This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa
File:                     3136382e39302e3135362e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          kFSqWltcS351nvdYbh24k20wpUc7ocexGp/iTGW6dSM=
Subject key identifier:   D1:65:66:ED:4E:70:FA:5F:F7:CB:D1:81:10:F9:B4:B9:E1:F4:75:49
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       7E162EA48323EC590A3C478DEFB9F2AEFC99F8F2
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 06 Jan 2026 19:40:57 +0000
ROA not before:           Tue 06 Jan 2026 19:35:57 +0000
ROA not after:            Tue 05 Jan 2027 19:40:57 +0000
asID:                     52439
IP address blocks:        168.90.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 23:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:16:2e:a4:83:23:ec:59:0a:3c:47:8d:ef:b9:f2:ae:fc:99:f8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Jan  6 19:35:57 2026 GMT
            Not After : Jan  5 19:40:57 2027 GMT
        Subject: CN=D16566ED4E70FA5FF7CBD18110F9B4B9E1F47549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:46:aa:e4:78:96:10:fd:76:2b:d0:2a:4a:
                    b9:4e:37:c2:4f:88:47:5f:e6:c5:a2:5e:17:e2:23:
                    c3:90:da:a7:a5:bb:e6:ad:f8:56:0d:cf:83:4f:1c:
                    ee:f5:33:58:46:95:d2:27:69:f0:84:51:b4:a3:ea:
                    fc:9d:7e:ca:89:b2:a9:d2:e9:60:88:af:50:b5:4f:
                    e2:11:45:6d:cf:24:20:7d:2c:27:e5:b8:39:14:84:
                    7d:73:05:4d:1c:c4:0a:74:3e:f2:00:bc:f3:7e:2e:
                    65:97:7c:c0:80:1c:55:d0:48:90:28:0a:ea:68:7d:
                    d0:ed:3b:d8:36:99:25:a4:37:47:00:ee:29:f9:fa:
                    a2:db:4c:8d:61:f8:7f:ac:23:f6:87:9a:2f:bb:ba:
                    7e:b2:59:22:5a:56:a3:19:b7:a5:40:9e:0c:9e:b3:
                    69:8d:16:c2:bb:21:ba:4b:8c:42:e0:fa:d7:b3:9c:
                    cd:c3:e4:f2:d0:82:28:d2:4e:8a:db:a6:20:0a:55:
                    58:34:92:cc:33:cd:c3:f6:de:22:b2:2a:62:f3:df:
                    04:14:71:5b:66:a9:bf:a5:04:46:fc:e9:1b:fa:38:
                    72:8d:50:f4:be:89:2f:d8:ad:c9:e2:26:b2:37:13:
                    0a:d8:47:d2:51:cc:43:1a:43:55:6d:56:e9:13:52:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:66:ED:4E:70:FA:5F:F7:CB:D1:81:10:F9:B4:B9:E1:F4:75:49
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:af:c8:83:a6:01:7c:c2:6d:a9:ba:fc:bf:7b:f7:de:1c:
         ce:cd:cc:18:3e:94:ae:12:9d:9f:52:13:7a:e9:4e:fd:e0:4b:
         dc:a2:d5:e3:81:00:5a:34:2b:55:51:cb:fd:06:c9:15:ea:e9:
         25:6b:d9:40:aa:85:e8:41:f6:70:7b:62:8c:41:1e:46:76:64:
