This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS32787.roa
File:                     AS32787.roa (raw, json)
Hash identifier:          h/XNPfy4ZpGOJlHguDn6WboMhP35SdS88Q81n493olM=
Subject key identifier:   25:EE:14:3B:B2:0C:7B:C1:FA:4A:6B:1B:F0:4E:AC:C3:04:56:B6:A0
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       43DF45631DEC553984A61796F6A9A45B289D8786
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS32787.roa
Signing time:             Tue 06 Jan 2026 20:54:00 +0000
ROA not before:           Tue 06 Jan 2026 20:49:00 +0000
ROA not after:            Tue 05 Jan 2027 20:54:00 +0000
asID:                     32787
IP address blocks:        190.145.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:df:45:63:1d:ec:55:39:84:a6:17:96:f6:a9:a4:5b:28:9d:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Jan  6 20:49:00 2026 GMT
            Not After : Jan  5 20:54:00 2027 GMT
        Subject: CN=25EE143BB20C7BC1FA4A6B1BF04EACC30456B6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:cc:e1:88:96:89:ef:c6:f1:38:76:4e:ec:
                    e2:f5:bc:1b:76:1d:78:72:5e:ba:40:df:f7:ad:e8:
                    7d:d4:db:d7:45:c6:64:44:83:66:db:2e:5b:32:d3:
                    78:92:22:89:7d:21:0c:95:9d:3d:b0:26:56:02:bb:
                    fb:50:4c:bc:16:44:6e:eb:48:ea:dd:7b:b0:2a:14:
                    b5:ab:7d:00:66:33:7f:93:d9:b7:f4:f7:ee:9c:b6:
                    b8:16:03:ba:62:30:50:90:f8:9c:81:4f:ff:82:e3:
                    c1:4d:0d:40:40:72:af:7b:c2:58:ac:ad:31:fc:38:
                    13:53:ef:69:93:7b:c5:a8:97:8e:5c:9e:6a:03:44:
                    39:17:f3:7f:78:27:17:a5:1d:02:d2:69:30:f5:00:
                    51:aa:d4:f9:0b:40:dd:fb:6c:ec:3d:8e:38:0d:ac:
                    e1:23:30:e1:5a:b8:57:2c:99:21:7e:08:b0:74:21:
                    f0:16:c0:34:05:07:17:41:d7:ac:8c:08:f0:20:7c:
                    25:e5:c5:ad:44:14:2a:ae:1a:ae:03:7b:a7:4a:95:
                    e0:ae:2a:36:da:d3:67:ca:1b:6d:c2:c8:1a:ac:9f:
                    9f:f2:fc:67:cf:67:ba:c7:e7:96:39:de:d1:cd:23:
                    87:46:7a:6a:98:c9:a4:8b:70:1f:08:4a:51:7c:32:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:14:3B:B2:0C:7B:C1:FA:4A:6B:1B:F0:4E:AC:C3:04:56:B6:A0
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS32787.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:d3:52:09:00:a1:d0:49:84:4b:4e:e0:bb:b8:34:8c:09:
         74:68:7f:df:92:fc:25:16:68:b6:e1:90:6f:e8:5b:c1:6a:d0:
         48:4d:a2:f1:23:60:33:6a:7e:05:a3:72:07:22:d0:19:15:5a:
         a7:0c:2b:f5:35:f4:65:53:0e:e1:38:bb:4e:34:f3:ab:fb:ff:
         f3:bb:04:a4:34:e0:05:3b:85:1e:d7:09:69:68:ab:bd:86:ee:
         48:10:99:63:d3:95:49:88:47:8c:d0:ba:35:93:85:59:24:78:
         e8:2d:d1:bd:4a:f8:63:4d:bd:1c:c6:ca:30:fa:30:5e:31:f8:
         86:c5:e2:e5:f8:4b:1a:27:c0:e1:1f:fd:cd:25:53:87:4f:90:
         da:14:be:92:d9:f3:d0:4e:57:72:75:c9:8d:b4:8a:9b:dc:e1:
         91:7c:29:34:01:4d:05:40:b6:19:33:05:c1:3b:d4:d2:6b:e4:
         48:7a:6b:1f:85:17:1a:e5:70:15:85:32:8e:c7:b4:94:fd:00:
         e7:65:37:16:71:bc:98:67:6f:a3:a5:eb:54:0f:17:21:d7:99:
         14:6c:1e:5c:e2:a8:aa:6b:9a:fc:d1:a5:2a:ce:0d:05:db:0f:
         ef:50:5e:a2:2b:52:43:01:3a:51:e7:46:c5:56:ee:09:4d:33:
         01:8a:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 22:45:24 2026 by rpki-client