This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa
File:                     3139302e39302e33382e302f32342d3234203d3e20323639393836.roa (raw, json)
Hash identifier:          /LwbBDkFIqzqipnW8q+ZGCDc+/Px0NBz7lE3Dk2cm1s=
Subject key identifier:   7A:59:F2:92:95:3A:50:80:B8:76:19:1D:73:59:D1:7B:C0:E8:04:F6
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       410522BCCBD34AB13531172F46C682BDC1C5E520
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa
Signing time:             Tue 06 Jan 2026 19:13:36 +0000
ROA not before:           Tue 06 Jan 2026 19:08:36 +0000
ROA not after:            Tue 05 Jan 2027 19:13:36 +0000
asID:                     269986
IP address blocks:        190.90.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:22:bc:cb:d3:4a:b1:35:31:17:2f:46:c6:82:bd:c1:c5:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:36 2026 GMT
            Not After : Jan  5 19:13:36 2027 GMT
        Subject: CN=7A59F292953A5080B876191D7359D17BC0E804F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:59:a3:0d:ef:e2:7e:78:a1:41:d7:34:9c:
                    10:0a:b9:3a:7b:ae:d9:20:96:06:a9:f2:51:48:10:
                    10:9b:18:e2:4f:05:31:bc:4f:09:a9:7d:94:17:f8:
                    0d:eb:51:c9:13:33:c4:43:d9:4d:64:4e:08:36:2c:
                    67:96:2e:ec:30:04:2f:5f:3a:0e:e9:26:dc:19:09:
                    89:97:4f:3f:08:50:d0:19:cc:79:28:0b:b7:73:cc:
                    23:00:42:5e:57:f4:07:86:42:b2:1a:f8:ec:88:31:
                    0f:6a:be:a8:c3:21:b4:1f:8c:38:6b:97:dd:0e:33:
                    32:6a:7e:5d:2d:61:c9:fc:1d:7e:fb:77:f1:a5:ce:
                    89:f5:ea:16:fb:02:c4:1b:7e:81:ab:b9:59:2a:26:
                    11:33:88:73:45:95:cc:17:59:fa:ba:1e:7b:d5:83:
                    b1:8d:f8:a3:4b:a2:2e:16:c9:9c:28:ee:0d:4d:72:
                    ef:a8:cc:7c:80:49:b5:80:de:2b:1c:08:f8:b4:9a:
                    bc:c7:e8:b7:bb:b0:4b:64:7c:67:50:ae:4e:eb:33:
                    12:ac:3a:dc:bc:d8:01:52:03:bc:0c:be:0b:e1:47:
                    6d:9b:25:6f:1f:fc:96:83:20:bc:9c:84:e6:10:70:
                    d9:ed:fe:e2:51:83:c5:e9:16:ed:d2:5a:35:0c:a9:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:F2:92:95:3A:50:80:B8:76:19:1D:73:59:D1:7B:C0:E8:04:F6
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33382e302f32342d3234203d3e20323639393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:69:8a:21:68:77:33:59:2d:e7:96:79:36:44:80:94:72:
         71:21:41:c5:bb:64:0d:29:ec:d5:48:58:81:31:80:0c:a2:20:
         ca:ef:8d:f9:bd:3f:08:87:4e:ad:54:8b:1c:8c:23:03:98:77:
         fe:64:54:3a:57:3a:93:d9:0a:b3:1e:ac:d4:db:37:60:b4:25:
         d3:fa:6e:62:30:53:87:54:de:04:de:55:19:52:71:e7:8f:18:
         c4:26:ad:0b:e4:8b:c3:f0:4e:60:cf:21:81:df:48:c5:f1:fe:
         bc:6c:fa:fe:ca:7f:c7:e9:f3:a9:99:f2:e6:48:ad:bd:32:cc:
         55:95:99:6b:25:1f:72:47:ab:66:36:93:91:41:0f:2e:84:4b:
         5c:d8:c0:c3:5d:84:46:f6:78:23:3e:bb:4f:8a:9c:98:79:86:
         d4:7b:14:96:84:cf:b4:85:ba:f1:92:b6:16:aa:7d:da:a6:8a:
         82:43:75:cc:fd:b4:4c:f9:13:de:82:d5:39:34:a2:e2:e7:2e:
         6f:e0:de:29:f2:eb:0b:17:b1:f2:7c:6f:3e:2e:78:ef:5b:28:
         22:b6:f8:10:61:b9:18:3a:72:54:8b:79:6a:33:cd:ea:b4:2b:
         d9:d7:f8:61:b2:8c:44:de:64:70:ea:49:d2:9c:1c:d7:d6:2f:
         77:cd:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:30 2026 by rpki-client