This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          V67oiEO2tX8QAa62esaZJJP5I9nsH/4Uve+NLp8EQkQ=
Subject key identifier:   CD:89:CD:85:67:EE:91:B6:67:EE:D9:1E:EF:8B:2B:AC:1A:17:57:0C
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       4571F2E7E00B9C687ADA93DEBB2D002732425BC7
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:24 +0000
ROA not before:           Tue 06 Jan 2026 19:26:24 +0000
ROA not after:            Tue 05 Jan 2027 19:31:24 +0000
asID:                     264688
IP address blocks:        190.107.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:71:f2:e7:e0:0b:9c:68:7a:da:93:de:bb:2d:00:27:32:42:5b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:24 2026 GMT
            Not After : Jan  5 19:31:24 2027 GMT
        Subject: CN=CD89CD8567EE91B667EED91EEF8B2BAC1A17570C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:fa:9d:b1:99:d3:0c:99:db:90:b0:11:32:
                    c7:d5:1f:ca:57:75:64:d7:d6:55:8c:66:0e:63:d1:
                    46:e8:fe:c5:22:f8:fb:b5:b0:26:3a:a1:98:6b:19:
                    4a:98:01:c6:76:50:04:76:51:4d:35:9f:41:02:50:
                    f2:39:ed:a2:5c:06:00:9d:d4:ce:8f:c2:ac:61:49:
                    b6:2e:64:af:20:9c:77:f0:f8:d0:9b:df:dc:f4:f8:
                    b7:f1:46:d2:d2:0d:24:f6:07:48:42:14:0f:ee:d4:
                    ba:c0:77:c7:61:f6:85:61:d5:2c:42:75:38:34:70:
                    25:be:01:6b:a3:f1:0b:1f:cd:2c:e4:84:e5:df:a2:
                    aa:39:d1:2a:97:c4:76:5b:06:c6:3a:a7:01:bb:8e:
                    6a:f2:a7:e1:a7:d7:ec:47:66:74:26:0f:ed:39:e6:
                    a4:2a:fc:4d:80:3d:02:ad:cb:83:0b:6e:bf:0d:f7:
                    97:5e:fb:43:37:9a:5e:dc:bf:6d:08:75:0e:43:b6:
                    81:7f:e0:01:ef:3a:58:f9:07:9f:60:9e:5e:b9:02:
                    52:0c:94:2e:fd:d1:17:c6:96:19:5d:df:56:da:12:
                    f6:95:72:51:30:13:51:47:ba:ce:d8:f1:c8:39:96:
                    7f:3b:c4:44:ed:9a:22:b8:8a:bc:ba:55:fc:0b:ea:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:89:CD:85:67:EE:91:B6:67:EE:D9:1E:EF:8B:2B:AC:1A:17:57:0C
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234362e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:51:89:37:31:9d:98:aa:48:13:98:6e:1d:99:b9:1c:21:
         cb:79:48:53:b2:0d:5f:77:3d:e3:a1:1f:b4:ba:20:f4:42:3b:
         09:dd:34:b3:38:1a:7b:8b:0e:91:a2:37:3e:4b:eb:44:81:84:
         be:b9:a8:46:b9:82:09:5d:ab:2a:16:8b:ab:34:de:35:0e:4d:
         26:c3:f2:08:fa:54:3a:78:fd:07:b7:cb:82:36:4f:0a:d2:69:
         5e:fb:10:a8:e6:de:28:8c:f1:d9:49:d7:3e:44:10:45:ed:c3:
         d5:24:6c:f0:fe:82:ea:7b:87:4d:10:d4:00:a2:e8:67:d3:c2:
         8a:af:23:75:48:9c:54:aa:ef:56:4f:f1:55:fb:b5:24:0c:08:
         8d:d2:4c:57:e0:26:fe:98:1d:29:79:25:cf:e2:67:79:da:cc:
         e9:b9:26:92:31:09:2a:77:76:2c:cc:aa:02:9e:68:6b:2c:ab:
         10:de:3c:52:a6:eb:c3:78:ad:ea:ab:83:0d:6d:bf:40:82:d9:
         b1:1a:eb:c9:06:68:4f:f0:bb:97:57:1e:47:7b:12:d1:68:8f:
         10:9a:b4:6e:7b:21:87:ca:49:75:20:77:1d:68:1a:16:bd:f1:
         d8:aa:5b:95:8f:99:50:f9:fd:35:0d:3f:13:ee:08:57:8a:8b:
         4c:a7:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:53 2026 by rpki-client