This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa
File:                     3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa (raw, json)
Hash identifier:          xgVBuXxqP6Eer26H9mnfv739GzOh8UVPifrLb2ScsaQ=
Subject key identifier:   22:FF:3D:83:BC:E2:DB:C5:C4:B5:C5:82:DC:52:B6:EB:D4:8E:BB:19
Certificate issuer:       /CN=32AE7493892249577E99292721D77996C23DC982
Certificate serial:       32CB1002643B1C11B4C0EB8FBBE7E5142A3267D7
Authority key identifier: 32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 20:20:00 +0000
ROA not before:           Thu 18 Dec 2025 20:15:00 +0000
ROA not after:            Thu 17 Dec 2026 20:20:00 +0000
asID:                     27759
IP address blocks:        168.197.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 18:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:10:02:64:3b:1c:11:b4:c0:eb:8f:bb:e7:e5:14:2a:32:67:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32AE7493892249577E99292721D77996C23DC982
        Validity
            Not Before: Dec 18 20:15:00 2025 GMT
            Not After : Dec 17 20:20:00 2026 GMT
        Subject: CN=22FF3D83BCE2DBC5C4B5C582DC52B6EBD48EBB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:e4:7a:43:bc:96:c4:b3:1f:ea:16:31:68:
                    d4:bb:86:24:b5:b3:f0:d8:d3:87:b4:1e:c3:20:c9:
                    24:63:70:65:cf:a8:5c:e4:d5:0f:63:d7:bd:1d:fb:
                    b4:c0:4f:e6:97:39:8f:29:f1:80:fe:bb:ca:c2:ab:
                    99:40:15:29:71:38:94:18:da:5f:67:44:97:d1:c7:
                    86:27:f4:d8:53:32:f9:73:d6:4a:00:9a:05:d5:3b:
                    56:18:6e:ad:49:b5:dd:24:d0:0d:4d:b2:c9:33:dd:
                    4f:53:07:e2:3f:b1:f1:67:f9:4b:f8:88:39:9b:e9:
                    8d:15:d8:f6:f4:11:50:db:c3:32:84:ca:37:39:32:
                    64:33:d5:78:f6:12:4e:f2:eb:19:d6:16:74:c4:56:
                    e4:cf:e9:30:ca:48:ba:5d:0c:74:a2:06:68:b5:82:
                    40:cc:12:c5:32:8d:11:e9:c7:9b:66:73:89:f6:13:
                    08:49:22:af:65:33:f8:3f:21:b2:cd:7e:16:dc:8d:
                    fb:6e:2e:ad:2d:a6:bb:9c:1d:33:85:25:72:19:07:
                    e0:3c:77:9d:ab:a7:0f:60:ab:f0:db:ef:ba:4f:12:
                    04:b9:57:f9:2a:87:f5:4d:20:82:33:c7:48:fc:12:
                    f0:2d:02:03:6f:eb:a8:ca:e0:79:57:fe:e8:75:04:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:3D:83:BC:E2:DB:C5:C4:B5:C5:82:DC:52:B6:EB:D4:8E:BB:19
            X509v3 Authority Key Identifier:
                keyid:32:AE:74:93:89:22:49:57:7E:99:29:27:21:D7:79:96:C2:3D:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/32AE7493892249577E99292721D77996C23DC982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32AE7493892249577E99292721D77996C23DC982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27A1B0DD7E9E52340ACC5540B2DF234AD197C729DA8FA24334024FFB520CBA76/0/3136382e3139372e3130302e302f32322d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:34:0b:49:35:dd:77:24:5e:fc:cc:15:02:2a:f5:fe:af:02:
