This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa
File:                     3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          f2McRhZ9bTNd64yF8buKJqBjQaTJH12dcxhuI+KtTzM=
Subject key identifier:   6A:BF:5C:26:38:3C:87:46:B5:5A:2D:55:FF:15:FD:A2:D7:F5:82:B1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       2F7F2EFEC0B8D5D07FF1CB904010CEC929E4F5EC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa
Signing time:             Tue 06 Jan 2026 19:13:37 +0000
ROA not before:           Tue 06 Jan 2026 19:08:37 +0000
ROA not after:            Tue 05 Jan 2027 19:13:37 +0000
asID:                     264646
IP address blocks:        190.90.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7f:2e:fe:c0:b8:d5:d0:7f:f1:cb:90:40:10:ce:c9:29:e4:f5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:37 2026 GMT
            Not After : Jan  5 19:13:37 2027 GMT
        Subject: CN=6ABF5C26383C8746B55A2D55FF15FDA2D7F582B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:e8:94:ea:d5:fc:ac:56:8e:c4:f1:35:50:
                    60:32:94:c2:da:6a:3e:84:91:55:ce:b7:74:cd:a2:
                    bb:07:20:1c:08:a7:9e:d7:c4:18:7a:47:41:07:92:
                    c0:cc:21:86:9d:b6:22:c4:4a:79:67:db:e0:15:b9:
                    be:5a:c8:f1:8a:53:15:b4:11:cf:b7:51:fd:0f:21:
                    7f:0a:56:3e:38:1c:c5:cd:55:0c:81:8f:58:18:24:
                    1c:48:ce:b5:62:20:f9:51:bf:a6:62:6e:0a:3b:21:
                    5e:a3:90:ff:26:97:4a:22:da:f5:1f:ee:21:cd:e4:
                    51:fc:46:4a:6d:75:8c:e4:56:c0:c1:87:fb:c8:9e:
                    1d:55:b5:fc:19:7f:d3:55:47:bd:40:77:db:5a:84:
                    e1:1f:3e:18:b3:93:a1:e0:ae:49:9d:95:68:91:57:
                    14:d3:d5:34:58:cd:d1:5e:1e:73:ac:54:96:c5:fa:
                    4e:0a:68:94:4d:c2:66:98:8d:b1:66:f3:d7:c3:4a:
                    34:fe:cd:c5:05:72:e4:b0:a4:05:92:d6:24:50:45:
                    09:4b:b8:62:de:56:84:c7:3e:63:10:8c:04:ce:df:
                    8c:dc:e2:52:88:de:74:31:5b:92:3e:2e:50:56:99:
                    7f:a6:8c:22:2b:c2:9e:3e:10:71:c4:83:42:ea:c9:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:5C:26:38:3C:87:46:B5:5A:2D:55:FF:15:FD:A2:D7:F5:82:B1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3232342e302f32342d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:70:a6:42:4a:74:d1:c9:2b:3a:9c:55:56:ce:f2:ff:23:c4:
         bb:ec:7d:6a:df:a6:b5:0a:7e:db:e9:33:c8:2e:84:68:ec:3f:
         44:87:af:bb:31:2e:c1:2c:7d:19:9e:2e:04:d6:11:58:fa:aa:
         98:a0:f2:3f:35:26:c1:8b:cd:ba:8b:c1:07:51:67:71:46:7d:
         f7:97:78:e0:0d:13:d3:30:43:4c:6b:2c:a5:3c:de:36:19:b1:
         b0:e4:0f:6d:91:93:51:c6:51:0c:a8:ec:86:c7:e3:37:9a:01:
         8e:ef:8f:d2:15:1e:f9:14:cf:63:4a:cf:fb:9e:33:5a:2e:1e:
         9d:a8:7a:b1:6c:d6:cc:f3:ae:b1:08:c6:67:d2:f9:c4:ef:63:
         c6:44:32:51:d5:38:d1:b4:7b:b6:80:29:a7:69:4e:60:ef:3e:
         87:5b:b6:53:3c:a3:d9:bc:67:58:90:f3:78:50:81:3a:ee:f6:
         88:f7:b5:07:46:6d:3e:58:05:f6:87:a4:67:08:37:28:c6:19:
         64:3a:e4:fd:2b:00:c9:65:5a:30:83:ea:e2:25:36:d7:8e:be:
         91:12:86:0d:c2:c9:d0:03:83:7d:b6:d1:6d:4c:dd:1c:ab:32:
         d5:eb:08:5a:35:9c:ef:45:4b:6d:3f:20:9b:8b:11:5c:81:93:
         fa:b9:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:12:53 2026 by rpki-client