This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e332e3131322f32392d3239203d3e20323639393830.roa
File:                     3137302e3235342e332e3131322f32392d3239203d3e20323639393830.roa (raw, json)
Hash identifier:          ZEkJRxoqd65DNhbD8iHAu1q3nHdxRkzM2dbKVV6QqNw=
Subject key identifier:   19:0A:69:EC:32:94:E6:35:98:1E:22:00:AC:90:95:8B:88:27:8F:AC
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       25BE87BE48522C81E07DE953915A82F9A9C65572
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e332e3131322f32392d3239203d3e20323639393830.roa
Signing time:             Thu 18 Dec 2025 23:00:00 +0000
ROA not before:           Thu 18 Dec 2025 22:55:00 +0000
ROA not after:            Thu 17 Dec 2026 23:00:00 +0000
asID:                     269980
IP address blocks:        170.254.3.112/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 08:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:be:87:be:48:52:2c:81:e0:7d:e9:53:91:5a:82:f9:a9:c6:55:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Dec 18 22:55:00 2025 GMT
            Not After : Dec 17 23:00:00 2026 GMT
        Subject: CN=190A69EC3294E635981E2200AC90958B88278FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:62:da:f1:5c:22:d2:80:db:50:1f:76:bd:
                    40:3b:77:77:87:36:5c:1a:d1:67:90:19:c1:5a:8e:
                    48:38:7b:10:8f:97:10:63:0f:c8:8d:91:37:bd:13:
                    ba:60:82:9f:11:3d:6d:85:a5:4d:34:0f:29:d6:12:
                    95:2f:01:9f:98:5d:69:e2:59:38:9c:55:c2:b7:4f:
                    55:9c:35:1d:b5:e4:df:81:05:df:49:17:37:33:a2:
                    e3:78:6b:0b:03:2b:45:aa:49:e7:0d:47:d7:fa:f8:
                    bf:78:21:28:d1:c6:ce:4d:44:c1:db:38:e2:9c:4c:
                    74:d1:0f:ad:87:79:a4:f8:88:55:99:eb:80:c3:55:
                    c4:ef:3e:5c:49:a2:6e:ca:e3:11:bf:4a:b0:84:63:
                    d2:ef:c8:4d:7d:54:21:6a:ae:15:3f:45:d1:f4:08:
                    68:bd:99:b9:5c:f3:cc:22:b1:61:0f:f1:98:6d:b6:
                    b4:a6:c0:88:95:ce:59:c0:12:cd:d1:cd:3a:de:8e:
                    a7:52:f3:7c:5b:23:79:68:26:53:61:66:d8:6c:8d:
                    e2:82:5b:e8:6f:09:56:62:62:ae:d6:22:7f:e0:5a:
                    1f:5c:73:22:5f:8d:74:57:85:90:03:46:86:17:21:
                    e5:6d:46:28:e1:3b:4f:d3:55:95:55:1f:6b:64:05:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0A:69:EC:32:94:E6:35:98:1E:22:00:AC:90:95:8B:88:27:8F:AC
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3137302e3235342e332e3131322f32392d3239203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.3.112/29

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:11:34:05:14:48:88:9c:ff:5b:59:57:f8:3c:81:bc:f7:
         a9:8c:c6:15:84:5b:51:09:b1:85:a7:2f:70:5e:dd:52:92:05:
         ec:18:9b:81:a4:71:56:e1:9a:04:2d:f7:df:2f:5b:2d:f1:1d:
         76:c6:27:97:ef:1e:f5:3f:90:50:d0:4d:cf:01:1e:4c:0d:79:
         ac:27:ba:fb:3c:0e:9c:ea:40:1b:35:74:43:56:17:d4:dd:5b:
         2c:4e:94:e0:ec:72:c2:cf:9c:76:7a:56:73:20:6b:e8:02:93:
         22:87:a8:1c:a2:0b:6a:40:e4:b0:5d:5c:de:09:2b:a2:ec:71:
         70:1e:fb:71:15:66:1d:63:3b:eb:b6:14:97:97:2f:77:40:14:
         33:9b:64:34:b4:04:db:20:ff:e4:4a:b8:43:4e:82:81:b4:f0:
         c8:93:ad:14:ce:a4:2a:b2:b4:69:00:59:76:75:82:31:8d:78:
         1a:03:1d:cb:99:0e:e6:d4:05:dd:68:cf:42:1b:6d:6f:18:8d:
         c5:bd:6a:c0:ec:03:82:ca:06:92:b9:b4:d5:0b:c0:15:18:8d:
         70:97:ce:d3:db:3b:41:6f:30:c4:20:17:14:30:88:e9:6a:6e:
         72:8d:78:4d:f4:51:66:05:6d:a4:2d:ba:3c:41:2c:c4:1c:9d:
         b6:54:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:51:00 2025 by rpki-client