This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
File:                     3139302e38392e32382e302f32342d3234203d3e20323639393735.roa (raw, json)
Hash identifier:          jZTXFwrRwENWfNnuuLmwdruLG67MLBSed/K2kWAFRDg=
Subject key identifier:   FE:43:72:B3:0C:7D:EF:69:49:DA:25:63:BC:20:B8:CD:E8:50:56:CD
Certificate issuer:       /CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
Certificate serial:       5D5212FA495DA8891C762C07AF1128ABD66F6D04
Authority key identifier: 2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa
Signing time:             Tue 06 Jan 2026 20:57:08 +0000
ROA not before:           Tue 06 Jan 2026 20:52:08 +0000
ROA not after:            Tue 05 Jan 2027 20:57:08 +0000
asID:                     269975
IP address blocks:        190.89.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 05:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:52:12:fa:49:5d:a8:89:1c:76:2c:07:af:11:28:ab:d6:6f:6d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E
        Validity
            Not Before: Jan  6 20:52:08 2026 GMT
            Not After : Jan  5 20:57:08 2027 GMT
        Subject: CN=FE4372B30C7DEF6949DA2563BC20B8CDE85056CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:e0:c4:e0:58:90:d3:a9:90:7b:b1:2d:6b:
                    9d:f9:60:f1:77:1f:81:ff:84:be:2a:34:c5:d4:74:
                    aa:2c:70:cc:18:2a:b8:6c:fb:97:37:12:4c:aa:f3:
                    95:27:57:50:02:72:d2:ca:20:81:a5:7e:34:29:41:
                    dd:85:82:fe:1e:6b:db:c6:90:7c:aa:1d:92:1e:a8:
                    d7:89:00:31:71:43:c0:a0:4f:44:2d:a4:a7:b8:02:
                    da:aa:2e:2f:ba:a2:1c:7d:45:9e:0e:18:13:de:fc:
                    9f:ae:ea:ec:52:67:93:53:a9:d3:4b:f4:0e:0d:b6:
                    a5:06:a0:58:16:4c:40:3c:96:6f:99:8d:71:1a:9e:
                    f0:a3:a8:e4:72:b9:54:1b:b8:38:ac:f2:fd:bf:d5:
                    88:ca:db:6f:e0:39:5f:93:60:07:a2:14:71:67:66:
                    bb:ad:ae:90:fe:42:0e:cb:3a:72:f7:78:46:e2:82:
                    e5:93:76:2d:9f:d2:ae:6c:ce:3a:a4:1b:e8:2d:be:
                    7d:f3:ed:de:64:3a:02:93:66:3b:ab:84:67:d3:de:
                    5d:32:67:8a:a3:e4:b2:e2:13:82:78:49:8a:ee:fe:
                    e9:40:31:c0:7d:09:2d:9f:81:9e:99:c7:8f:37:92:
                    e0:ec:be:d3:76:a9:da:ac:ef:a4:38:6f:e5:27:41:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:72:B3:0C:7D:EF:69:49:DA:25:63:BC:20:B8:CD:E8:50:56:CD
            X509v3 Authority Key Identifier:
                keyid:2E:BE:CF:ED:7C:AB:D8:11:E5:DE:DA:FA:73:9F:DB:2C:F0:EE:C1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EBECFED7CABD811E5DEDAFA739FDB2CF0EEC12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627E99CAEC297092C2385E68F5CEFFBBC5FBAFFC25DDE2489AC16FC0C6BA5CD/0/3139302e38392e32382e302f32342d3234203d3e20323639393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:dd:da:15:c4:be:48:cf:b7:81:b8:cd:2b:76:29:42:6b:
         c2:8b:64:be:07:7e:45:c2:63:9c:c6:f7:44:9b:d5:d7:fd:38:
         73:fe:22:25:b9:a9:31:96:c7:28:0f:57:bd:0c:a6:49:12:5a:
         ae:7d:22:ca:67:1d:44:69:23:3a:b1:c5:b1:55:ea:36:63:4e:
         ad:df:3a:3f:a2:da:bd:43:ab:0d:5e:98:5f:c9:27:4e:d2:4b:
         2f:41:47:08:6a:c3:51:52:aa:47:eb:07:6f:12:9c:5f:aa:46:
         7a:02:d8:c0:ce:64:e4:a8:e6:6a:61:c4:45:47:2d:80:d5:ca:
         64:d8:0f:68:95:ca:48:8c:f0:43:ad:07:5a:da:0a:ee:9a:90:
         2d:4c:1f:05:cf:12:ed:ec:1f:45:bd:da:42:2e:26:98:8b:f3:
         9d:9b:08:40:6e:2f:0a:b6:45:6e:07:1e:52:51:60:4f:7b:c8:
         9c:37:e5:fb:7c:62:ff:cd:43:cd:0d:88:92:ca:49:73:e7:f5:
         c9:47:f9:06:d3:3c:08:d8:1a:86:2e:d1:a4:cf:5c:45:09:50:
         b3:12:b1:5e:37:09:a6:71:b5:50:22:34:95:82:3f:66:58:81:
         69:4a:0e:db:52:86:73:4b:0b:07:76:c9:42:94:78:e4:7a:d6:
         0d:99:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:31:53 2026 by rpki-client