This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa
File:                     3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa (raw, json)
Hash identifier:          Qvx+h2SJdJRR+waIdiJdqYqBrknwaMML2Mx7n/Yy90E=
Subject key identifier:   16:6E:1D:1E:A7:E9:01:2F:A1:E9:29:77:4E:4E:50:D7:7A:F3:23:5E
Certificate issuer:       /CN=4919DADC9655A6AC651084EE7AED896819F08F76
Certificate serial:       1902B796E63827C3D758C98C4D366082C93ED59F
Authority key identifier: 49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa
Signing time:             Tue 06 Jan 2026 19:37:52 +0000
ROA not before:           Tue 06 Jan 2026 19:32:52 +0000
ROA not after:            Tue 05 Jan 2027 19:37:52 +0000
asID:                     265751
IP address blocks:        190.108.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:02:b7:96:e6:38:27:c3:d7:58:c9:8c:4d:36:60:82:c9:3e:d5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4919DADC9655A6AC651084EE7AED896819F08F76
        Validity
            Not Before: Jan  6 19:32:52 2026 GMT
            Not After : Jan  5 19:37:52 2027 GMT
        Subject: CN=166E1D1EA7E9012FA1E929774E4E50D77AF3235E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:aa:df:db:c6:15:ef:bc:f7:a5:44:72:18:
                    da:d3:d8:e3:6b:16:e4:b7:f0:ac:c7:8f:a4:fc:18:
                    0b:d2:d7:cd:ee:55:b5:74:b4:cd:ac:c8:56:6a:e6:
                    90:d7:73:07:2c:34:88:cc:62:2a:86:24:e4:0b:4d:
                    79:0e:59:f7:04:59:08:36:27:df:34:09:c1:0d:65:
                    d7:d0:b7:08:40:ad:f3:97:fb:5a:44:10:ba:6b:1c:
                    c1:33:b3:9c:3d:00:5e:cf:b3:ff:ec:5d:cf:36:1d:
                    0c:1c:d0:97:21:fa:62:fe:3e:ed:ac:93:13:c5:b5:
                    4b:39:24:7f:ff:26:fc:cf:d3:f2:9a:48:b4:ab:50:
                    1e:35:c4:f4:c9:3e:66:2f:dd:7c:33:39:a0:61:17:
                    0f:7f:a9:57:df:39:82:fc:fc:d8:f9:ee:96:2b:11:
                    1c:0c:5d:d4:ef:a5:2a:a1:70:76:f0:f8:50:c0:4d:
                    da:28:56:e1:a7:da:68:0a:ce:7f:23:a3:56:5f:d8:
                    0a:58:1e:d0:20:62:61:76:38:d0:b1:88:db:e0:44:
                    39:ea:b3:c3:cf:c0:c2:7f:a5:88:42:52:c8:4a:bc:
                    51:a7:d4:f3:c6:0b:26:76:9b:5b:32:90:04:ca:d6:
                    51:d0:dd:0e:b2:93:25:11:0f:01:d0:1a:fd:44:91:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:1D:1E:A7:E9:01:2F:A1:E9:29:77:4E:4E:50:D7:7A:F3:23:5E
            X509v3 Authority Key Identifier:
                keyid:49:19:DA:DC:96:55:A6:AC:65:10:84:EE:7A:ED:89:68:19:F0:8F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/4919DADC9655A6AC651084EE7AED896819F08F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4919DADC9655A6AC651084EE7AED896819F08F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20717899984AA7235696D2B43E9F059033E4B3FFC95B931F5B710B914ADA62EB/0/3139302e3130382e3231362e302f32322d3234203d3e20323635373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:2c:e1:bb:09:28:5e:85:0a:c3:86:26:50:d4:d2:a6:97:
         70:e7:29:77:19:eb:21:98:80:c3:3e:76:cd:62:ca:d8:b7:b2:
         fd:ee:b1:a0:63:10:4f:2f:f8:6c:51:21:0e:ce:dd:51:48:39:
         31:f2:bd:3e:86:ff:6a:aa:3e:c4:fc:74:4f:e5:59:7a:18:42:
         45:f1:4e:a3:a6:36:55:2b:4d:05:8f:e6:c2:07:b1:0d:21:50:
         59:93:f7:72:c0:9d:be:f6:d8:7e:65:54:d8:2f:72:d7:ff:95:
         9a:97:fe:bf:8c:5f:24:a5:21:0f:43:c0:e1:ec:cb:9c:07:62:
         66:b6:de:69:5d:4e:27:a3:04:81:65:8b:5b:df:70:b2:89:df:
         04:ec:87:15:b8:ec:24:83:34:98:2c:8a:4f:09:9a:d5:96:d3:
         1e:0d:85:19:4d:eb:b6:6c:2a:e3:67:d0:79:66:93:a8:32:1d:
         3e:17:cc:83:21:c7:5a:05:d1:92:9f:14:64:52:ca:32:12:ef:
         dd:36:e6:83:81:00:78:e4:bc:d9:81:83:4d:ac:15:6c:80:49:
         fe:21:bb:96:7e:2d:f2:c4:5e:65:08:72:18:fb:63:bb:fe:f9:
         d8:d8:cc:d0:31:fd:49:0c:ac:f8:62:55:26:cb:e9:88:7f:81:
         e7:24:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:33:37 2026 by rpki-client