This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa
File:                     3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa (raw, json)
Hash identifier:          mheZ9jMHxAV9fXirh4V96DEnOWfknR/ATim3U5oGV54=
Subject key identifier:   FC:87:90:34:BB:AB:92:60:15:34:CC:64:F1:4D:85:A7:7D:45:67:BE
Certificate issuer:       /CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
Certificate serial:       37C1D2875CAD8AB8ECA17E304EEF4CFFE4281DF3
Authority key identifier: 72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa
Signing time:             Tue 11 Nov 2025 20:00:00 +0000
ROA not before:           Tue 11 Nov 2025 19:55:00 +0000
ROA not after:            Tue 10 Nov 2026 20:00:00 +0000
asID:                     262194
IP address blocks:        190.109.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 13:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c1:d2:87:5c:ad:8a:b8:ec:a1:7e:30:4e:ef:4c:ff:e4:28:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728EE6FF4449D830A7DD35ACE47778AB8CA0E274
        Validity
            Not Before: Nov 11 19:55:00 2025 GMT
            Not After : Nov 10 20:00:00 2026 GMT
        Subject: CN=FC879034BBAB92601534CC64F14D85A77D4567BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:75:46:09:b6:7d:ef:99:4c:8f:d4:da:36:
                    ce:15:bd:d7:3b:86:80:3e:f0:97:29:4e:23:ff:2f:
                    53:bf:2e:51:0a:bb:93:38:53:74:8e:de:77:e3:c1:
                    3c:18:7e:b1:10:6a:3a:72:c5:e7:b9:0d:cc:fd:06:
                    13:0a:f5:28:7f:31:63:fd:a1:0b:06:51:a9:68:a3:
                    37:4e:2c:fc:06:0a:0e:73:a2:b3:36:e9:61:9a:2d:
                    a6:6a:ce:b0:02:4e:a9:d7:87:68:69:32:8c:8a:c6:
                    6b:03:cf:96:78:5b:7e:48:83:e0:d3:73:e2:dc:1e:
                    a3:68:a7:91:bd:3e:e4:25:b7:9b:e7:12:be:8f:fe:
                    78:a8:cf:0f:c4:ac:a9:11:82:e6:c4:3d:70:c6:50:
                    ea:26:7f:9e:e3:91:4f:58:a6:de:2d:9e:71:44:1c:
                    ad:f8:3e:3f:de:0f:a4:2f:69:89:72:5e:0b:60:fe:
                    51:43:9e:29:dd:dc:ea:30:cb:43:21:11:5a:d6:1d:
                    79:4e:16:74:6d:e3:c9:3d:12:bb:20:d4:c8:ba:1f:
                    51:2b:e9:df:af:8b:5d:01:76:8d:ad:1a:6b:02:e1:
                    ef:01:0f:a5:c8:78:89:24:c1:92:b4:9b:f9:fb:92:
                    91:3f:33:6e:19:2d:a4:f3:5d:50:33:3c:74:72:63:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:87:90:34:BB:AB:92:60:15:34:CC:64:F1:4D:85:A7:7D:45:67:BE
            X509v3 Authority Key Identifier:
                keyid:72:8E:E6:FF:44:49:D8:30:A7:DD:35:AC:E4:77:78:AB:8C:A0:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728EE6FF4449D830A7DD35ACE47778AB8CA0E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CC932B03D6952D9CFB7DD488680D1E68D7D30273E75A82588A41F03F9EE2B14/0/3139302e3130392e33322e302f31392d3234203d3e20323632313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:97:ee:ab:df:11:f6:8b:56:ce:77:4d:58:59:20:3c:a8:c5:
         02:d1:0e:3a:6f:05:77:43:9e:79:ae:9d:b6:08:59:8c:a3:06:
         15:33:22:d4:11:15:cd:28:98:a2:ae:28:b3:b9:40:7c:1d:21:
         03:e5:96:ad:53:5d:92:2d:56:04:05:97:ca:3b:7b:cf:0d:8e:
         7c:6b:fe:18:e7:a4:23:06:6c:df:73:0a:7d:93:07:03:d5:bb:
         0c:2d:02:15:19:5d:51:ad:ac:7b:18:0d:95:ea:17:9a:29:c9:
         86:7c:cd:7d:1f:34:49:c5:62:62:7b:21:90:4d:09:31:59:a3:
         69:91:94:cc:88:a6:e8:47:63:11:71:d6:18:ab:a3:ca:2c:d0:
         08:8f:5b:3a:80:a6:b6:d6:be:93:13:5e:19:30:e2:8d:48:61:
         10:2c:2d:6d:ae:c9:76:77:2b:c5:c3:9b:e7:f6:21:70:9a:ad:
         83:ba:e0:11:c3:8d:5b:24:47:13:c0:9e:0a:19:b5:4d:36:36:
         56:32:d8:c1:b5:52:4a:b7:f1:40:51:a5:4c:4a:7a:1a:d3:11:
         41:d4:e8:9c:69:d7:c5:f5:3a:c1:75:53:3b:4b:de:8b:ac:13:
         84:61:a0:7e:6c:42:60:05:b1:2c:95:84:0a:17:8d:07:01:dd:
         7c:0d:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:33:19 2025 by rpki-client