         d5:0d:28:e3:d1:e1:7c:fa:cb:3f:d2:f3:22:79:c8:c2:19:9c:
         65:c1:63:d4:a0:31:af:2a:dd:b0:9a:8f:3f:7e:9c:da:87:15:
         9c:03:e0:8e:40:f0:5c:ab:a6:68:94:13:c9:29:40:d0:ba:1c:
         4a:4c:cd:65:95:14:7e:80:18:e9:d5:36:bd:0f:73:c0:6f:33:
         67:b9:9f:6c:7b:d5:6f:5e:f1:3c:42:cf:6e:bb:7c:f9:42:ff:
         0c:9b:27:3b:4f:a2:bd:a7:6a:46:e3:0e:05:63:ab:6f:d1:cc:
         63:de:01:b1:d4:de:c1:a2:ef:1c:85:b2:c9:a9:c8:44:42:9b:
         c8:00:30:40:32:5e:dd:c5:d5:dc:60:af:79:e1:65:eb:e0:69:
         c7:e9:d5:d4:ae:b1:eb:47:43:65:69:4c:ac:49:70:ba:78:e0:
         ed:1b:39:a4:4e:7d:ae:74:96:30:48:77:4b:f2:48:dc:8f:51:
         46:2f:f8:00
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfhYupIMj7FkKPEeN77nyrvyZ+PIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBREE4NDc5NDdGRkNBQUYyOUMyRTQxRjJERUYyM0ZF
ODJCOTRERDAeFw0yNjAxMDYxOTM1NTdaFw0yNzAxMDUxOTQwNTdaMDMxMTAvBgNV
BAMTKEQxNjU2NkVENEU3MEZBNUZGN0NCRDE4MTEwRjlCNEI5RTFGNDc1NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnkaq5HiWEP12K9AqSrlON8JP
iEdf5sWiXhfiI8OQ2qelu+at+FYNz4NPHO71M1hGldInafCEUbSj6vydfsqJsqnS
6WCIr1C1T+IRRW3PJCB9LCfluDkUhH1zBU0cxAp0PvIAvPN+LmWXfMCAHFXQSJAo
CupofdDtO9g2mSWkN0cA7in5+qLbTI1h+H+sI/aHmi+7un6yWSJaVqMZt6VAngye
s2mNFsK7IbpLjELg+teznM3D5PLQgijSTorbpiAKVVg0kswzzcP23iKyKmLz3wQU
cVtmqb+lBEb86Rv6OHKNUPS+iS/YrcniJrI3EwrYR9JRzEMaQ1VtVukTUvD7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0WVm7U5w+l/3y9GBEPm0ueH0dUkwHwYDVR0j
BBgwFoAUpa2oR5R//KrynC5B8t7yP+grlN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTE3MDgwQkYzNDE3MTFCMjdCRTYyN0Q0NjlCQzNGRUM0
QzVERDY2NTg4MjIyRjVFNTU1ODA4M0I2N0EzNkM4LzAvQTVBREE4NDc5NDdGRkNB
QUYyOUMyRTQxRjJERUYyM0ZFODJCOTRERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUFEQTg0Nzk0N0ZGQ0FBRjI5
QzJFNDFGMkRFRjIzRkU4MkI5NERELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUxNzA4MEJGMzQxNzExQjI3QkU2MjdENDY5QkMzRkVDNEM1REQ2NjU4
ODIyMkY1RTU1NTgwODNCNjdBMzZDOC8wLzMxMzYzODJlMzkzMDJlMzEzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzMzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqhanDAN
BgkqhkiG9w0BAQsFAAOCAQEAJ/uvyIOmAXzCbam6/L97994czs3MGD6UrhKdn1IT
eulO/eBL3KLV44EAWjQrVVHL/QbJFerpJWvZQKqF6EH2cHtijEEeRnZk1Q0o49Hh
fPrLP9LzInnIwhmcZcFj1KAxryrdsJqPP36c2ocVnAPgjkDwXKumaJQTySlA0Loc
SkzNZZUUfoAY6dU2vQ9zwG8zZ7mfbHvVb17xPELPbrt8+UL/DJsnO0+ivadqRuMO
BWOrb9HMY94BsdTewaLvHIWyyanIREKbyAAwQDJe3cXV3GCveeFl6+Bpx+nV1K6x
60dDZWlMrElwunjg7Rs5pE59rnSWMEh3S/JI3I9RRi/4AA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 07:53:47 2026 by rpki-client