This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32342d3234203d3e20323639393434.roa
File:                     3139302e38392e34302e302f32342d3234203d3e20323639393434.roa (raw, json)
Hash identifier:          SJdiXplkvatbBGSLJFo3Z78FZH54mtR9/S9aOxwzZQM=
Subject key identifier:   0C:23:38:87:42:D3:37:30:B0:9C:15:A5:8E:9F:AF:F4:E1:91:F6:78
Certificate issuer:       /CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
Certificate serial:       0D267C2D04FA06644FFD649F64056D7B077BBC6C
Authority key identifier: EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32342d3234203d3e20323639393434.roa
Signing time:             Tue 06 Jan 2026 19:37:47 +0000
ROA not before:           Tue 06 Jan 2026 19:32:47 +0000
ROA not after:            Tue 05 Jan 2027 19:37:47 +0000
asID:                     269944
IP address blocks:        190.89.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:7c:2d:04:fa:06:64:4f:fd:64:9f:64:05:6d:7b:07:7b:bc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA0111120482566CC872CD0A20DC51EC9AEE44A
        Validity
            Not Before: Jan  6 19:32:47 2026 GMT
            Not After : Jan  5 19:37:47 2027 GMT
        Subject: CN=0C23388742D33730B09C15A58E9FAFF4E191F678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:91:4b:e7:d0:2f:c7:ce:7c:d3:83:30:23:
                    54:04:82:7d:2d:18:57:97:81:c7:b8:aa:12:f7:aa:
                    05:36:f1:d2:b3:53:ff:e2:b1:62:de:07:87:e1:53:
                    ab:23:7a:13:4c:df:85:59:82:42:39:19:df:9a:a5:
                    f2:48:63:6d:46:d9:18:c7:d4:0d:bd:9e:46:67:52:
                    f2:7d:29:38:a9:c1:ea:fc:13:f7:b1:83:9f:4d:6c:
                    04:6a:b7:ad:66:89:c6:2b:4c:e8:f1:1c:e1:4d:d9:
                    e4:9a:4d:01:83:31:a6:6e:a7:83:86:be:b8:99:12:
                    a6:28:56:73:cf:db:c1:d7:08:bd:be:2f:01:44:01:
                    cd:bd:e8:55:bb:26:80:98:d7:0d:3f:f6:a1:00:17:
                    04:1d:26:14:d5:5b:45:2f:33:a6:bc:da:5d:4d:6a:
                    c8:cc:16:55:2a:a4:40:e4:b0:c4:5f:a2:c2:f6:43:
                    0b:e2:bf:36:c2:6e:d8:07:01:53:33:68:b7:13:66:
                    2b:86:9a:53:58:5f:db:38:75:39:81:d7:36:c8:e3:
                    01:cb:34:67:38:45:e2:bd:99:4c:43:b0:82:da:12:
                    e9:9c:01:ec:c2:05:a3:79:78:8b:fc:67:a7:f7:50:
                    da:90:f6:37:37:a0:d9:5f:35:c4:b3:2d:9e:b9:d3:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:23:38:87:42:D3:37:30:B0:9C:15:A5:8E:9F:AF:F4:E1:91:F6:78
            X509v3 Authority Key Identifier:
                keyid:EE:A0:11:11:20:48:25:66:CC:87:2C:D0:A2:0D:C5:1E:C9:AE:E4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEA0111120482566CC872CD0A20DC51EC9AEE44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/991BA4AC626145E483313B1F3C5AB27DB559921E1DB0BDBAFD319A781DB335EC/0/3139302e38392e34302e302f32342d3234203d3e20323639393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:17:0b:c9:45:ea:87:a3:f7:3f:25:bb:f2:2a:c8:88:f3:
         a9:ff:92:e6:ad:c8:d9:9f:11:6b:e6:d2:19:b0:34:27:86:60:
         4d:1c:94:d8:7c:3e:08:68:8d:2b:ec:a8:e4:ef:e4:89:62:e9:
         6f:8a:2d:d3:19:05:38:be:14:cb:b6:b4:2e:15:c2:20:fa:97:
         fb:6a:b9:a2:d7:88:95:d5:f5:c2:c3:6f:16:85:e5:ed:0e:3f:
         e5:dd:d8:57:99:97:50:93:ca:cb:c6:2b:40:3c:a0:15:a8:b9:
         10:c4:09:f5:9a:cf:a4:8e:b2:da:10:cd:76:db:34:9d:09:3a:
         36:0a:8e:6d:48:46:5a:82:f0:82:86:fd:66:3c:ab:35:7b:05:
         47:33:10:16:ec:b7:8a:7f:ff:24:f6:c4:e0:a7:e1:c4:09:84:
         26:ca:3e:63:20:8d:1f:56:68:4f:e6:f0:34:b1:55:d0:cb:6e:
         ad:1c:90:f3:a2:4d:a1:fc:b5:fe:71:58:19:ed:5d:9b:87:c8:
         71:58:b1:7e:88:66:a3:a3:43:83:10:eb:19:c7:36:15:41:45:
         c0:50:ca:a9:1e:66:8b:27:88:70:5b:90:7d:03:46:2d:79:dc:
         78:61:3c:23:72:f2:a1:8e:cc:13:fc:37:3c:4d:cf:ce:0a:43:
         ea:22:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:58:18 2026 by rpki-client