This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa
File:                     3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          dgiBorSQrZVtsmZnnYRlqKxdX26tbUtWSZOhk9imIAo=
Subject key identifier:   C2:21:0F:07:97:2E:68:D7:9B:48:2E:15:81:E9:54:8E:37:47:AA:B8
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       426E1E6FF677730AA0DFE39FFDEBC86D8EA3FF55
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 06 Jan 2026 19:33:07 +0000
ROA not before:           Tue 06 Jan 2026 19:28:07 +0000
ROA not after:            Tue 05 Jan 2027 19:33:07 +0000
asID:                     264850
IP address blocks:        168.90.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 18:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6e:1e:6f:f6:77:73:0a:a0:df:e3:9f:fd:eb:c8:6d:8e:a3:ff:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Jan  6 19:28:07 2026 GMT
            Not After : Jan  5 19:33:07 2027 GMT
        Subject: CN=C2210F07972E68D79B482E1581E9548E3747AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:43:e2:1f:e5:9c:a8:80:09:1b:9e:75:96:
                    51:0e:28:f2:c6:87:78:6a:6e:88:a4:46:ff:ee:cb:
                    48:ad:52:fc:36:64:80:c7:f7:be:b7:01:c6:71:06:
                    e4:ea:65:34:ef:c7:b3:53:37:29:0b:fb:a8:93:bc:
                    b2:07:bc:f6:0a:10:6a:93:69:19:16:3e:d8:4d:94:
                    f1:7c:00:0e:98:7e:2f:19:11:3e:84:96:e4:76:60:
                    bf:70:4b:e3:33:27:22:e1:0f:ff:c2:4a:8f:6c:34:
                    67:00:09:48:d6:66:c0:32:fe:2d:fc:fe:98:70:54:
                    a6:63:87:73:70:6d:12:9f:22:17:bb:43:85:f6:2a:
                    71:a9:bb:fb:a9:7e:ed:08:f5:1e:3a:e9:93:19:df:
                    47:27:a4:40:d3:12:81:cc:62:63:6c:63:a4:82:99:
                    2d:2b:ac:5b:65:40:f0:29:7b:e5:a4:7e:95:bd:78:
                    17:02:a6:03:31:53:fe:9e:21:14:be:f8:d0:25:c0:
                    c0:ed:81:7d:83:7f:06:55:b2:37:63:83:f8:cb:82:
                    5a:7c:06:a8:df:e0:e9:99:52:e2:6d:ac:79:cf:7b:
                    d0:d8:b7:f4:c3:ea:c3:76:bb:4e:34:b1:4a:9c:cf:
                    58:68:73:ee:4c:ca:0a:80:71:27:68:b7:cc:ec:d4:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:21:0F:07:97:2E:68:D7:9B:48:2E:15:81:E9:54:8E:37:47:AA:B8
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3136382e39302e3139362e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:17:29:31:bb:7e:0b:71:33:dc:14:a6:d8:43:57:07:cb:35:
         57:74:60:15:2a:aa:15:11:59:99:41:91:ca:a2:c1:52:db:41:
         63:b9:1b:0e:3d:19:9d:0d:77:5c:68:2e:eb:4a:70:99:4f:d8:
