This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa
File:                     3136382e39302e37342e302f32332d3233203d3e203532343933.roa (raw, json)
Hash identifier:          voelDxmfoptaLX/J+KFnGAMDBMyU4pm53oRB4GzlVZU=
Subject key identifier:   3F:75:70:C0:2D:52:3A:4C:FE:73:45:6B:DD:3D:F1:FF:38:74:69:97
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       1EED3CBB5104AB009107F2C0A754CEA3C82F4111
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa
Signing time:             Tue 06 Jan 2026 19:10:26 +0000
ROA not before:           Tue 06 Jan 2026 19:05:26 +0000
ROA not after:            Tue 05 Jan 2027 19:10:26 +0000
asID:                     52493
IP address blocks:        168.90.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ed:3c:bb:51:04:ab:00:91:07:f2:c0:a7:54:ce:a3:c8:2f:41:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Jan  6 19:05:26 2026 GMT
            Not After : Jan  5 19:10:26 2027 GMT
        Subject: CN=3F7570C02D523A4CFE73456BDD3DF1FF38746997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:0b:82:67:ca:6e:11:78:56:1d:02:9b:03:
                    50:f7:2f:1c:60:e6:f5:4e:02:d5:42:bd:e1:19:19:
                    77:c5:98:8e:ea:27:47:91:51:29:91:11:d4:70:b2:
                    44:31:23:0a:44:93:fe:53:d3:ff:f2:be:38:3f:ba:
                    ee:54:ab:73:fd:e0:b0:c3:5b:87:9e:c8:85:f1:83:
                    68:98:6e:01:ab:3d:9c:b9:f7:df:85:08:bc:e3:be:
                    90:b0:95:c9:ad:fb:c3:1e:df:f4:2d:62:19:7b:a8:
                    05:36:c6:c3:70:6d:64:c2:51:c7:c6:73:26:30:2f:
                    a2:19:45:54:c6:49:c7:31:69:0e:42:a6:35:c3:0d:
                    a6:29:83:00:ff:a0:f1:81:cf:83:6a:ec:bf:11:5c:
                    52:d0:a3:fb:22:42:cf:2d:8e:61:b4:ea:63:10:b3:
                    e7:f5:c9:39:1b:d5:f8:19:43:70:aa:5d:f6:69:91:
                    8c:1b:33:c5:82:6d:81:c5:0b:21:cd:a7:90:16:0f:
                    37:a5:83:6f:75:78:af:0d:e6:12:ad:bf:19:b4:83:
                    f8:e2:06:da:2e:ad:4d:c8:2b:66:36:a3:e6:5a:7f:
                    e5:72:b6:0d:be:23:60:59:cf:a0:dd:28:b6:2d:67:
                    dd:bd:08:78:04:c3:53:fe:66:9b:0e:1d:eb:67:ce:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:70:C0:2D:52:3A:4C:FE:73:45:6B:DD:3D:F1:FF:38:74:69:97
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:b0:fe:d9:e6:c3:0c:ba:11:0c:01:56:25:de:a5:5a:ac:
         94:80:54:a9:3a:40:25:67:ed:aa:94:5d:e8:93:d9:2e:2a:a8:
         1c:97:ee:9c:8a:f0:1d:4c:cd:68:b7:0c:c6:e1:0f:4e:24:1f:
