This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa
File:                     3139302e39302e3234362e302f32332d3234203d3e203237383337.roa (raw, json)
Hash identifier:          MLhRD3SuI4vfkPWgMO0YaxQDhICsUGV/FDcFk79Y048=
Subject key identifier:   7F:04:E5:2E:74:71:F1:2D:83:C0:58:C1:0E:5D:50:A3:75:D5:D7:C3
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       57C6F03DFD358BF91601ABD02923FF6DE0C18B27
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa
Signing time:             Tue 06 Jan 2026 19:13:38 +0000
ROA not before:           Tue 06 Jan 2026 19:08:38 +0000
ROA not after:            Tue 05 Jan 2027 19:13:38 +0000
asID:                     27837
IP address blocks:        190.90.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c6:f0:3d:fd:35:8b:f9:16:01:ab:d0:29:23:ff:6d:e0:c1:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:38 2026 GMT
            Not After : Jan  5 19:13:38 2027 GMT
        Subject: CN=7F04E52E7471F12D83C058C10E5D50A375D5D7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:97:86:4a:92:95:27:e6:ac:53:e0:44:a5:
                    d5:64:ea:af:b5:f9:58:c0:9c:c6:4e:ac:22:48:3f:
                    51:71:36:f7:25:01:a1:a4:11:d8:7c:84:83:90:47:
                    e5:4e:72:01:0a:42:c2:6e:6e:a4:0d:23:40:f7:54:
                    d3:ba:57:9d:0f:4e:d3:fc:68:b0:cc:d9:a6:58:4a:
                    93:0f:97:e6:41:77:41:40:af:0b:9e:62:ef:1f:c5:
                    6d:45:dd:ed:06:3f:be:4d:19:b6:68:70:23:5b:c6:
                    63:dd:e2:c6:40:e8:18:a9:a7:93:88:76:66:d5:85:
                    6e:4e:43:50:ac:fe:bf:27:88:cc:61:59:0e:e5:e2:
                    8d:42:e6:42:cd:fa:57:36:38:84:8c:ab:a0:20:71:
                    41:bf:f4:74:48:bf:23:0e:49:5a:70:50:b9:49:dc:
                    70:87:00:8d:18:32:4f:c7:b3:d0:3f:c8:40:16:4b:
                    1f:58:60:c2:56:b1:18:03:f9:39:ea:98:7d:b0:52:
                    b4:cb:58:fa:d4:a3:50:ab:6a:be:49:51:4a:58:42:
                    6d:12:83:58:e1:52:ad:f5:de:0f:bf:a9:b8:15:3b:
                    3e:55:4a:a3:b8:be:23:9e:d6:f8:ae:e4:08:0a:76:
                    0c:b8:fb:48:88:36:21:30:03:d2:d6:84:53:26:2e:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:E5:2E:74:71:F1:2D:83:C0:58:C1:0E:5D:50:A3:75:D5:D7:C3
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3234362e302f32332d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:9a:2c:25:35:76:f1:6c:eb:af:0a:3d:93:c1:06:ff:ef:
         0b:29:d8:42:45:c8:20:29:3d:16:12:3b:bf:9d:b7:71:a8:33:
         99:04:1e:dc:24:b4:87:5e:cb:3c:45:96:fa:98:36:d2:a4:fc:
         ed:0c:36:b3:cd:b2:4a:49:9b:b6:a7:bd:59:89:e7:97:d6:2c:
         37:c6:5b:3a:26:8f:45:16:46:2c:00:5e:0c:3f:5b:7c:5d:0a:
         70:7d:56:3f:6e:a9:b6:cc:46:38:db:26:c8:f4:84:f1:35:a6:
         43:2f:ae:e4:e2:59:1f:59:c2:e1:ce:ce:57:d0:d5:c2:9c:44:
         7d:0a:66:16:99:8e:0e:a0:79:66:ce:47:f8:a8:08:82:be:f7:
         26:16:89:91:79:db:9a:41:63:d0:c0:57:6d:26:ed:fb:5a:2c:
         ee:81:cb:74:64:27:1b:c6:6b:14:fe:cb:bf:de:ea:69:f9:f6:
         18:ef:b0:ce:d3:2c:45:7d:48:70:0c:6b:17:61:39:59:a2:91:
         b2:25:c5:0f:96:ba:65:1d:90:33:9c:24:9d:8d:9b:2c:f3:9e:
         c3:93:01:2d:90:40:da:a7:bf:9a:81:4e:6d:28:52:9f:13:32:
         21:0e:30:23:f6:8c:9f:ea:a1:10:db:33:b6:df:bb:42:95:a5:
         67:fe:ab:51
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV8bwPf01i/kWAavQKSP/beDBiycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAxMDYxOTA4MzhaFw0yNzAxMDUxOTEzMzhaMDMxMTAvBgNV
BAMTKDdGMDRFNTJFNzQ3MUYxMkQ4M0MwNThDMTBFNUQ1MEEzNzVENUQ3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIpJeGSpKVJ+asU+BEpdVk6q+1
+VjAnMZOrCJIP1FxNvclAaGkEdh8hIOQR+VOcgEKQsJubqQNI0D3VNO6V50PTtP8
aLDM2aZYSpMPl+ZBd0FArwueYu8fxW1F3e0GP75NGbZocCNbxmPd4sZA6Bipp5OI
dmbVhW5OQ1Cs/r8niMxhWQ7l4o1C5kLN+lc2OISMq6AgcUG/9HRIvyMOSVpwULlJ
3HCHAI0YMk/Hs9A/yEAWSx9YYMJWsRgD+TnqmH2wUrTLWPrUo1Crar5JUUpYQm0S
g1jhUq313g+/qbgVOz5VSqO4viOe1viu5AgKdgy4+0iINiEwA9LWhFMmLtW1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfwTlLnRx8S2DwFjBDl1Qo3XV18MwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzIzNDM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM4MzMzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5a9jAN
BgkqhkiG9w0BAQsFAAOCAQEAiguaLCU1dvFs668KPZPBBv/vCynYQkXIICk9FhI7
v523cagzmQQe3CS0h17LPEWW+pg20qT87Qw2s82ySkmbtqe9WYnnl9YsN8ZbOiaP
RRZGLABeDD9bfF0KcH1WP26ptsxGONsmyPSE8TWmQy+u5OJZH1nC4c7OV9DVwpxE
fQpmFpmODqB5Zs5H+KgIgr73JhaJkXnbmkFj0MBXbSbt+1os7oHLdGQnG8ZrFP7L
v97qafn2GO+wztMsRX1IcAxrF2E5WaKRsiXFD5a6ZR2QM5wknY2bLPOew5MBLZBA
2qe/moFObShSnxMyIQ4wI/aMn+qhENsztt+7QpWlZ/6rUQ==
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:31 2026 by rpki-client