Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28509.roa
File: AS28509.roa (raw, json)
Hash identifier: FqthX7crofJcRcqywe9kkOAFWbLWYowZrRCAJ0mfXc8=
Subject key identifier: 78:51:2F:A2:29:70:C9:CA:F0:25:56:AF:3D:FE:8C:F6:8D:0C:0A:B1
Certificate issuer: /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial: 4BE01C57A5631433580AB055C0EE2891523DB737
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28509.roa
Signing time: Wed 20 May 2026 04:35:00 +0000
ROA not before: Wed 20 May 2026 04:30:00 +0000
ROA not after: Wed 19 May 2027 04:35:00 +0000
asID: 28509
IP address blocks: 187.184.0.0/24 maxlen: 24
187.184.4.0/22 maxlen: 22
187.184.8.0/22 maxlen: 22
187.185.14.0/23 maxlen: 24
187.185.32.0/21 maxlen: 22
187.185.47.0/24 maxlen: 24
187.185.56.0/21 maxlen: 21
187.185.69.0/24 maxlen: 24
187.185.70.0/24 maxlen: 24
187.185.80.0/21 maxlen: 22
187.185.112.0/20 maxlen: 20
187.185.160.0/21 maxlen: 24
187.185.172.0/22 maxlen: 24
187.185.176.0/21 maxlen: 24
187.185.184.0/22 maxlen: 24
187.185.190.0/23 maxlen: 24
187.185.192.0/20 maxlen: 24
187.185.228.0/24 maxlen: 24
189.202.0.0/20 maxlen: 24
189.202.16.0/22 maxlen: 24
189.214.16.0/20 maxlen: 20
189.214.40.0/21 maxlen: 21
189.214.48.0/20 maxlen: 21
189.214.75.0/24 maxlen: 24
189.214.156.0/24 maxlen: 24
189.214.158.0/24 maxlen: 24
189.214.160.0/21 maxlen: 23
189.214.176.0/20 maxlen: 21
189.214.208.0/20 maxlen: 20
189.214.224.0/20 maxlen: 20
189.215.8.0/24 maxlen: 24
189.215.12.0/22 maxlen: 22
189.215.47.0/24 maxlen: 24
189.215.120.0/23 maxlen: 24
189.215.123.0/24 maxlen: 24
189.215.124.0/24 maxlen: 24
189.215.128.0/24 maxlen: 24
189.215.132.0/24 maxlen: 24
189.215.134.0/24 maxlen: 24
189.215.144.0/21 maxlen: 22
189.215.160.0/21 maxlen: 22
189.215.172.0/22 maxlen: 22
189.215.192.0/22 maxlen: 22
189.215.202.0/24 maxlen: 24
189.215.248.0/24 maxlen: 24
189.220.0.0/20 maxlen: 20
189.220.44.0/22 maxlen: 24
189.220.48.0/22 maxlen: 24
189.220.52.0/23 maxlen: 24
189.220.54.0/24 maxlen: 24
189.220.96.0/20 maxlen: 20
189.220.128.0/23 maxlen: 23
189.220.138.0/23 maxlen: 24
189.220.160.0/19 maxlen: 24
189.220.208.0/20 maxlen: 20
189.220.226.0/23 maxlen: 23
189.220.230.0/24 maxlen: 24
189.220.236.0/23 maxlen: 23
189.220.239.0/24 maxlen: 24
189.220.248.0/21 maxlen: 24
189.221.0.0/20 maxlen: 24
189.221.48.0/20 maxlen: 21
189.221.72.0/21 maxlen: 22
189.221.80.0/20 maxlen: 22
189.221.154.0/23 maxlen: 23
189.221.157.0/24 maxlen: 24
189.221.176.0/20 maxlen: 24
189.221.192.0/21 maxlen: 24