         13:23:f8:78:4b:00:b1:20:12:a0:9a:9c:46:de:bf:df:2a:f8:
         1b:00:c9:ef:e2:9f:61:0c:13:4b:55:ed:84:c5:23:bd:f0:6a:
         5a:c9:cb:fb:db:19:51:cc:9f:d2:a1:ba:7f:ee:39:4a:27:ba:
         0b:9f:95:71:7d:e1:c1:ba:84:53:26:8a:f5:c7:4a:48:9f:88:
         06:2e:e8:71:68:4d:80:d8:65:6d:28:95:da:ea:83:17:5a:10:
         fe:96:c9:99:96:2a:16:07:a5:55:4c:30:88:09:fb:e7:5a:af:
         fb:6e:37:90:e3:b9:5a:fc:2d:0e:30:7c:53:45:4a:92:5c:4c:
         98:a3:b1:02:44:9f:b3:78:f3:13:1b:31:69:31:9c:4c:57:e8:
         34:94:b7:c3:1f:7c:d4:2c:35:dd:18:b4:7e:f8:54:8f:ad:0b:
         e7:86:88:c0:8b:2b:0f:b7:e5:70:82:ff:27:c8:92:80:8d:33:
         ac:a9:ef:4b:84:95:48:a9:ad:8d:1b:2f:af:fc:a2:c8:36:4f:
         8e:11:f3:98
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHu08u1EEqwCRB/LAp1TOo8gvQREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNEMDgxQTRBNDAyQzEwN0Q4ODcwNUFGRDkzNTU4QTU2
NDVFRTBDQTAeFw0yNjAxMDYxOTA1MjZaFw0yNzAxMDUxOTEwMjZaMDMxMTAvBgNV
BAMTKDNGNzU3MEMwMkQ1MjNBNENGRTczNDU2QkREM0RGMUZGMzg3NDY5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RguCZ8puEXhWHQKbA1D3Lxxg
5vVOAtVCveEZGXfFmI7qJ0eRUSmREdRwskQxIwpEk/5T0//yvjg/uu5Uq3P94LDD
W4eeyIXxg2iYbgGrPZy599+FCLzjvpCwlcmt+8Me3/QtYhl7qAU2xsNwbWTCUcfG
cyYwL6IZRVTGSccxaQ5CpjXDDaYpgwD/oPGBz4Nq7L8RXFLQo/siQs8tjmG06mMQ
s+f1yTkb1fgZQ3CqXfZpkYwbM8WCbYHFCyHNp5AWDzelg291eK8N5hKtvxm0g/ji
BtourU3IK2Y2o+Zaf+Vytg2+I2BZz6DdKLYtZ929CHgEw1P+ZpsOHetnzsuZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUP3VwwC1SOkz+c0Vr3T3x/zh0aZcwHwYDVR0j
BBgwFoAUbNCBpKQCwQfYhwWv2TVYpWRe4MowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzE5RjJDRTMxQkIxRTJBNEZGNEM3NTdCMTkxRkExRDEw
Q0UyMzk4MjM5Nzc0RUNBNjEwQTk1Mzc1QzhGRTc3LzAvNkNEMDgxQTRBNDAyQzEw
N0Q4ODcwNUFGRDkzNTU4QTU2NDVFRTBDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0QwODFBNEE0MDJDMTA3RDg4
NzA1QUZEOTM1NThBNTY0NUVFMENBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTMxOUYyQ0UzMUJCMUUyQTRGRjRDNzU3QjE5MUZBMUQxMENFMjM5ODIz
OTc3NEVDQTYxMEE5NTM3NUM4RkU3Ny8wLzMxMzYzODJlMzkzMDJlMzczNDJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGoWkowDQYJ
KoZIhvcNAQELBQADggEBACjxsP7Z5sMMuhEMAVYl3qVarJSAVKk6QCVn7aqUXeiT
2S4qqByX7pyK8B1MzWi3DMbhD04kHxMj+HhLALEgEqCanEbev98q+BsAye/in2EM
E0tV7YTFI73walrJy/vbGVHMn9Khun/uOUonuguflXF94cG6hFMmivXHSkifiAYu
6HFoTYDYZW0oldrqgxdaEP6WyZmWKhYHpVVMMIgJ++dar/tuN5DjuVr8LQ4wfFNF
SpJcTJijsQJEn7N48xMbMWkxnExX6DSUt8MffNQsNd0YtH74VI+tC+eGiMCLKw+3
5XCC/yfIkoCNM6yp70uElUiprY0bL6/8osg2T44R85g=
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:26 2026 by rpki-client