This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
File:                     3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa (raw, json)
Hash identifier:          8arGhI2gcL1Na1JI9Q0UmS9J7Ecm7xUeaYRxczUvv5k=
Subject key identifier:   43:DD:F6:17:36:FC:FD:0A:7D:75:AA:E1:01:DA:0B:DA:62:E9:5D:91
Certificate issuer:       /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
Certificate serial:       0926E17306A07E5DD409EE90D9FB8C225DA6FEAB
Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa
Signing time:             Tue 06 Jan 2026 20:48:52 +0000
ROA not before:           Tue 06 Jan 2026 20:43:52 +0000
ROA not after:            Tue 05 Jan 2027 20:48:52 +0000
asID:                     269905
IP address blocks:        190.112.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 08:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:e1:73:06:a0:7e:5d:d4:09:ee:90:d9:fb:8c:22:5d:a6:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D
        Validity
            Not Before: Jan  6 20:43:52 2026 GMT
            Not After : Jan  5 20:48:52 2027 GMT
        Subject: CN=43DDF61736FCFD0A7D75AAE101DA0BDA62E95D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:a0:4e:45:02:e8:7d:8a:45:e6:39:b6:91:
                    2e:b1:dd:63:c0:4b:12:4e:ec:8a:f8:bb:2a:ad:58:
                    d8:f5:67:18:77:86:4f:58:38:31:ae:f9:9d:93:7b:
                    27:59:0e:e2:1a:35:ed:05:52:9a:41:66:5b:55:ba:
                    98:60:46:d4:29:7e:8f:c8:41:01:3e:08:bc:c5:da:
                    38:8b:55:19:b7:3f:06:b7:5f:04:f1:c1:e4:5a:66:
                    a3:b7:94:7b:7d:d9:8d:be:fa:67:4c:f1:b5:fd:d3:
                    69:e2:aa:ea:5f:99:6f:09:7d:51:34:73:bf:a7:ce:
                    fb:3d:c7:d4:ec:21:a9:c4:f6:74:30:99:e3:0a:3f:
                    45:a7:87:d2:44:44:f5:32:d8:77:ef:1f:84:ab:50:
                    31:8d:39:c1:93:7f:c9:0f:21:c3:64:07:62:91:23:
                    a0:af:e3:ae:da:8b:76:7a:a8:8c:da:f2:58:15:e2:
                    43:72:25:45:e4:55:85:5a:d3:ee:65:c1:5c:3a:c9:
                    58:64:b7:64:80:50:4e:5e:55:a0:31:f2:cc:e0:9f:
                    d3:61:81:03:11:c4:fd:31:1a:68:f1:80:34:fe:b8:
                    1e:1c:30:34:89:c0:9b:3c:78:46:a4:d7:e0:f7:59:
                    cd:72:24:89:1c:4f:ba:6d:e3:da:03:b7:09:5c:70:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:F6:17:36:FC:FD:0A:7D:75:AA:E1:01:DA:0B:DA:62:E9:5D:91
            X509v3 Authority Key Identifier:
                keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:41:15:c8:3a:38:0d:96:cd:0b:7c:b0:c5:53:cf:7d:43:d6:
         3b:fa:cd:6f:1e:24:12:62:82:a0:d9:89:d4:03:dc:59:45:8f:
         a4:82:fc:df:a5:c7:90:bc:26:2c:2c:2f:e3:31:a6:3d:7c:e5:
         6e:30:d1:55:eb:0e:76:f1:ff:7e:80:42:e3:c5:8e:e2:3f:dd:
         92:27:88:23:72:be:e0:9c:30:d4:ee:5e:25:db:6e:30:cd:57:
         bd:ac:72:52:3d:c3:0c:4b:b0:09:88:2d:05:0b:e3:cf:01:2c:
         d3:7e:d2:50:03:8e:b4:61:d2:00:2b:4d:53:3d:d5:a2:46:98:
         92:77:ca:ea:44:8b:c3:d7:bc:ce:ee:06:3e:df:19:a5:00:e7:
         3c:4b:cb:10:f3:d4:7e:10:51:7d:71:a2:f4:ca:cd:a8:e1:d0:
         49:f6:ae:e4:a4:ae:1f:00:e4:e9:e7:a7:2d:4c:2b:d0:73:ce:
         39:1a:b6:2e:59:07:8e:b7:6b:4b:23:90:67:e3:fd:d3:1d:8f:
         7c:1a:87:37:1f:2c:62:ac:42:5c:6e:17:0a:39:e7:08:01:18:
         e2:19:16:1b:90:8b:4d:b2:3e:f8:e7:c8:cf:06:56:c0:e2:90:
         d8:a2:c0:2c:c9:cb:2c:be:e9:5e:c8:f3:a0:ea:25:16:2c:45:
         26:6a:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:36:14 2026 by rpki-client