This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/3139302e3131332e33362e302f32322d3234203d3e20323731383833.roa
File:                     3139302e3131332e33362e302f32322d3234203d3e20323731383833.roa (raw, json)
Hash identifier:          9Jobj8NC74nHTcHtfn8Pzf97UWPsV20qK//lRrDjwbI=
Subject key identifier:   1B:12:2F:20:42:A5:31:5F:96:A6:55:76:74:B9:6A:BD:7C:5D:92:E9
Certificate issuer:       /CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
Certificate serial:       48863E7C293065ADA79419EDA2C3EBA1B3E12384
Authority key identifier: 18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/3139302e3131332e33362e302f32322d3234203d3e20323731383833.roa
Signing time:             Tue 06 Jan 2026 20:52:21 +0000
ROA not before:           Tue 06 Jan 2026 20:47:21 +0000
ROA not after:            Tue 05 Jan 2027 20:52:21 +0000
asID:                     271883
IP address blocks:        190.113.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:86:3e:7c:29:30:65:ad:a7:94:19:ed:a2:c3:eb:a1:b3:e1:23:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D025E888C932E35F9B22015B58FC7C9AFD50A5
        Validity
            Not Before: Jan  6 20:47:21 2026 GMT
            Not After : Jan  5 20:52:21 2027 GMT
        Subject: CN=1B122F2042A5315F96A6557674B96ABD7C5D92E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:c7:d2:05:28:d8:ff:60:b1:b3:82:f7:2a:
                    dc:d2:0f:ff:be:49:83:7e:d2:7d:54:c1:2c:22:19:
                    f9:99:48:4d:7c:4f:fd:af:47:c0:a7:4a:39:45:e1:
                    9b:12:3e:d6:c0:d8:6d:67:75:b2:f7:2b:99:70:15:
                    d1:22:3d:f4:fc:60:ff:35:8a:cd:d0:30:e0:89:d1:
                    ff:33:3d:f8:38:65:a9:f7:d3:46:1d:0e:1d:6b:29:
                    75:db:0b:e5:a9:60:19:1d:92:e5:00:3f:cc:ac:c3:
                    77:46:69:6d:7b:a8:61:25:71:bc:88:ca:e3:75:fa:
                    d0:8f:3e:1e:dc:ee:cb:fa:0c:ce:5f:53:e1:66:de:
                    e2:11:e5:b2:6e:ca:4b:54:34:fd:9d:d7:c4:7c:79:
                    cf:95:47:cd:7a:64:3a:66:39:36:23:8a:72:77:b2:
                    17:31:78:d5:42:d6:28:e7:9a:fa:cc:b4:49:01:3c:
                    d3:8b:db:3e:5b:d5:c8:ed:12:b6:16:91:c7:83:35:
                    ff:e6:13:37:aa:9a:af:b3:08:fd:a2:12:f2:46:ae:
                    f8:f1:83:34:ff:8a:b7:29:08:98:d9:55:03:e8:f5:
                    a4:76:7c:f7:fe:93:a0:c4:29:f1:49:df:e1:07:5c:
                    7b:2b:53:99:f4:34:e6:e3:50:bd:78:83:d1:2b:11:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:12:2F:20:42:A5:31:5F:96:A6:55:76:74:B9:6A:BD:7C:5D:92:E9
            X509v3 Authority Key Identifier:
                keyid:18:D0:25:E8:88:C9:32:E3:5F:9B:22:01:5B:58:FC:7C:9A:FD:50:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18D025E888C932E35F9B22015B58FC7C9AFD50A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/161544911E615BEC6414C0E613BE6E218E42C94FB4EF3A31B6F70B6000F89B05/0/3139302e3131332e33362e302f32322d3234203d3e20323731383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e0:5c:55:0e:66:ab:b3:2f:dd:15:23:c1:93:a1:54:56:95:
         d0:67:3b:b1:0e:81:74:31:93:fc:9c:85:07:2d:35:ed:f4:8c:
         9b:7c:d5:66:68:4f:d0:78:2d:dc:b5:69:c5:39:f6:b4:8f:03:
         f7:12:66:d7:e5:8f:b2:7b:7b:0a:5e:6e:65:e9:a2:ec:3c:fc:
         6b:fd:b9:63:47:14:7b:6d:53:85:7d:99:81:6d:ae:d1:b1:34:
         5d:79:64:0f:2f:13:2a:3f:7f:d9:c9:63:31:3a:d2:b7:c5:5c:
         e8:1f:09:2d:01:77:eb:1b:ff:3f:4a:85:ef:b3:e7:e8:5b:0d:
         79:a1:4d:aa:33:cd:06:4c:26:25:87:b6:e1:55:21:69:af:26:
         c1:c1:8d:9b:51:15:4d:1b:18:c4:48:38:10:94:2c:e3:bf:14:
         2a:91:81:ff:70:c5:6a:96:49:58:f4:20:10:07:8a:87:ff:e2:
         a4:5f:f1:0f:a3:40:6f:1b:53:7a:f1:f1:64:3e:54:f5:fa:49:
         b0:4d:c6:00:94:cd:76:5a:ab:56:ce:23:84:96:54:a7:58:cf:
         7a:40:ea:b7:d6:6c:e8:a3:88:37:91:45:9a:79:a7:03:8f:10:
         15:f8:4c:56:45:97:ac:ff:ff:c1:a8:fe:e4:85:03:41:cd:a4:
         63:5a:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:40:16 2026 by rpki-client