This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
File:                     3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          F/4y5VgqHu+VBGr6OiwPK4RMElCzS6da2M1AKxi0uW4=
Subject key identifier:   48:DA:5E:BB:59:1D:2E:ED:FB:64:6D:64:5C:28:3A:16:F4:E5:00:54
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       49B02B5C726FFA6120D05EAC18F96A403241C6F2
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
Signing time:             Tue 09 Dec 2025 05:54:19 +0000
ROA not before:           Tue 09 Dec 2025 05:49:19 +0000
ROA not after:            Tue 08 Dec 2026 05:54:19 +0000
asID:                     265540
IP address blocks:        204.194.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 15:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b0:2b:5c:72:6f:fa:61:20:d0:5e:ac:18:f9:6a:40:32:41:c6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Dec  9 05:49:19 2025 GMT
            Not After : Dec  8 05:54:19 2026 GMT
        Subject: CN=48DA5EBB591D2EEDFB646D645C283A16F4E50054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:13:3a:55:d2:8a:ad:4c:05:8e:78:99:f2:
                    4f:3e:ac:bd:e1:75:c8:ee:71:03:14:b1:d3:53:a8:
                    2d:43:a2:6b:99:dc:3d:bb:e6:cf:6a:46:ae:b2:b2:
                    ac:24:73:de:c9:40:4e:ee:95:58:ff:9b:59:72:60:
                    f4:5f:c1:89:73:c5:57:04:3b:1b:7b:ac:4b:de:24:
                    88:2b:3e:2c:d7:75:76:49:de:a4:85:fe:2c:dc:4f:
                    48:a2:f1:a7:2f:0e:78:1e:f5:65:59:fb:52:b5:23:
                    b9:98:61:18:1d:34:d1:1a:ca:23:60:e4:7d:ae:d5:
                    e7:03:61:94:de:99:c6:e7:a8:04:5e:a4:1f:0d:94:
                    f0:9a:b0:ae:26:26:c9:12:2d:d5:dc:0c:0e:9d:2f:
                    d1:ff:74:5c:43:e7:52:9e:32:ed:89:3c:f8:4e:59:
                    35:04:24:b9:8b:1f:e7:77:bc:1f:3b:8f:20:0e:e7:
                    d3:8b:50:8b:8a:d1:d2:8b:92:a5:ec:eb:4f:c6:5d:
                    68:c6:12:33:97:1b:3f:26:93:09:96:d5:7a:da:00:
                    1d:af:5e:9a:1d:95:cd:9b:3f:6d:23:7f:a5:b5:58:
                    d4:e8:0d:28:c3:d5:1f:de:e5:0f:b5:0a:43:0c:ca:
                    82:d6:4e:00:f3:df:94:df:98:f2:2d:63:38:43:fa:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DA:5E:BB:59:1D:2E:ED:FB:64:6D:64:5C:28:3A:16:F4:E5:00:54
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:aa:4f:be:d0:2c:a8:bc:db:52:e8:e7:da:6c:27:b1:65:
         cf:ac:8c:53:38:a1:aa:a1:0d:b0:e1:5b:9c:53:09:f0:27:2d:
         2f:6a:44:1a:95:82:50:94:53:d0:bc:b0:a5:4f:e3:63:71:2a:
         8d:8b:f6:d8:6b:44:90:40:34:40:db:2f:7a:28:3d:fb:54:c6:
         59:80:0e:37:76:4c:d7:71:02:45:74:a6:5a:2a:d2:b3:9a:98:
         98:3b:5e:9b:24:81:8f:28:af:c4:d5:60:a4:8a:99:d8:60:c6:
         7f:65:ef:a3:c6:07:e1:08:73:18:ec:35:ea:a0:24:2e:98:09:
         c9:10:47:33:58:63:f0:5c:cb:ba:2f:d0:6b:6f:7f:c3:69:7c:
         de:e6:b4:f5:81:93:16:92:d5:75:82:86:c1:89:9c:c2:60:ff:
         9a:53:96:10:81:e0:f9:67:4c:fc:87:6a:e2:2c:7a:d6:02:38:
         82:5f:bd:c4:3d:bf:44:b8:eb:2e:e2:d7:f9:bd:f5:6c:fc:cd:
         de:f4:57:24:1c:c0:f9:ef:8e:b2:20:6e:c5:6e:00:56:68:36:
         dd:eb:76:55:28:80:ed:61:94:fd:04:1e:85:10:84:ee:c8:53:
         25:c1:b2:8c:d7:01:c1:12:ac:4e:30:4e:23:8d:99:59:80:0c:
         6a:a2:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:21:50 2025 by rpki-client