This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3137392e302f32342d3234203d3e20323633323338.roa
File:                     3139302e392e3137392e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          Iv0fE7sxjcyC/5lHdZFSALEHJ/WEL2P1ysI1nsRE4oQ=
Subject key identifier:   65:BB:F6:F1:CC:5E:2B:EF:2A:5B:79:D0:96:BE:33:70:2E:B6:06:E5
Certificate issuer:       /CN=D2709F777988D8BB9C29DBBB53968812568C616E
Certificate serial:       21812E72C20F98BF073AF897F5D3871EC4BE67AE
Authority key identifier: D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3137392e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 06 Jan 2026 19:27:44 +0000
ROA not before:           Tue 06 Jan 2026 19:22:44 +0000
ROA not after:            Tue 05 Jan 2027 19:27:44 +0000
asID:                     263238
IP address blocks:        190.9.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:2e:72:c2:0f:98:bf:07:3a:f8:97:f5:d3:87:1e:c4:be:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2709F777988D8BB9C29DBBB53968812568C616E
        Validity
            Not Before: Jan  6 19:22:44 2026 GMT
            Not After : Jan  5 19:27:44 2027 GMT
        Subject: CN=65BBF6F1CC5E2BEF2A5B79D096BE33702EB606E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:57:56:9a:60:30:2b:af:2c:62:d6:61:84:
                    a4:e1:4d:1b:1b:08:4f:c9:f0:41:bd:35:7f:ed:78:
                    15:5d:04:c2:27:2c:b7:72:c4:aa:8e:c4:05:64:4f:
                    dc:f7:9a:2c:fc:c1:09:fd:9b:c7:40:47:2d:76:a2:
                    06:8a:94:a3:40:a3:76:9a:0d:fb:5c:7a:39:af:f1:
                    f1:8d:76:5d:bb:08:ba:e2:6a:08:3c:a9:86:9b:58:
                    bc:80:29:c6:97:0a:22:af:e0:65:22:21:4c:4c:9d:
                    70:25:ce:1a:4b:88:56:b3:8b:33:00:8d:37:15:99:
                    77:a4:2d:96:07:53:49:fb:55:92:03:39:8e:dd:a0:
                    47:d4:02:5b:78:7d:2c:2c:da:3d:dd:91:94:c7:e6:
                    09:e9:e2:0b:22:c3:02:e5:1a:91:a7:7d:71:a7:17:
                    04:63:3f:41:ac:dc:78:7f:9c:91:a5:bb:c4:fd:d7:
                    61:ee:0e:43:c7:63:d4:bc:c8:86:31:02:7e:41:e6:
                    59:1a:b5:64:5c:cb:53:eb:1d:8b:09:f1:50:d5:00:
                    47:03:2a:7c:65:a0:53:3d:2b:b5:0a:b3:47:bb:9d:
                    70:f6:c0:19:a0:fa:b3:32:b7:02:23:2c:e4:80:dd:
                    c2:e5:0b:81:c1:28:d5:ff:d7:29:82:49:74:9e:ca:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:F6:F1:CC:5E:2B:EF:2A:5B:79:D0:96:BE:33:70:2E:B6:06:E5
            X509v3 Authority Key Identifier:
                keyid:D2:70:9F:77:79:88:D8:BB:9C:29:DB:BB:53:96:88:12:56:8C:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/D2709F777988D8BB9C29DBBB53968812568C616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2709F777988D8BB9C29DBBB53968812568C616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBDA3CBE3F94B19EDF009953C0F455D7053B060883FF74AB3FFCA12818F0932/0/3139302e392e3137392e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:cb:71:6b:32:6e:f3:e1:49:2e:6e:52:ba:2d:fa:cc:a6:94:
         dc:3c:64:e3:0a:24:68:cc:ce:1a:df:8a:a2:e8:70:1d:ee:58:
         dc:c5:c4:dd:61:15:a6:b8:e3:cc:49:00:bb:ee:ea:23:69:b0:
         c9:44:6e:0d:b4:42:d1:e2:07:36:5d:b6:68:b5:aa:7a:11:b9:
         52:f1:8c:17:7d:29:33:f9:5c:0d:f5:0a:16:ad:fa:7a:6f:51:
         5a:f5:57:f2:a4:8b:cf:f4:77:19:0a:38:a3:cb:79:2f:b4:70:
         fc:c3:2f:48:9f:7e:91:58:77:1d:0b:ad:74:31:be:e5:0f:8d:
         e0:95:d2:82:7f:8c:73:1f:f8:16:a6:64:3d:39:b4:3d:c8:db:
         42:7b:a8:d1:91:db:f0:e4:05:28:71:74:bd:64:5b:8d:70:35:
         7e:af:48:a9:71:8e:16:47:87:8f:6f:9a:10:01:2f:33:74:75:
         4b:15:2d:75:d2:2f:22:70:f0:13:8e:b6:7f:57:90:a6:9a:c4:
         65:2a:3f:c3:cf:35:c2:61:85:b9:79:10:ed:77:40:49:ea:cd:
         df:4e:c9:64:c6:1e:55:34:59:5e:73:61:2d:67:39:c2:52:13:
         cb:1a:81:c7:e8:38:a8:81:ae:fa:ea:9c:6e:ae:9a:d6:72:2a:
         36:3e:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:49:47 2026 by rpki-client