This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3230302e35302e3234382e302f32312d3234203d3e203631353130.roa
File:                     3230302e35302e3234382e302f32312d3234203d3e203631353130.roa (raw, json)
Hash identifier:          l6uQycAAfaNa1BN/RdUAmiz9VEzNaIvc/jcQY2fNxYM=
Subject key identifier:   65:97:78:A2:31:05:94:7C:3C:75:DF:7E:BD:17:D4:A4:38:91:43:73
Certificate issuer:       /CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
Certificate serial:       0D49E7D7FC3780823EEEF62C0CCE1E9FAF539543
Authority key identifier: 62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3230302e35302e3234382e302f32312d3234203d3e203631353130.roa
Signing time:             Thu 20 Nov 2025 13:50:01 +0000
ROA not before:           Thu 20 Nov 2025 13:45:01 +0000
ROA not after:            Thu 19 Nov 2026 13:50:01 +0000
asID:                     61510
IP address blocks:        200.50.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 22:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:49:e7:d7:fc:37:80:82:3e:ee:f6:2c:0c:ce:1e:9f:af:53:95:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BBEB1D3EC7F2C414903A0A975FC18934ED1243
        Validity
            Not Before: Nov 20 13:45:01 2025 GMT
            Not After : Nov 19 13:50:01 2026 GMT
        Subject: CN=659778A23105947C3C75DF7EBD17D4A438914373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:58:51:51:e6:b9:0a:9e:11:3f:8d:ce:0f:
                    c8:2b:76:8a:73:7f:94:f8:a4:22:1f:42:80:eb:66:
                    bc:3a:4d:7f:e7:b3:21:62:4b:5e:9a:35:63:fc:23:
                    70:b9:32:e5:3b:64:8f:af:d3:72:c5:bb:ea:13:5d:
                    a8:52:d7:c2:b6:78:ca:5e:a9:fa:8e:da:b9:88:a9:
                    03:9a:bd:ae:85:6d:15:38:a2:48:dd:da:93:47:86:
                    67:8b:e4:3a:7c:0b:0c:6a:67:95:6f:58:e7:3b:08:
                    fe:1b:31:d3:d5:90:c2:58:a0:4a:73:2b:fc:bb:1b:
                    38:4c:d2:c3:90:bc:80:3f:e5:d6:04:05:89:f3:81:
                    94:31:73:e9:4d:59:9f:3f:f0:f6:de:56:42:38:eb:
                    49:de:90:8d:34:29:35:f5:cd:2d:6a:f6:42:59:60:
                    49:d6:0c:47:41:c2:a6:20:bf:4b:1b:6a:ca:26:ca:
                    1f:42:3d:d7:b1:4d:fa:9b:b8:00:19:80:fe:f4:b0:
                    f1:13:d2:62:54:57:16:d2:8d:2d:3d:7e:97:a3:40:
                    35:4f:54:be:25:44:81:16:2f:31:ba:81:64:65:59:
                    32:99:5a:16:2d:d3:c8:36:ae:18:d2:03:53:7d:e1:
                    7e:e7:ca:9a:d2:c3:b8:03:f1:d4:9d:da:7d:05:04:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:97:78:A2:31:05:94:7C:3C:75:DF:7E:BD:17:D4:A4:38:91:43:73
            X509v3 Authority Key Identifier:
                keyid:62:BB:EB:1D:3E:C7:F2:C4:14:90:3A:0A:97:5F:C1:89:34:ED:12:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62BBEB1D3EC7F2C414903A0A975FC18934ED1243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E99A9DF53DAFDE2F18CBD05542236A71499560B65A8DB5BEA5091F8D82264D8B/0/3230302e35302e3234382e302f32312d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:42:7c:ba:b9:d0:55:36:ef:13:f8:a6:dd:01:77:f2:fd:
         c9:9c:ff:65:9d:cc:0e:9e:1f:1d:d2:fc:fe:2f:e7:ba:ef:a4:
         ba:d7:dc:53:56:c8:5f:16:91:60:c3:a4:3b:fb:38:b0:92:08:
         44:a5:a7:b9:3a:b3:03:77:3e:e3:51:0c:de:7c:6e:30:94:c1:
         b7:87:5d:82:50:47:05:b3:3d:6c:6f:2b:99:0b:2a:3f:ed:6e:
         61:94:fa:1e:db:a0:56:65:d3:c1:93:7b:e9:55:cb:30:e7:7a:
         52:33:99:db:40:25:23:b8:3c:c2:a3:74:17:05:f5:72:ec:60:
         4a:9b:8b:4b:f0:7a:f3:e0:5e:eb:e5:12:64:c3:e3:38:59:e6:
         5e:e5:37:77:a8:31:7f:c1:76:9c:e9:68:90:6b:38:34:11:cb:
         b1:df:bb:db:4c:c8:d0:fb:36:18:e8:53:2c:81:ed:df:e8:6d:
         f9:c5:62:31:ff:ac:28:fa:74:21:eb:0d:b1:20:64:14:ba:3c:
         60:30:f9:82:7a:3e:27:92:6c:f9:74:27:b3:fb:59:ae:49:0b:
         c8:0a:59:e2:6c:2e:6c:1d:eb:fb:25:f2:df:a9:8e:d0:63:aa:
         36:af:ac:eb:53:bf:71:94:24:1b:99:de:af:38:98:8c:2c:9f:
         1c:9e:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 18:40:41 2025 by rpki-client