This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e36342e302f31382d3232203d3e2036353335.roa
File:                     3139302e3230382e36342e302f31382d3232203d3e2036353335.roa (raw, json)
Hash identifier:          JRLc/RKTpXoN1lFvdzgwj8EubTaGtPPayN4Ezrs35bQ=
Subject key identifier:   3A:5A:90:44:FF:AE:58:58:EB:C9:FC:5E:A6:FF:5E:F0:9C:B6:F6:0A
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       03BB0C82D1D794AA9D2F8E961E6193C81A8C7370
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e36342e302f31382d3232203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:16 +0000
ROA not before:           Tue 06 Jan 2026 20:49:16 +0000
ROA not after:            Tue 05 Jan 2027 20:54:16 +0000
asID:                     6535
IP address blocks:        190.208.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bb:0c:82:d1:d7:94:aa:9d:2f:8e:96:1e:61:93:c8:1a:8c:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:16 2026 GMT
            Not After : Jan  5 20:54:16 2027 GMT
        Subject: CN=3A5A9044FFAE5858EBC9FC5EA6FF5EF09CB6F60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:28:6a:05:65:b6:e2:b9:0f:c0:b5:26:ae:
                    f9:ef:00:55:d6:6e:26:98:f1:68:0e:33:96:dc:94:
                    78:f7:75:3e:56:c1:66:f1:f6:dc:2d:78:8d:f1:8c:
                    5f:fe:b1:70:70:d8:bf:eb:44:80:c1:d5:43:b1:24:
                    45:37:0a:73:62:e9:88:a2:6a:3d:01:90:4e:93:ca:
                    bc:64:d3:21:cf:d2:74:e5:a2:bf:34:c3:fe:65:ff:
                    9f:e2:01:0d:55:ab:bb:98:53:68:68:e9:b0:12:02:
                    ab:37:71:f9:63:e2:45:c2:3d:52:12:ca:00:d3:36:
                    ef:c6:21:65:a9:a7:b1:99:c7:09:42:ad:86:e1:0c:
                    af:f4:39:ab:bb:60:8c:26:b7:3d:9e:27:e9:9b:3c:
                    60:71:f9:05:29:ee:0b:3e:9d:7f:59:a8:ea:8d:1f:
                    d4:ee:c2:14:ec:0e:1f:df:53:30:8d:60:5c:07:2b:
                    0b:75:12:ae:2b:d0:98:6f:ef:eb:85:b9:5e:8d:22:
                    fd:19:aa:49:22:06:a4:f9:2a:29:92:ae:ef:aa:4e:
                    b6:b8:47:c3:e4:43:0e:e4:d2:a7:b0:d1:a2:0d:d4:
                    59:d1:c7:02:ea:e9:c1:b6:ab:2f:97:5e:d3:f2:9f:
                    50:e9:ee:46:d8:c0:91:a7:25:39:95:65:cc:5d:06:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:90:44:FF:AE:58:58:EB:C9:FC:5E:A6:FF:5E:F0:9C:B6:F6:0A
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230382e36342e302f31382d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:82:04:c7:6b:df:bb:cb:bf:b9:81:5f:cc:bc:46:74:f8:
         4e:c3:6b:e2:6e:8e:4f:80:11:b4:0f:3b:c1:71:61:3f:a1:77:
         46:8a:e7:82:ee:bc:4b:16:79:d3:e3:b3:97:e0:94:18:c0:d7:
         8c:5e:f2:a4:51:e4:28:2b:0e:6b:42:de:ed:af:37:ba:b7:d5:
         d4:c6:8e:54:0b:1b:18:fc:75:63:9c:b9:34:30:24:bb:2a:7e:
         ef:c0:a6:4c:a9:14:76:63:11:33:c2:a3:63:51:f5:b6:9f:05:
         ef:69:c2:27:5b:eb:b1:6a:5e:9b:fa:c9:5c:cb:d4:ec:18:fd:
         6a:0a:db:28:31:8d:09:de:0c:d3:8f:be:d1:00:57:71:67:36:
         70:0f:eb:ea:0e:8d:95:f4:18:77:08:f7:bc:14:99:a4:54:bd:
         a9:12:ee:52:46:59:ca:66:64:91:9a:8c:38:d2:59:22:37:ba:
         2d:30:33:90:a1:9f:7e:3e:2e:93:b7:e7:e9:ed:a9:72:17:6c:
         70:dc:56:8d:7f:8c:74:7b:20:e9:f1:27:ca:05:a5:df:71:6f:
         1e:44:75:1b:20:f1:ff:dc:87:77:23:bf:db:d2:3f:7c:3c:95:
         e0:3e:f1:95:b1:ec:b6:1d:eb:db:7a:8d:30:ad:42:29:42:13:
         b6:34:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:14 2026 by rpki-client