This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
File:                     3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa (raw, json)
Hash identifier:          fFMS3YLIlnuNvERcw7KSI74EC7aExjB61Y96biXDMCE=
Subject key identifier:   F4:B4:1A:8A:82:7E:D3:B3:32:1D:A3:DC:0E:B6:8F:A1:E2:7E:70:D6
Certificate issuer:       /CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
Certificate serial:       68A820025A9E995C2854F26AF5EC672D78AAA2C0
Authority key identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
Signing time:             Tue 06 Jan 2026 19:10:18 +0000
ROA not before:           Tue 06 Jan 2026 19:05:18 +0000
ROA not after:            Tue 05 Jan 2027 19:10:18 +0000
asID:                     20207
IP address blocks:        190.105.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a8:20:02:5a:9e:99:5c:28:54:f2:6a:f5:ec:67:2d:78:aa:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
        Validity
            Not Before: Jan  6 19:05:18 2026 GMT
            Not After : Jan  5 19:10:18 2027 GMT
        Subject: CN=F4B41A8A827ED3B3321DA3DC0EB68FA1E27E70D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:09:11:ff:b3:7b:25:bd:a5:21:28:38:8b:
                    16:b7:23:b3:62:46:2e:36:c0:27:b9:f3:e4:e2:c4:
                    f8:08:4b:d0:f5:54:6f:41:c0:ae:88:c6:9a:9f:f7:
                    60:2a:9e:55:1f:4e:bc:13:ff:6c:43:b5:5a:a4:5c:
                    24:f0:3a:28:10:9c:ba:13:c0:8c:d3:8d:b3:9a:3c:
                    37:78:61:cf:00:9e:e5:c3:22:ef:74:36:ac:12:b0:
                    54:63:42:fb:45:5e:9f:62:12:da:7d:5b:e2:03:ca:
                    3b:7f:56:52:62:c8:83:9e:50:b0:9e:4a:7c:f7:dc:
                    cc:80:db:89:9f:0c:21:3f:23:d2:11:3c:73:73:6c:
                    08:06:80:85:1d:fb:04:46:a4:90:46:dd:c9:62:d5:
                    41:d6:07:71:55:7b:d8:83:b0:d6:b7:d5:c3:e2:98:
                    44:50:e6:28:46:ca:be:8a:00:a6:0d:28:fe:a5:2f:
                    6a:fb:7c:50:92:f6:ee:66:14:d7:f1:f4:b2:af:1a:
                    3b:d1:1a:0e:b5:0f:75:80:ba:49:a0:9b:bc:5e:ab:
                    03:bc:72:90:43:1c:35:3a:7c:c9:47:05:d7:0d:bb:
                    be:58:58:68:92:2e:c1:ed:9b:a0:83:96:d5:af:2f:
                    1e:a2:76:35:5a:b3:68:bd:f5:4a:72:c8:2c:18:2a:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:1A:8A:82:7E:D3:B3:32:1D:A3:DC:0E:B6:8F:A1:E2:7E:70:D6
            X509v3 Authority Key Identifier:
                keyid:F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:70:96:a5:de:0e:b5:ba:df:44:89:7a:a5:7e:d1:e0:99:
         ee:3d:5a:d8:7f:c8:74:95:98:e1:06:5d:b3:d6:fa:b6:13:8f:
