This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa
File:                     3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa (raw, json)
Hash identifier:          l9H6UsFXZ2xGaPGFSv3UXzYKmS4dDM4yDbBhXT8sFa0=
Subject key identifier:   85:33:DA:81:A3:15:92:5B:BD:EF:05:3F:D1:AC:8D:34:1D:61:62:6C
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       75BF92DA3EA791066F7561A135C754D7817ED6FA
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa
Signing time:             Tue 09 Dec 2025 17:54:25 +0000
ROA not before:           Tue 09 Dec 2025 17:49:25 +0000
ROA not after:            Tue 08 Dec 2026 17:54:25 +0000
asID:                     22927
IP address blocks:        190.197.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bf:92:da:3e:a7:91:06:6f:75:61:a1:35:c7:54:d7:81:7e:d6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Dec  9 17:49:25 2025 GMT
            Not After : Dec  8 17:54:25 2026 GMT
        Subject: CN=8533DA81A315925BBDEF053FD1AC8D341D61626C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:c7:21:7a:7e:3b:cc:e0:95:9e:16:76:43:
                    04:1e:95:d5:06:f3:c4:03:e4:ca:48:0b:b8:ef:ea:
                    75:e8:8d:ec:31:eb:75:6a:7b:b0:27:de:91:7c:04:
                    62:82:99:d8:7e:c5:57:f5:1a:1f:67:40:73:34:09:
                    fc:36:ae:cf:a4:06:4c:c1:d9:ba:d1:e1:e0:6b:91:
                    0d:9a:09:1b:ee:14:66:e7:8d:7f:a8:00:b4:6f:ea:
                    97:1d:45:02:a0:8c:97:4e:68:d7:3c:5d:a1:86:87:
                    2e:fd:5a:ce:d7:9f:0f:0f:2b:95:e2:46:ba:a2:8a:
                    64:0b:9d:57:1b:a4:7d:19:df:49:97:af:3f:44:0f:
                    78:63:23:9d:f6:de:86:a8:05:6d:c7:ce:f0:3f:92:
                    9e:9f:ee:77:b8:b4:4b:09:30:37:e9:ba:a3:ce:ab:
                    48:78:14:a7:b4:0d:34:ef:cc:8c:dd:5b:da:92:7c:
                    9f:dc:f9:55:e7:6b:f9:88:b4:b7:d2:f9:20:de:e7:
                    24:d1:56:c2:71:27:06:18:30:c6:23:e4:19:b5:15:
                    93:51:53:ac:96:53:ba:a6:11:38:2d:fa:c4:29:9c:
                    92:8c:b8:af:35:09:b1:28:cc:d9:fb:02:fb:10:aa:
                    95:d9:7b:61:08:6c:7c:fc:fc:42:1a:21:10:d5:ae:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:DA:81:A3:15:92:5B:BD:EF:05:3F:D1:AC:8D:34:1D:61:62:6C
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:9e:7c:7f:80:1a:08:43:52:c6:d6:62:b9:83:49:41:07:
         6e:1f:fa:a7:d2:86:e2:8b:c4:1d:92:60:b9:12:93:bf:78:62:
         f3:55:a7:11:7e:94:b0:36:8f:6a:15:cb:bb:98:24:4d:31:23:
         2d:a0:61:75:85:0c:5a:a0:a0:cb:26:3c:bf:62:14:8f:8f:68:
         b6:52:ca:5a:88:03:df:ca:7a:20:e9:7e:ff:4b:e8:f1:80:2a:
         e4:d3:17:65:f4:33:39:2e:98:16:71:72:1a:e2:2c:99:2e:7e:
         4f:91:51:3b:bb:d5:8c:7d:8d:97:2d:15:10:31:29:8a:5b:54:
         20:a6:3c:ed:c3:4a:28:1c:12:c3:f6:4e:93:90:e2:3b:77:5d:
         21:64:98:12:c5:ad:8e:03:c3:79:3f:a4:d0:b1:65:20:36:be:
         62:07:6e:d3:3f:96:7e:6e:c9:a0:bc:02:27:03:ad:2b:9f:06:
         df:bc:97:8c:25:73:a3:ee:78:96:19:30:6e:67:eb:f0:b0:74:
         17:f6:6d:f4:a0:a5:fe:18:06:b1:e5:7d:24:c3:bb:60:b4:8d:
         d4:70:d8:0f:34:8e:dc:87:ff:f5:93:03:ca:d9:63:82:e0:8e:
         b8:9c:c7:e0:01:2c:01:61:29:6f:40:fa:1d:0a:02:df:5a:f6:
         75:2b:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:40:16 2025 by rpki-client