This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa
File:                     3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa (raw, json)
Hash identifier:          iwE1YOBP/1gp5k7oeuOwRoBw2NvnM35fkahSCfr5qCk=
Subject key identifier:   C7:C2:AE:E4:77:2C:CD:FE:B3:D3:55:B2:37:25:D7:D9:D1:CA:01:1E
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       5CE294395E88A0ED0F093E3798334A63B531848A
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa
Signing time:             Tue 06 Jan 2026 20:51:23 +0000
ROA not before:           Tue 06 Jan 2026 20:46:23 +0000
ROA not after:            Tue 05 Jan 2027 20:51:23 +0000
asID:                     269993
IP address blocks:        168.90.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:94:39:5e:88:a0:ed:0f:09:3e:37:98:33:4a:63:b5:31:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Jan  6 20:46:23 2026 GMT
            Not After : Jan  5 20:51:23 2027 GMT
        Subject: CN=C7C2AEE4772CCDFEB3D355B23725D7D9D1CA011E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:3d:cd:77:a9:0a:22:68:93:cb:4c:0c:18:
                    ff:3d:79:31:a9:9c:73:6f:78:5b:66:07:0c:34:32:
                    95:68:13:9f:d6:1c:90:9b:8d:6b:72:18:a0:29:81:
                    26:12:c2:9b:f8:ee:f4:f7:bc:17:35:bf:2f:c9:0e:
                    52:5f:59:6c:f1:8a:9f:25:60:16:78:4f:fb:49:ea:
                    e0:f2:1a:42:ac:1a:84:ad:14:3c:ca:2c:60:e0:e9:
                    94:44:78:c7:02:73:43:d2:fe:51:45:d0:7c:98:80:
                    57:03:9e:1e:25:51:6d:5d:96:39:26:d4:1f:7e:9a:
                    b7:00:61:74:6d:33:71:9f:1c:ca:c4:70:08:0c:a2:
                    8b:dd:3b:bb:ea:69:11:3c:ee:bc:02:2f:f9:de:32:
                    77:a2:69:cd:b4:a5:e1:5e:f8:ea:bd:84:54:81:5d:
                    cf:ca:11:9a:46:06:b7:25:e4:d4:74:4e:21:e4:90:
                    c3:fb:fa:b5:75:8e:c3:00:64:1a:44:35:8e:2c:6f:
                    0c:d1:aa:da:b2:7f:98:8c:50:ae:4c:61:06:d7:37:
                    d0:40:08:16:2a:66:51:44:c7:27:9b:4a:1a:ab:e2:
                    75:5b:27:6d:4c:46:70:c6:d8:5f:e2:ce:e9:d3:0b:
                    af:bd:9c:c7:ff:ec:3c:0a:20:7b:d8:bf:b3:f6:57:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:AE:E4:77:2C:CD:FE:B3:D3:55:B2:37:25:D7:D9:D1:CA:01:1E
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ba:ee:97:e6:fe:78:24:ab:db:ec:c1:95:04:12:0d:ee:da:
         c2:90:1e:d8:8a:2b:d3:e0:17:b8:8f:4a:57:05:cf:ac:0f:97:
         e5:9c:54:fb:ad:79:dc:29:10:71:ec:61:bd:20:06:48:2d:84:
         cb:e3:a0:45:16:d3:c2:1d:6f:b8:c7:a5:4d:1b:65:c2:dc:89:
         a5:54:f3:d1:d4:84:44:81:c1:c2:26:7a:30:b0:33:e5:75:55:
         98:29:9a:86:a5:6c:d2:c0:67:60:4c:39:8d:ca:96:53:d8:43:
         c6:e9:4b:a8:61:fa:93:ee:a1:93:ad:56:2c:2f:00:66:e9:08:
         ff:f7:a1:68:6b:14:8a:2a:67:bd:84:28:83:a2:ec:7f:24:8d:
         23:29:a2:df:2d:15:88:9c:24:77:7a:a5:f8:c1:13:cf:b9:f8:
         ca:4d:00:ac:fc:e4:6e:2a:bc:ee:ce:52:41:76:5d:00:b9:c2:
         71:2e:f3:61:88:fd:37:f0:bc:0d:4e:9c:e0:d5:a6:da:47:e9:
         cb:a8:67:e4:03:95:82:7c:a0:ba:ba:a4:1d:54:a9:6a:21:4e:
         ac:d6:e5:58:fb:11:66:d4:de:c6:a9:75:39:ff:0c:6b:f7:33:
         bf:87:54:1e:bd:6a:17:4b:2c:4c:49:f2:50:64:7a:03:fc:0a:
         98:a2:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:06 2026 by rpki-client