This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
File:                     3139302e39372e36342e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier:          oTSl8xrRxrcjv+cQHyWc7m+Z34gmnaq0IBbMD/uajSw=
Subject key identifier:   00:CF:F4:2B:5B:62:86:33:06:44:39:76:AC:7D:F3:5C:E0:C3:1A:3B
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       25394F2623093412C86257FEB946BAE2F8CB671C
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:10 +0000
ROA not before:           Tue 06 Jan 2026 19:39:10 +0000
ROA not after:            Tue 05 Jan 2027 19:44:10 +0000
asID:                     27845
IP address blocks:        190.97.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 00:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:39:4f:26:23:09:34:12:c8:62:57:fe:b9:46:ba:e2:f8:cb:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:10 2026 GMT
            Not After : Jan  5 19:44:10 2027 GMT
        Subject: CN=00CFF42B5B62863306443976AC7DF35CE0C31A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:0c:44:7d:e4:d6:b7:f9:47:79:fc:48:90:
                    95:13:ff:4b:f2:84:a2:9c:c1:97:09:ba:78:61:4b:
                    da:8f:f8:78:67:60:f5:6d:4f:5c:3e:9e:2b:92:26:
                    50:e0:9d:fc:39:dd:b8:4a:4e:1d:95:8f:de:f5:0e:
                    45:ad:54:af:ef:80:73:19:8f:fd:27:08:fc:12:59:
                    1b:d6:63:fb:01:86:8c:c0:41:81:4c:b1:43:1c:2e:
                    06:04:f3:b7:d4:2d:e4:2c:e2:f4:4a:41:60:1b:6b:
                    4b:0b:3f:99:fc:ef:33:05:e8:9a:f1:62:19:e8:0e:
                    11:9a:ea:79:73:b3:8c:48:7d:eb:b1:e1:e7:bd:d1:
                    c8:59:ef:2a:42:01:d9:66:22:33:6e:23:49:86:22:
                    44:87:2d:c4:85:75:c4:7a:75:71:70:78:68:20:ed:
                    25:76:aa:fe:44:ee:8f:8a:96:04:f2:bd:f7:35:08:
                    1b:97:23:86:b0:ab:e9:7e:4f:65:0c:76:77:fe:5d:
                    7d:5c:ad:51:49:57:3b:f1:73:90:8c:f4:c7:71:83:
                    b9:6a:2f:c3:d6:df:e0:e2:74:30:c4:d6:46:e5:85:
                    6a:e4:35:50:fa:5c:55:0c:8a:38:0b:44:d6:fa:ba:
                    59:99:67:ac:5c:7a:3d:c5:55:4f:a9:f9:d4:a2:56:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CF:F4:2B:5B:62:86:33:06:44:39:76:AC:7D:F3:5C:E0:C3:1A:3B
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e36342e302f32322d3232203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:46:fe:10:f6:48:01:45:de:d5:b8:38:2a:a8:9b:2c:76:
         aa:33:75:a7:c2:b4:5d:2a:9b:69:7a:23:6b:a9:a5:6a:fa:c9:
         d0:9d:cc:45:e1:31:42:bb:60:04:95:71:28:1f:68:b1:93:6e:
         e5:99:87:11:6b:cd:01:c9:37:53:51:f0:df:9d:4d:44:94:ce:
         b5:22:ea:4d:b5:f7:77:a8:c4:b4:78:5f:43:b8:97:f9:1c:7c:
         07:db:5d:11:07:d0:f4:ed:b7:96:af:68:22:c9:56:7d:91:e4:
         0b:91:f4:c8:92:47:dc:38:42:16:f0:bc:d8:f0:62:1d:e9:47:
         5f:f7:8d:f0:3b:3e:24:21:b4:58:ae:35:cd:05:a0:3b:e1:3d:
         a3:84:9f:25:23:61:52:39:7d:08:08:20:61:de:11:de:15:7a:
         ef:93:f1:24:4a:f5:95:95:0f:07:03:75:65:ed:8f:c7:ef:76:
         ea:ba:a2:a6:01:db:19:59:4a:f3:c2:7d:f2:97:f1:f5:d2:7e:
         d2:aa:0f:53:cb:f1:31:f5:5d:14:85:b6:ba:5f:1a:df:68:10:
         ae:1f:65:b3:2f:13:e5:83:e6:14:7a:02:a3:a3:cf:fa:ba:0f:
         63:6b:3c:11:43:f6:32:0a:b2:51:63:14:bd:0b:f5:d2:3d:14:
         c2:f3:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:22 2026 by rpki-client