         6f:08:97:4c:8f:14:e3:ae:6f:69:f7:c6:1d:8e:71:d3:cc:b1:
         9c:a1:44:ee:f4:31:85:a6:a3:8d:c7:f4:85:99:31:fe:45:47:
         d7:8c:44:d9:32:bf:af:08:56:cd:9e:29:ba:3e:dd:ce:53:17:
         cd:c2:79:b4:79:ce:97:cd:38:bd:5f:ad:7f:b7:cf:f3:74:3d:
         ea:ba:f4:8b:44:fc:ed:e5:82:a8:2e:ce:40:13:f5:5d:d4:75:
         cb:85:ec:81:0a:a9:5e:19:8d:07:c8:de:ae:ed:35:4f:94:87:
         6e:bc:ce:3b:01:20:a7:7a:ba:9a:7b:ed:89:05:97:5e:62:c0:
         d2:42:2c:0b:48:93:bd:42:b0:02:58:05:d2:90:c4:1f:84:72:
         e3:7c:47:ee:7e:3b:29:2f:fb:30:80:3b:f7:6f:c5:b0:ae:de:
         bd:09:35:60:66:f7:c9:8a:80:9b:75:4f:ac:75:e2:87:ea:87:
         61:b6:42:86:12:e3:f9:95:05:a7:87:47:4b:fb:eb:92:0f:97:
         40:99:b7:c6:fa:46:d8:c5:73:ab:19:2b:f2:c0:f7:88:fe:e0:
         18:a0:3b:38
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaKggAlqemVwoVPJq9exnLXiqosAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgyMURFRDJDRTM4QkFERTc5QzQxQkIxNTI2MDJGMDM1
QkI3OEI2QzAeFw0yNjAxMDYxOTA1MThaFw0yNzAxMDUxOTEwMThaMDMxMTAvBgNV
BAMTKEY0QjQxQThBODI3RUQzQjMzMjFEQTNEQzBFQjY4RkExRTI3RTcwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEAkR/7N7Jb2lISg4ixa3I7Ni
Ri42wCe58+TixPgIS9D1VG9BwK6Ixpqf92AqnlUfTrwT/2xDtVqkXCTwOigQnLoT
wIzTjbOaPDd4Yc8AnuXDIu90NqwSsFRjQvtFXp9iEtp9W+IDyjt/VlJiyIOeULCe
Snz33MyA24mfDCE/I9IRPHNzbAgGgIUd+wRGpJBG3cli1UHWB3FVe9iDsNa31cPi
mERQ5ihGyr6KAKYNKP6lL2r7fFCS9u5mFNfx9LKvGjvRGg61D3WAukmgm7xeqwO8
cpBDHDU6fMlHBdcNu75YWGiSLsHtm6CDltWvLx6idjVas2i99UpyyCwYKlEZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9LQaioJ+07MyHaPcDraPoeJ+cNYwHwYDVR0j
BBgwFoAU+CHe0s44ut55xBuxUmAvA1u3i2wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RTE3NkNGQjg1OUZGRjhEMDc5MjBEMkFENEI5RjhFNzc4
OEMzM0NDOUQzMzM2Njg0Q0I0QzY2NjQzNEU0QjIyLzAvRjgyMURFRDJDRTM4QkFE
RTc5QzQxQkIxNTI2MDJGMDM1QkI3OEI2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GODIxREVEMkNFMzhCQURFNzlD
NDFCQjE1MjYwMkYwMzVCQjc4QjZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEUxNzZDRkI4NTlGRkY4RDA3OTIwRDJBRDRCOUY4RTc3ODhDMzNDQzlE
MzMzNjY4NENCNEM2NjY0MzRFNEIyMi8wLzMxMzkzMDJlMzEzMDM1MmUzMTM0MzQy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMwMzIzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAPqnCWpd4OtbrfRIl6pX7R4JnuPVrYf8h0lZjh
Bl2z1vq2E49vCJdMjxTjrm9p98YdjnHTzLGcoUTu9DGFpqONx/SFmTH+RUfXjETZ
Mr+vCFbNnim6Pt3OUxfNwnm0ec6XzTi9X61/t8/zdD3quvSLRPzt5YKoLs5AE/Vd
1HXLheyBCqleGY0HyN6u7TVPlIduvM47ASCnerqae+2JBZdeYsDSQiwLSJO9QrAC
WAXSkMQfhHLjfEfufjspL/swgDv3b8Wwrt69CTVgZvfJioCbdU+sdeKH6odhtkKG
EuP5lQWnh0dL++uSD5dAmbfG+kbYxXOrGSvywPeI/uAYoDs4
-----END CERTIFICATE-----
Generated at Tue Jan 13 08:12:33 2026 by rpki-client