3234203d3e203237373539.roa (raw, json)
Hash identifier:          TJ8bGyuoAZGc1uGXAblf8E+q0UNgOCy2mh65OGvpXKY=
Subject key identifier:   3D:0C:EE:A0:57:35:81:4E:78:60:7C:A0:71:B7:81:46:18:15:5B:2D
Certificate issuer:       /CN=B72C94D573353BE962B600097BE1E558CF9533D1
Certificate serial:       6C529425134CA7C278B07BEC0AC870055B842AD6
Authority key identifier: B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3230382e302f32302d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 19:40:01 +0000
ROA not before:           Thu 18 Dec 2025 19:35:01 +0000
ROA not after:            Thu 17 Dec 2026 19:40:01 +0000
asID:                     27759
IP address blocks:        190.120.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:52:94:25:13:4c:a7:c2:78:b0:7b:ec:0a:c8:70:05:5b:84:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C94D573353BE962B600097BE1E558CF9533D1
        Validity
            Not Before: Dec 18 19:35:01 2025 GMT
            Not After : Dec 17 19:40:01 2026 GMT
        Subject: CN=3D0CEEA05735814E78607CA071B7814618155B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:7c:b3:6f:01:2c:1c:5e:25:49:5e:aa:eb:
                    2d:e2:ba:b5:e4:00:d9:c9:1c:1f:ed:b1:bb:05:ea:
                    69:8e:df:55:ae:f7:9c:9a:6b:2b:10:d6:a4:3f:54:
                    71:6b:ca:51:12:08:e4:36:04:59:1c:e6:8f:ef:f3:
                    9a:ba:5d:fe:c7:fa:77:73:3a:93:30:c3:3c:c7:d6:
                    53:01:b2:74:53:be:96:f7:d0:39:e3:13:b4:97:e7:
                    70:52:54:f0:b6:3e:df:1e:b1:7a:fa:43:24:d6:3f:
                    ac:32:1a:6c:4c:4c:8a:05:ba:16:56:a0:19:f5:95:
                    bb:41:77:c2:81:94:49:b0:68:ec:b4:c7:4c:a6:70:
                    27:f5:b1:fa:02:83:3e:aa:9d:9f:35:f7:58:a5:c1:
                    ba:c7:8f:7a:09:a9:0d:48:df:be:15:1a:e1:8f:a9:
                    60:8a:17:4e:66:2c:1e:76:b8:fe:64:f2:e9:9f:0d:
                    c4:9b:69:e8:6e:d1:d9:be:71:4f:61:dc:e2:ca:bc:
                    84:52:9d:14:44:1f:52:31:69:48:06:16:02:bc:ba:
                    fb:56:ce:fa:8c:8f:1a:16:48:9f:ac:a8:b3:b0:51:
                    47:ec:f4:32:02:25:be:2b:ba:bd:0a:cd:d0:83:bf:
                    19:8c:dc:15:34:49:b2:fb:70:5b:79:87:d7:c9:4a:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0C:EE:A0:57:35:81:4E:78:60:7C:A0:71:B7:81:46:18:15:5B:2D
            X509v3 Authority Key Identifier:
                keyid:B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3230382e302f32302d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:cb:09:b0:23:4e:40:da:8a:2f:61:64:be:91:c0:76:48:
         f6:00:cf:8d:a7:9e:6a:a0:87:11:ef:47:f9:0d:b7:50:af:c4:
         86:78:ad:f5:f3:a6:ac:50:d9:75:58:3b:5a:31:52:5f:bd:5d:
         db:d5:a4:95:fa:83:60:36:7a:28:5e:c2:c7:22:ba:4d:f0:a2:
         31:a5:1a:ad:a6:ed:b7:df:42:93:9f:c7:c8:91:e0:43:1f:ce:
         20:bb:68:2b:1d:2a:1b:eb:35:d4:71:f4:57:b5:17:82:15:c4:
         ab:c3:7e:ac:f6:81:43:00:2e:d8:ca:ed:3d:f7:19:13:dd:bf:
         16:f5:6e:8b:1a:5f:c1:5a:0d:45:f4:ee:08:a0:22:89:a1:07:
         f8:2e:7b:dd:15:cb:4d:36:5b:7f:0d:a7:99:81:3c:e8:0a:3f:
         be:22:2d:2d:9e:62:a2:84:5c:1b:3e:ae:da:87:59:59:f9:65:
         34:b7:ef:cc:be:81:36:f6:e6:b7:67:50:a1:11:bf:37:a5:c0:
         d5:b7:7a:5d:08:00:39:7d:cc:1f:5c:66:13:ef:25:d5:46:74:
         4b:74:7d:29:65:63:93:8e:c8:1a:ad:b5:2c:25:31:dc:f3:4e:
         9d:32:64:37:b4:16:83:e5:36:74:d0:d4:9b:3f:75:3a:d4:26:
         13:38:15:57
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbFKUJRNMp8J4sHvsCshwBVuEKtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcyQzk0RDU3MzM1M0JFOTYyQjYwMDA5N0JFMUU1NThD
Rjk1MzNEMTAeFw0yNTEyMTgxOTM1MDFaFw0yNjEyMTcxOTQwMDFaMDMxMTAvBgNV
BAMTKDNEMENFRUEwNTczNTgxNEU3ODYwN0NBMDcxQjc4MTQ2MTgxNTVCMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHXyzbwEsHF4lSV6q6y3iurXk
ANnJHB/tsbsF6mmO31Wu95yaaysQ1qQ/VHFrylESCOQ2BFkc5o/v85q6Xf7H+ndz
OpMwwzzH1lMBsnRTvpb30DnjE7SX53BSVPC2Pt8esXr6QyTWP6wyGmxMTIoFuhZW
oBn1lbtBd8KBlEmwaOy0x0ymcCf1sfoCgz6qnZ8191ilwbrHj3oJqQ1I374VGuGP
qWCKF05mLB52uP5k8umfDcSbaehu0dm+cU9h3OLKvIRSnRREH1IxaUgGFgK8uvtW
zvqMjxoWSJ+sqLOwUUfs9DICJb4rur0KzdCDvxmM3BU0SbL7cFt5h9fJSmA/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPQzuoFc1gU54YHygcbeBRhgVWy0wHwYDVR0j
BBgwFoAUtyyU1XM1O+litgAJe+HlWM+VM9EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMEY1OERDMDdCOTIyMTJBQzA4MzUxQ0VDOEU5OTNDMzQ2
NTcyQzRENzgxNTc2OTBFNkJEMjVGNjlBQzM2NzVFLzAvQjcyQzk0RDU3MzM1M0JF
OTYyQjYwMDA5N0JFMUU1NThDRjk1MzNEMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNzJDOTRENTczMzUzQkU5NjJC
NjAwMDk3QkUxRTU1OENGOTUzM0QxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTBGNThEQzA3QjkyMjEyQUMwODM1MUNFQzhFOTkzQzM0NjU3MkM0RDc4
MTU3NjkwRTZCRDI1RjY5QUMzNjc1RS8wLzMxMzkzMDJlMzEzMjMwMmUzMjMwMzgy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3MzczNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnjQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCkJMsJsCNOQNqKL2FkvpHAdkj2AM+Np55qoIcR
70f5DbdQr8SGeK3186asUNl1WDtaMVJfvV3b1aSV+oNgNnooXsLHIrpN8KIxpRqt
pu2330KTn8fIkeBDH84gu2grHSob6zXUcfRXtReCFcSrw36s9oFDAC7Yyu099xkT
3b8W9W6LGl/BWg1F9O4IoCKJoQf4LnvdFctNNlt/DaeZgTzoCj++Ii0tnmKihFwb
Pq7ah1lZ+WU0t+/MvoE29ua3Z1ChEb83pcDVt3pdCAA5fcwfXGYT7yXVRnRLdH0p
ZWOTjsgarbUsJTHc806dMmQ3tBaD5TZ00NSbP3U61CYTOBVX
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:25 2025 by rpki-client