This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e302e302f31382d3234203d3e2036343239.roa
File:                     3139302e3230382e302e302f31382d3234203d3e2036343239.roa (raw, json)
Hash identifier:          kUU0qhPLsnuhC8rYt3IA0ORo2Er/K+AaZxCveorDAtE=
Subject key identifier:   2E:BD:73:48:EC:E7:6C:5E:F2:14:48:BB:EE:A4:77:D5:A8:06:2C:2F
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       3A32B0906774CB59CFCBA26B8CE0C8571EDF5060
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e302e302f31382d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:12 +0000
ROA not before:           Tue 06 Jan 2026 20:49:12 +0000
ROA not after:            Tue 05 Jan 2027 20:54:12 +0000
asID:                     6429
IP address blocks:        190.208.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:32:b0:90:67:74:cb:59:cf:cb:a2:6b:8c:e0:c8:57:1e:df:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:12 2026 GMT
            Not After : Jan  5 20:54:12 2027 GMT
        Subject: CN=2EBD7348ECE76C5EF21448BBEEA477D5A8062C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:11:42:a0:60:85:ec:26:7c:e7:db:b5:13:
                    7c:09:2c:87:45:d7:88:62:a1:45:e3:91:3a:bf:ba:
                    de:43:b7:4e:63:e1:0f:52:eb:3c:fa:44:5f:f5:21:
                    cf:a8:ae:ea:9c:53:c8:2e:ee:2d:b8:3a:b0:0b:63:
                    96:f5:10:8e:cb:79:4b:98:f5:ad:80:0d:bd:aa:5a:
                    82:90:bc:67:70:9c:c6:be:99:73:48:e2:b8:bf:1d:
                    23:e8:aa:35:da:3b:2a:f0:67:e4:23:d0:de:b1:8d:
                    43:f0:a7:4d:ae:df:e6:98:34:9d:03:bc:11:aa:11:
                    3f:ca:5b:78:2d:ea:c6:d9:22:21:2f:f7:52:f9:c1:
                    e5:99:2d:32:34:28:4f:aa:5a:56:c5:25:04:8b:4d:
                    ad:ac:26:8d:21:90:a8:32:d1:b5:93:61:24:d6:71:
                    d1:ac:79:bd:ce:8b:07:94:81:13:eb:99:fa:6e:16:
                    21:df:94:55:36:35:d6:3d:ca:a1:d5:0e:be:03:e1:
                    a5:1a:b1:62:03:cb:27:31:2a:6a:ff:e9:7b:4f:e7:
                    ba:74:cb:02:42:55:1d:72:91:c1:3b:ac:7f:af:6f:
                    61:3f:25:91:e8:9b:7a:72:03:56:7a:4b:df:a2:ba:
                    f3:62:46:39:36:c7:23:b0:57:69:de:cc:c2:fc:3a:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BD:73:48:EC:E7:6C:5E:F2:14:48:BB:EE:A4:77:D5:A8:06:2C:2F
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e302e302f31382d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.208.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:e7:45:9c:a6:f7:a7:2b:85:29:2b:6a:49:7a:c7:ff:5b:
         87:70:75:6c:c6:f1:11:eb:16:cc:8d:a3:7a:1b:5e:25:94:f1:
         7f:02:5a:c7:bc:9f:9f:b6:86:4d:5b:f6:3e:7d:e1:3b:11:70:
         ae:0a:e7:82:d5:40:f9:66:1d:1e:95:ec:8a:a3:ab:13:25:f1:
         d8:b3:a8:f2:b4:59:90:c8:1f:54:bd:52:86:0c:cd:7c:b1:27:
         2c:26:87:5c:9b:1d:d7:25:bf:6e:25:a2:66:97:9d:8a:1f:6e:
         52:5c:d5:5c:d4:17:11:c2:13:50:9c:33:f9:e7:b3:df:d5:4f:
         19:01:94:9c:5f:d3:5c:b1:d3:9d:0c:1c:9b:81:1e:f2:5f:d1:
         ec:ac:70:e5:64:81:fd:3a:db:fa:0e:b6:f8:a6:ed:7b:b7:80:
         0b:b1:dc:04:55:a6:28:4e:dc:b4:0d:a3:93:41:b1:64:f1:86:
         c1:67:68:ff:50:94:a2:55:8c:87:fe:90:9f:74:01:f6:8b:44:
         21:e0:58:47:a5:b1:f7:6a:a7:fd:d7:4b:12:ec:fd:b8:e4:c2:
         fb:60:94:ac:40:ed:ab:8d:65:cf:44:5a:79:7c:87:d0:0a:a6:
         0d:be:df:b8:d7:88:da:b2:dd:28:ac:e0:d6:be:ab:49:05:a5:
         e6:27:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:33:34 2026 by rpki-client