189.221.200.0/22 maxlen: 24
189.221.218.0/23 maxlen: 24
189.221.228.0/23 maxlen: 24
189.221.230.0/24 maxlen: 24
189.221.232.0/24 maxlen: 24
189.221.234.0/24 maxlen: 24
200.77.198.0/24 maxlen: 24
200.77.200.0/22 maxlen: 24
200.77.204.0/24 maxlen: 24
200.79.192.0/19 maxlen: 24
200.94.160.0/23 maxlen: 24
200.94.165.0/24 maxlen: 24
200.94.166.0/23 maxlen: 24
200.94.168.0/21 maxlen: 24
200.95.144.0/20 maxlen: 21
201.139.72.0/23 maxlen: 24
201.139.74.0/24 maxlen: 24
201.139.128.0/19 maxlen: 20
201.140.64.0/20 maxlen: 20
201.140.192.0/20 maxlen: 23
201.160.12.0/22 maxlen: 22
201.160.16.0/20 maxlen: 22
201.160.32.0/20 maxlen: 22
201.160.56.0/21 maxlen: 21
201.160.64.0/20 maxlen: 21
201.160.104.0/23 maxlen: 24
201.160.106.0/24 maxlen: 24
201.160.176.0/23 maxlen: 24
201.160.179.0/24 maxlen: 24
201.160.187.0/24 maxlen: 24
201.166.0.0/20 maxlen: 20
201.166.64.0/19 maxlen: 24
2806:219:701::/48 maxlen: 48
2806:250::/32 maxlen: 48
2806:250:900::/40 maxlen: 48
2806:250:d00::/40 maxlen: 48
2806:250:e00::/40 maxlen: 48
2806:250:f00::/40 maxlen: 48
2806:250:1100::/40 maxlen: 48
2806:250:1104::/48 maxlen: 48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 27 May 2026 07:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e0:1c:57:a5:63:14:33:58:0a:b0:55:c0:ee:28:91:52:3d:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Validity
Not Before: May 20 04:30:00 2026 GMT
Not After : May 19 04:35:00 2027 GMT
Subject: CN=78512FA22970C9CAF02556AF3DFE8CF68D0C0AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:45:80:98:ee:d6:ae:00:cb:4f:f0:a3:f6:c1:
7c:a7:40:58:ca:a1:0e:58:b0:eb:0d:67:e2:23:0d:
dc:fd:24:4d:ba:f7:76:e0:5e:39:b9:e4:3e:e7:bd:
27:37:16:77:92:65:c5:99:f1:d7:2d:6b:b3:7b:53:
52:fd:cb:fa:89:ec:5d:ed:ee:bd:3e:4f:43:e6:35:
63:5e:64:91:c6:d3:59:f8:f4:f2:ad:39:fd:47:dc:
36:89:e6:c1:9d:c1:3e:2a:55:b6:5f:79:08:40:30:
f4:89:38:40:40:f8:45:62:80:87:b1:f1:13:76:1e:
e1:a9:9c:ab:0e:7a:3e:79:8d:67:97:90:5f:5d:07:
d2:99:09:2e:2a:8d:f2:cb:67:33:94:8f:2e:db:80:
99:61:ae:1a:58:73:2c:d0:a9:e3:e8:36:bf:16:b1:
7d:e9:6e:8d:c7:02:92:4c:ad:40:91:2c:8b:8c:f8:
5f:c3:ed:c1:48:96:07:9c:83:34:1d:56:8e:58:f0:
79:da:0c:82:df:e4:4d:05:2f:31:d3:75:8b:51:3d:
b8:a8:6c:c8:26:19:15:b2:9f:f1:6d:50:e1:1a:a5:
c3:99:1a:70:78:b5:f3:48:2c:ed:11:49:bb:48:c4:
0e:72:95:74:2c:91:b5:95:71:65:70:2e:7c:9e:18:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:2F:A2:29:70:C9:CA:F0:25:56:AF:3D:FE:8C:F6:8D:0C:0A:B1
X509v3 Authority Key Identifier:
keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.184.0.0/24
187.184.4.0-187.184.11.255
187.185.14.0/23
187.185.32.0/21
187.185.47.0/24
187.185.56.0/21
187.185.69.0-187.185.70.255
187.185.80.0/21
187.185.112.0/20
187.185.160.0/21
187.185.172.0-187.185.187.255
187.185.190.0-187.185.207.255
187.185.228.0/24
189.202.0.0-189.202.19.255
189.214.16.0/20
189.214.40.0-189.214.63.255
189.214.75.0/24
189.214.156.0/24
189.214.158.0/24
189.214.160.0/21
189.214.176.0/20
189.214.208.0-189.214.239.255
189.215.8.0/24
189.215.12.0/22
189.215.47.0/24
189.215.120.0/23
189.215.123.0-189.215.124.255
189.215.128.0/24
189.215.132.0/24
189.215.134.0/24
189.215.144.0/21
189.215.160.0/21
189.215.172.0/22
189.215.192.0/22
189.215.202.0/24
189.215.248.0/24
189.220.0.0/20
189.220.44.0-189.220.54.255
189.220.96.0/20
189.220.128.0/23
189.220.138.0/23
189.220.160.0/19
189.220.208.0/20
189.220.226.0/23
189.220.230.0/24
189.220.236.0/23
189.220.239.0/24
189.220.248.0-189.221.15.255
189.221.48.0/20
189.221.72.0-189.221.95.255
189.221.154.0/23
189.221.157.0/24
189.221.176.0-189.221.203.255
189.221.218.0/23
189.221.228.0-189.221.230.255
189.221.232.0/24
189.221.234.0/24
200.77.198.0/24
200.77.200.0-200.77.204.255
200.79.192.0/19
200.94.160.0/23
200.94.165.0-200.94.175.255
200.95.144.0/20
201.139.72.0-201.139.74.255
201.139.128.0/19
201.140.64.0/20
201.140.192.0/20
201.160.12.0-201.160.47.255
201.160.56.0-201.160.79.255
201.160.104.0-201.160.106.255
201.160.176.0/23
201.160.179.0/24
201.160.187.0/24
201.166.0.0/20
201.166.64.0/19
IPv6:
2806:219:701::/48
2806:250::/32
Signature Algorithm: sha256WithRSAEncryption
01:8b:46:68:a8:91:a8:5b:d2:aa:4d:3b:2a:fe:2a:ec:c7:44:
49:d8:a1:ed:3c:b0:0f:19:7f:55:53:12:7f:45:70:a6:a2:89:
f0:8b:e4:0f:47:e9:6a:11:9c:c5:35:75:27:69:72:dd:07:67:
71:98:2e:d8:d7:f6:69:4e:85:ed:35:dc:a7:0e:79:ed:40:3f:
e9:8c:59:de:89:ff:5c:6c:3b:06:f8:f2:b7:14:42:28:b4:a8:
39:dc:b6:ba:63:f5:da:07:47:50:f8:d6:d5:df:c3:9d:64:41:
6b:8a:76:d0:7f:ac:5b:a0:53:ff:63:58:1e:8b:5e:4e:b4:05:
6f:29:9e:0a:82:b1:2f:bd:fd:00:d7:22:ab:30:69:47:7e:6a:
be:e7:95:4d:99:f4:14:c6:dc:c0:c9:36:1b:8d:c6:bd:f5:cb:
ad:ee:92:3c:fa:f8:52:7b:7d:c0:5d:55:67:d1:90:bb:4e:f5:
7e:8d:c4:1f:d3:bd:2c:47:06:9b:7e:ce:87:d5:28:13:df:fe:
af:0f:1d:46:b2:88:55:8c:43:6b:4a:0a:57:87:4b:81:a4:3a:
e6:71:fc:1d:63:f8:5c:8b:32:72:93:28:eb:ad:20:78:b1:dd:
78:b3:29:ea:af:48:4d:fc:ae:b7:69:a4:ad:65:70:c0:11:e3:
75:c7:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:50:48 2026 by rpki-client