         6c:3c:9a:50:1f:6d:0f:3f:13:79:35:0c:23:a5:7f:bf:39:91:
         b0:93:c4:12:51:6c:2c:fa:9a:e1:d1:99:e8:f2:60:e8:d9:80:
         30:ab:4b:bb:b6:a3:b2:19:0d:70:c6:c8:27:e5:3e:86:1a:5b:
         7c:81:52:39:d8:c4:5b:96:6c:7b:92:ab:fa:c1:96:e9:45:80:
         0a:97:c0:1c:94:02:74:df:cd:df:1f:4f:83:de:ea:a1:98:21:
         f7:34:7f:37:61:11:fd:bc:09:ae:6e:2e:f7:7f:28:5d:74:b3:
         69:52:5f:e0:e1:30:2a:4c:c2:e0:c2:d8:d5:01:7a:88:48:e3:
         59:80:9d:ee:17:81:89:90:c6:45:30:87:3d:ba:a5:23:51:c5:
         c0:7f:01:aa:97:67:08:11:c9:e9:c2:f3:6a:07:0d:f8:cd:46:
         8b:7b:df:73:09:ea:75:19:74:55:78:48:00:aa:d0:f8:c4:62:
         33:9c:6b:cf:0a:3f:1a:7d:1f:7a:81:63:d1:7c:6d:de:99:37:
         5f:8c:05:d6:b0:9d:5b:82:44:bf:53:05:b2:2d:b4:c8:a9:72:
         b0:2a:e3:ed:cb:74:03:f1:2d:2e:4a:0c:ca:7c:97:ba:96:68:
         73:49:1b:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMssQAmQ7HBG0wOuPu+flFCoyZ9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBRTc0OTM4OTIyNDk1NzdFOTkyOTI3MjFENzc5OTZD
MjNEQzk4MjAeFw0yNTEyMTgyMDE1MDBaFw0yNjEyMTcyMDIwMDBaMDMxMTAvBgNV
BAMTKDIyRkYzRDgzQkNFMkRCQzVDNEI1QzU4MkRDNTJCNkVCRDQ4RUJCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkP+R6Q7yWxLMf6hYxaNS7hiS1
s/DY04e0HsMgySRjcGXPqFzk1Q9j170d+7TAT+aXOY8p8YD+u8rCq5lAFSlxOJQY
2l9nRJfRx4Yn9NhTMvlz1koAmgXVO1YYbq1Jtd0k0A1Nsskz3U9TB+I/sfFn+Uv4
iDmb6Y0V2Pb0EVDbwzKEyjc5MmQz1Xj2Ek7y6xnWFnTEVuTP6TDKSLpdDHSiBmi1
gkDMEsUyjRHpx5tmc4n2EwhJIq9lM/g/IbLNfhbcjftuLq0tprucHTOFJXIZB+A8
d52rpw9gq/Db77pPEgS5V/kqh/VNIIIzx0j8EvAtAgNv66jK4HlX/uh1BAmVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIv89g7zi28XEtcWC3FK269SOuxkwHwYDVR0j
BBgwFoAUMq50k4kiSVd+mSknIdd5lsI9yYIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yN0ExQjBERDdFOUU1MjM0MEFDQzU1NDBCMkRGMjM0QUQx
OTdDNzI5REE4RkEyNDMzNDAyNEZGQjUyMENCQTc2LzAvMzJBRTc0OTM4OTIyNDk1
NzdFOTkyOTI3MjFENzc5OTZDMjNEQzk4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMkFFNzQ5Mzg5MjI0OTU3N0U5
OTI5MjcyMUQ3Nzk5NkMyM0RDOTgyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjdBMUIwREQ3RTlFNTIzNDBBQ0M1NTQwQjJERjIzNEFEMTk3QzcyOURB
OEZBMjQzMzQwMjRGRkI1MjBDQkE3Ni8wLzMxMzYzODJlMzEzOTM3MmUzMTMwMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzczNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqMVk
MA0GCSqGSIb3DQEBCwUAA4IBAQCFNAtJNd13JF78zBUCKvX+rwJsPJpQH20PPxN5
NQwjpX+/OZGwk8QSUWws+prh0Zno8mDo2YAwq0u7tqOyGQ1wxsgn5T6GGlt8gVI5
2MRblmx7kqv6wZbpRYAKl8AclAJ0383fH0+D3uqhmCH3NH83YRH9vAmubi73fyhd
dLNpUl/g4TAqTMLgwtjVAXqISONZgJ3uF4GJkMZFMIc9uqUjUcXAfwGql2cIEcnp
wvNqBw34zUaLe99zCep1GXRVeEgAqtD4xGIznGvPCj8afR96gWPRfG3emTdfjAXW
sJ1bgkS/UwWyLbTIqXKwKuPty3QD8S0uSgzKfJe6lmhzSRsY
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:52:22 2025 by rpki-client