         c9:fc:dc:6b:89:59:30:dd:c1:d9:0e:1a:45:00:1c:42:33:fa:
         01:10:9d:ce:ab:34:d7:41:5c:f7:92:0d:88:d3:d6:db:3d:b9:
         95:01:9e:30:61:21:b0:12:9b:6f:ae:f3:81:23:36:e8:bc:5b:
         92:16:8d:63:ad:83:f8:1c:68:9a:ab:b3:42:85:a1:ce:3b:d1:
         3f:c0:31:a7:45:9b:73:d8:d0:08:3d:3e:6d:b7:51:17:78:b5:
         a3:f5:aa:f8:ee:c4:7c:f5:2a:56:4b:6d:d3:7d:e5:f5:57:d2:
         d5:bb:ed:9a:89:9c:58:0f:94:64:7e:88:79:99:e8:17:6b:59:
         91:13:6d:2c:30:d1:e8:f4:14:ae:e3:7f:a6:c3:a6:83:e2:2a:
         13:20:0a:d8:29:4a:64:11:56:e1:ff:5f:46:4c:2d:e0:6e:79:
         90:20:9a:33:c0:48:c1:84:69:67:01:70:ed:61:54:56:91:9f:
         ee:49:0f:fe:12:61:f7:11:c4:07:0c:b4:6a:29:a2:d3:3c:b7:
         1d:24:53:42
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQm4eb/Z3cwqg3+Of/evIbY6j/1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3QTkyNjA5Q0FERTZBNzhDMUUxNzhERUZFN0M5QzI0
Q0Y3NTE2OTAeFw0yNjAxMDYxOTI4MDdaFw0yNzAxMDUxOTMzMDdaMDMxMTAvBgNV
BAMTKEMyMjEwRjA3OTcyRTY4RDc5QjQ4MkUxNTgxRTk1NDhFMzc0N0FBQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtkPiH+WcqIAJG551llEOKPLG
h3hqboikRv/uy0itUvw2ZIDH9763AcZxBuTqZTTvx7NTNykL+6iTvLIHvPYKEGqT
aRkWPthNlPF8AA6Yfi8ZET6EluR2YL9wS+MzJyLhD//CSo9sNGcACUjWZsAy/i38
/phwVKZjh3NwbRKfIhe7Q4X2KnGpu/upfu0I9R466ZMZ30cnpEDTEoHMYmNsY6SC
mS0rrFtlQPApe+WkfpW9eBcCpgMxU/6eIRS++NAlwMDtgX2DfwZVsjdjg/jLglp8
Bqjf4OmZUuJtrHnPe9DYt/TD6sN2u040sUqcz1hoc+5MygqAcSdot8zs1JGpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwiEPB5cuaNebSC4VgelUjjdHqrgwHwYDVR0j
BBgwFoAU+nqSYJyt5qeMHheN7+fJwkz3UWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUYwRkQ4MjczQkQxNzkyNDY3ODBGOEJGMkQ3REIwQUU1
NkZFMzNFRUUwMjBEMDc1NTBENjBFMjNGRDAxRjJFLzAvRkE3QTkyNjA5Q0FERTZB
NzhDMUUxNzhERUZFN0M5QzI0Q0Y3NTE2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTdBOTI2MDlDQURFNkE3OEMx
RTE3OERFRkU3QzlDMjRDRjc1MTY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlGMEZEODI3M0JEMTc5MjQ2NzgwRjhCRjJEN0RCMEFFNTZGRTMzRUVF
MDIwRDA3NTUwRDYwRTIzRkQwMUYyRS8wLzMxMzYzODJlMzkzMDJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0MzgzNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFrE
MA0GCSqGSIb3DQEBCwUAA4IBAQBwFykxu34LcTPcFKbYQ1cHyzVXdGAVKqoVEVmZ
QZHKosFS20FjuRsOPRmdDXdcaC7rSnCZT9jJ/NxriVkw3cHZDhpFABxCM/oBEJ3O
qzTXQVz3kg2I09bbPbmVAZ4wYSGwEptvrvOBIzbovFuSFo1jrYP4HGiaq7NChaHO
O9E/wDGnRZtz2NAIPT5tt1EXeLWj9ar47sR89SpWS23TfeX1V9LVu+2aiZxYD5Rk
foh5megXa1mRE20sMNHo9BSu43+mw6aD4ioTIArYKUpkEVbh/19GTC3gbnmQIJoz
wEjBhGlnAXDtYVRWkZ/uSQ/+EmH3EcQHDLRqKaLTPLcdJFNC
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:54:13 2026 by rpki-client