This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          fi9R+KqZsT2OJqvMNRaMYr4Tgr+3uhBqOoMQP1mLwpw=
Subject key identifier:   8B:0E:33:09:BD:20:F0:BD:EA:77:03:4D:23:1D:65:8E:AB:8E:8C:3E
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       352BEC15CE29E4DF5D22DF026F9720057B7ED085
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:23 +0000
ROA not before:           Tue 06 Jan 2026 19:26:23 +0000
ROA not after:            Tue 05 Jan 2027 19:31:23 +0000
asID:                     264688
IP address blocks:        190.107.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:ec:15:ce:29:e4:df:5d:22:df:02:6f:97:20:05:7b:7e:d0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:23 2026 GMT
            Not After : Jan  5 19:31:23 2027 GMT
        Subject: CN=8B0E3309BD20F0BDEA77034D231D658EAB8E8C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:50:f6:41:ec:f3:56:9a:0c:d3:7e:ce:3b:
                    08:69:bc:2d:ab:37:30:86:f2:68:2a:97:1b:f3:94:
                    44:9a:86:e7:97:4e:42:ec:9a:b3:dc:07:f4:20:0e:
                    b4:09:d3:58:4c:fa:c4:05:1f:05:74:62:a0:7e:87:
                    c9:86:e9:98:09:97:a9:19:c6:9c:bc:52:c3:81:09:
                    6d:a9:a7:59:78:65:00:e4:9c:b9:cc:20:95:56:4f:
                    c2:b2:1e:a3:ba:70:6e:a9:a8:6f:d0:42:ab:5e:5a:
                    87:e3:8d:2a:a9:de:af:11:ba:3f:e2:e6:08:67:8c:
                    62:6e:ca:b9:54:99:0e:fc:20:29:90:90:fe:ff:0e:
                    67:a7:66:63:10:c0:b0:41:85:ac:4e:44:c9:6e:74:
                    fc:da:9e:52:ab:24:2f:9c:62:42:59:bf:73:bc:6a:
                    c8:2a:6b:96:4b:69:63:e3:74:5a:74:c3:ac:17:7b:
                    b8:cf:6d:82:58:bc:34:8e:0d:37:f2:20:64:7b:49:
                    f9:d4:e9:6c:1e:5f:1b:27:b6:9a:c2:d4:e0:a8:c1:
                    b6:18:6e:60:db:6a:62:4e:17:2f:6a:67:47:17:9f:
                    cc:dc:d1:89:ac:df:42:91:26:42:f7:18:99:1c:e4:
                    a4:b8:9d:54:2c:81:68:38:34:14:77:ce:8c:58:d4:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0E:33:09:BD:20:F0:BD:EA:77:03:4D:23:1D:65:8E:AB:8E:8C:3E
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234302e302f32312d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:00:e0:52:f9:9c:4d:d8:68:99:25:1c:45:51:36:70:1b:09:
         83:f8:ec:b5:f0:2e:fc:a2:91:8e:5a:a1:10:76:df:6f:a6:29:
         c6:f3:b4:34:35:b3:58:d8:89:1e:52:a7:db:80:5a:e7:6e:db:
         74:e5:21:1d:5c:3e:7e:40:df:1b:ac:6a:0b:05:12:03:ed:5d:
         d8:0a:64:97:07:7b:73:a2:27:99:35:73:8c:7a:61:f3:14:09:
         b0:8e:22:6b:2c:15:99:d7:2a:82:a3:eb:be:3a:45:1c:cf:ed:
         91:93:d4:e1:01:5b:7d:e7:3c:15:9b:38:ff:c5:95:10:8e:40:
         41:c7:0e:7c:e1:dc:c5:2a:77:fb:79:22:b0:b2:09:88:4e:e7:
         01:3a:a8:dd:6d:4b:99:85:e4:26:94:20:05:95:80:db:8b:b5:
         d5:87:c7:6f:cf:b9:99:8a:67:16:e0:47:f4:33:1b:15:0e:0f:
         a1:c8:a0:4b:d9:22:d9:8d:56:c7:75:e4:78:09:0f:6c:b3:f2:
         02:18:c6:4c:30:a5:61:73:66:7b:29:25:1f:4c:dc:9a:07:84:
         49:cf:51:ff:83:7b:15:8b:02:6b:9a:a3:16:c4:5e:e3:b7:a5:
         61:fe:8d:44:7b:58:3e:db:78:f5:53:0d:ff:62:d4:82:c0:19:
         7a:a7:3c:22
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUNSvsFc4p5N9dIt8Cb5cgBXt+0IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNjAxMDYxOTI2MjNaFw0yNzAxMDUxOTMxMjNaMDMxMTAvBgNV
BAMTKDhCMEUzMzA5QkQyMEYwQkRFQTc3MDM0RDIzMUQ2NThFQUI4RThDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI1D2QezzVpoM037OOwhpvC2r
NzCG8mgqlxvzlESahueXTkLsmrPcB/QgDrQJ01hM+sQFHwV0YqB+h8mG6ZgJl6kZ
xpy8UsOBCW2pp1l4ZQDknLnMIJVWT8KyHqO6cG6pqG/QQqteWofjjSqp3q8Ruj/i
5ghnjGJuyrlUmQ78ICmQkP7/DmenZmMQwLBBhaxORMludPzanlKrJC+cYkJZv3O8
asgqa5ZLaWPjdFp0w6wXe7jPbYJYvDSODTfyIGR7SfnU6WweXxsntprC1OCowbYY
bmDbamJOFy9qZ0cXn8zc0Yms30KRJkL3GJkc5KS4nVQsgWg4NBR3zoxY1MBvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUiw4zCb0g8L3qdwNNIx1ljquOjD4wHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzMDM3MmUzMjM0MzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+
a/AwDQYJKoZIhvcNAQELBQADggEBALQA4FL5nE3YaJklHEVRNnAbCYP47LXwLvyi
kY5aoRB232+mKcbztDQ1s1jYiR5Sp9uAWudu23TlIR1cPn5A3xusagsFEgPtXdgK
ZJcHe3OiJ5k1c4x6YfMUCbCOImssFZnXKoKj6746RRzP7ZGT1OEBW33nPBWbOP/F
lRCOQEHHDnzh3MUqd/t5IrCyCYhO5wE6qN1tS5mF5CaUIAWVgNuLtdWHx2/PuZmK
ZxbgR/QzGxUOD6HIoEvZItmNVsd15HgJD2yz8gIYxkwwpWFzZnspJR9M3JoHhEnP
Uf+DexWLAmuaoxbEXuO3pWH+jUR7WD7bePVTDf9i1ILAGXqnPCI=
-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:53 2026 by rpki-client