This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3139302e3138342e3230382e302f32312d3234203d3e203631353130.roa
File:                     3139302e3138342e3230382e302f32312d3234203d3e203631353130.roa (raw, json)
Hash identifier:          l76vwSEtDEddDSnAYoNY1uhvX6lvuL3eo00mdnDqOzc=
Subject key identifier:   26:1A:FD:E9:79:AE:C8:A8:DE:68:E5:CC:9B:56:D9:D4:53:1A:99:80
Certificate issuer:       /CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
Certificate serial:       0550D94B8350CC6CBD8CABC5BD173DA5FF1D2591
Authority key identifier: 62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3139302e3138342e3230382e302f32312d3234203d3e203631353130.roa
Signing time:             Thu 20 Nov 2025 13:50:00 +0000
ROA not before:           Thu 20 Nov 2025 13:45:00 +0000
ROA not after:            Thu 19 Nov 2026 13:50:00 +0000
asID:                     61510
IP address blocks:        190.184.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 22:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:d9:4b:83:50:cc:6c:bd:8c:ab:c5:bd:17:3d:a5:ff:1d:25:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
        Validity
            Not Before: Nov 20 13:45:00 2025 GMT
            Not After : Nov 19 13:50:00 2026 GMT
        Subject: CN=261AFDE979AEC8A8DE68E5CC9B56D9D4531A9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:c2:72:ae:4d:12:d1:a8:e7:91:3d:1d:04:
                    29:e1:75:0e:67:ee:96:ef:0e:d9:8b:37:f3:cf:3a:
                    88:44:21:48:18:03:82:59:7b:89:91:4b:9f:84:81:
                    dc:ad:a1:8c:9d:fe:1f:38:89:c7:01:c0:43:e7:3e:
                    6b:e8:a9:36:7f:82:11:bc:1d:d3:21:bf:52:20:ea:
                    93:a0:1d:31:98:19:7d:9c:94:0d:dc:8d:91:56:62:
                    95:30:55:71:be:1e:ef:a7:83:6d:d4:83:09:58:3a:
                    85:66:9c:ef:82:ab:02:9c:09:9e:44:0c:26:68:4b:
                    e2:21:bb:32:fe:20:48:dc:60:b9:71:c6:0d:0d:3d:
                    bb:43:e5:03:48:4d:1f:90:06:cb:3a:71:10:19:6d:
                    23:75:91:97:53:da:eb:f6:87:ff:d2:f2:9f:95:00:
                    8a:75:6c:4a:3f:79:dd:fb:aa:0e:5f:98:1f:4b:1a:
                    9e:e0:ac:4e:df:37:31:1f:05:85:2f:96:2f:cf:af:
                    ba:da:0b:fb:c9:59:d6:dc:e3:5c:f6:fe:0f:d1:22:
                    ea:80:ca:6c:b5:63:ed:06:1a:cc:05:17:d3:5c:5b:
                    04:15:dd:33:2a:86:66:58:24:ef:af:da:c4:15:a8:
                    8b:d4:59:00:38:df:bc:6d:6f:65:30:81:53:b9:3d:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:FD:E9:79:AE:C8:A8:DE:68:E5:CC:9B:56:D9:D4:53:1A:99:80
            X509v3 Authority Key Identifier:
                keyid:62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3139302e3138342e3230382e302f32312d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:45:31:3b:70:db:3d:78:05:2d:4e:37:57:e6:30:db:b2:
         b0:53:01:09:32:51:16:d6:bd:ae:40:c3:ee:7f:52:0a:e0:ea:
         f6:61:ed:1b:09:eb:fc:17:99:4b:c5:99:87:59:10:15:61:b0:
         06:cf:bc:ff:28:76:12:4c:6d:ec:83:b4:57:58:b5:3c:50:08:
         1b:13:c3:38:e9:7f:d4:78:31:04:6c:9a:04:d8:77:06:31:49:
         e9:94:a8:e8:ca:bb:16:08:24:0b:fd:f8:0e:d6:03:04:63:be:
         46:1f:3c:20:0c:8b:5f:1a:f2:bb:dd:bf:74:91:dc:7c:4e:fc:
         1f:ff:93:93:4d:32:21:5a:57:c6:74:ba:f1:4e:98:a7:72:bc:
         5a:fb:cd:55:ca:cb:4c:85:b6:30:a5:9e:74:6f:23:9d:ad:e0:
         a9:43:aa:97:85:3f:65:f7:0e:c4:92:cd:06:ab:ec:90:f1:a8:
         20:42:b9:71:9d:7a:73:54:3b:92:9f:57:d4:b8:54:7f:7e:f1:
         d6:a3:4e:da:d2:57:d9:15:a3:81:57:d1:5b:65:a6:88:66:35:
         5c:c3:d2:56:4e:3b:e5:03:3f:67:c6:86:e9:6c:be:c5:7f:67:
         ce:8e:51:d0:5e:74:8e:84:47:07:b1:b6:a3:73:66:1a:fe:46:
         b6:63:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 18:40:42 2025 by rpki-client