This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa
File:                     3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa (raw, json)
Hash identifier:          l1GzhilIKbpjtaZSjcbCH/vFFMq0GMFwXBhb0wJbZo0=
Subject key identifier:   3D:C6:32:4B:77:0F:4C:44:BC:F2:4F:A4:D3:5A:7E:44:47:AA:8E:7C
Certificate issuer:       /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
Certificate serial:       2FEBC6B31B0C34A28282CF258972D54F32862876
Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa
Signing time:             Tue 06 Jan 2026 19:15:22 +0000
ROA not before:           Tue 06 Jan 2026 19:10:22 +0000
ROA not after:            Tue 05 Jan 2027 19:15:22 +0000
asID:                     270060
IP address blocks:        190.103.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:c6:b3:1b:0c:34:a2:82:82:cf:25:89:72:d5:4f:32:86:28:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35
        Validity
            Not Before: Jan  6 19:10:22 2026 GMT
            Not After : Jan  5 19:15:22 2027 GMT
        Subject: CN=3DC6324B770F4C44BCF24FA4D35A7E4447AA8E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:5b:b8:24:71:9a:49:0f:65:6f:16:5a:05:
                    b9:f2:84:94:a2:62:ef:a0:01:85:29:e1:5c:c2:9f:
                    2b:5b:eb:c7:92:95:10:1b:be:f5:2a:ed:06:85:db:
                    d5:ed:63:ad:04:ba:30:05:13:f8:93:ab:a7:56:7f:
                    57:0e:91:39:df:1e:90:01:40:d3:77:ef:b9:c1:13:
                    a2:bd:d2:a6:c8:8e:60:59:ea:5d:aa:ce:c3:2a:8b:
                    bd:1b:00:32:24:65:fc:57:7e:e5:26:7c:08:52:72:
                    b8:22:c0:61:47:5a:75:db:f5:7c:ae:1a:a8:57:13:
                    69:2a:82:0d:09:db:ac:73:25:b2:02:77:52:9d:52:
                    69:6a:a6:ab:15:12:b1:92:b3:19:0c:4c:44:82:fd:
                    d5:0d:07:95:e5:c8:d6:1c:3e:a9:7b:d5:4f:1d:97:
                    b9:fc:9f:ac:b8:b8:6d:e3:7f:26:3f:ce:8f:3b:4d:
                    b0:1f:6e:6c:6c:73:5c:ea:ec:ef:1e:cd:b0:90:34:
                    ec:af:6f:42:21:68:ea:4a:43:8a:77:f4:e4:dc:32:
                    77:41:6a:ce:e4:e3:0a:5e:c2:47:9f:71:2a:00:e1:
                    03:a9:0c:69:f8:9d:f6:66:52:57:88:35:de:c5:7f:
                    de:e1:f7:5c:2d:18:f6:f6:54:4f:88:ad:d4:47:9d:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:32:4B:77:0F:4C:44:BC:F2:4F:A4:D3:5A:7E:44:47:AA:8E:7C
            X509v3 Authority Key Identifier:
                keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:e6:32:0c:ca:6a:ef:e0:74:f3:87:5e:e2:df:99:6f:71:4e:
         c9:21:7e:27:32:1b:e7:6a:5c:7c:80:76:00:29:ea:44:98:60:
         e7:f7:45:0e:f5:e3:90:7d:22:df:5e:4f:19:fb:ca:bd:81:ec:
         7c:69:cc:38:6e:da:18:32:02:75:d8:a5:bf:7e:b8:8b:ae:96:
         45:6a:7e:24:a3:65:ac:c1:10:42:82:97:45:2f:bf:8b:dd:36:
         db:de:4a:69:74:04:1a:b6:6e:2f:48:3d:fe:a4:e1:db:96:65:
         f3:75:e0:c8:a0:5e:f9:8b:ed:47:dd:3a:2d:d9:a0:29:01:47:
         53:1d:ec:bf:fe:f5:ad:04:56:93:87:f1:0a:24:d3:28:7e:6e:
         b1:19:25:b8:37:c9:c4:f1:67:f8:3a:d0:34:01:cd:22:33:a5:
         6d:c4:25:81:88:0b:7c:52:9a:ce:91:c2:10:52:c7:23:a2:ad:
         6d:72:df:eb:03:40:ca:be:e6:3f:be:5e:08:26:7b:ef:73:74:
         cb:07:41:28:35:7c:fc:1c:04:10:79:4a:17:9f:ac:42:11:1b:
         19:9b:1c:ff:6d:a1:9f:6f:29:c1:18:95:08:4b:67:34:57:5d:
         3d:06:77:13:e8:99:18:4b:cf:22:9b:c6:30:c5:4a:1c:c7:dd:
         4e:a1:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:19 2026 by rpki-client