This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          2qyavwEjPquU1Q523bpdF4qJsQFHl3BzGZK4Fl8cvMw=
Subject key identifier:   73:8D:9F:4F:30:6E:C4:D4:DF:A0:CF:BA:EC:D4:EC:06:9E:F1:51:F4
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       3674BDCBC5823764D039E0BCD23BAD5B00AF443A
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:25 +0000
ROA not before:           Tue 06 Jan 2026 19:26:25 +0000
ROA not after:            Tue 05 Jan 2027 19:31:25 +0000
asID:                     264688
IP address blocks:        190.196.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:74:bd:cb:c5:82:37:64:d0:39:e0:bc:d2:3b:ad:5b:00:af:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:25 2026 GMT
            Not After : Jan  5 19:31:25 2027 GMT
        Subject: CN=738D9F4F306EC4D4DFA0CFBAECD4EC069EF151F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:a0:02:06:2a:46:79:d4:a8:7f:4e:ec:b1:
                    a4:0d:c7:a3:3b:bc:98:67:69:63:62:0f:e5:a6:7b:
                    ce:f9:a6:8c:11:1a:1f:bb:d5:1c:c7:3b:10:7d:73:
                    53:2b:72:43:6d:b7:e4:0b:54:cc:ef:c1:aa:ca:e9:
                    57:2b:44:89:07:2e:42:49:84:c0:0a:07:07:91:e1:
                    f1:27:42:8d:8e:6d:c2:7f:8d:1e:fb:ea:27:ca:08:
                    26:cd:3b:98:da:9a:d6:9a:a6:24:54:dc:68:eb:4d:
                    09:35:a6:58:08:19:99:dd:07:28:97:46:5c:8a:76:
                    8d:8b:b8:4e:88:3d:21:41:24:79:76:5e:13:4e:94:
                    37:01:aa:28:3c:66:fe:0f:02:4b:5a:a0:ff:a0:07:
                    4f:6e:f8:f2:99:02:1b:cb:73:4e:c9:f2:ee:12:a3:
                    a0:f7:16:77:9f:5c:9c:08:a1:be:b7:05:a9:13:6f:
                    e7:2b:ef:5b:64:31:99:b5:5d:e7:fd:c4:bd:cb:d7:
                    3b:f0:73:a1:e0:ae:30:9a:07:38:2d:10:67:b1:96:
                    57:92:47:01:c7:cc:f1:51:a7:d8:8b:df:78:d6:4c:
                    ec:d9:6e:f0:8e:bd:79:82:75:ff:a8:9b:cb:84:08:
                    aa:c7:a8:51:22:db:12:85:47:04:5b:cd:b8:63:22:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:9F:4F:30:6E:C4:D4:DF:A0:CF:BA:EC:D4:EC:06:9E:F1:51:F4
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3232372e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:a2:4a:25:5e:1c:83:b6:6d:cd:90:e5:e5:e7:7f:5a:39:
         bc:5e:50:9d:57:7b:8f:fa:f8:3b:5a:b4:e0:53:88:46:ca:5f:
         d1:72:3a:4e:75:d1:0a:18:48:fe:03:e9:dd:b3:88:4a:b9:f3:
         d3:f1:5f:d2:f2:50:bc:46:39:18:47:6b:6d:bd:0a:03:b6:2d:
         4c:26:5d:65:94:8e:67:1b:10:28:10:a8:b3:ed:e4:8d:e1:cb:
         99:cb:d5:6c:a8:1d:4e:85:b1:3a:86:8d:79:c8:8b:9f:77:42:
         94:f2:a8:7d:28:95:e0:17:01:cd:2a:de:ef:f7:09:c4:4e:77:
         bd:1d:93:0e:d3:38:64:3a:0e:0f:4a:bc:26:83:16:82:3e:d7:
         85:67:76:d7:ee:90:29:10:ea:c8:7b:cd:46:1a:49:37:9d:ec:
         d5:50:d5:0d:35:e6:c3:9e:ef:c0:0f:87:df:cc:1f:63:18:a5:
         96:75:7d:ed:0f:d8:83:3a:81:38:df:d4:e9:0d:88:c1:60:70:
         06:a2:3d:97:81:e8:08:82:31:4b:51:91:5d:fe:d1:2e:1d:1c:
         26:17:b5:29:48:3d:15:ee:62:b6:49:6f:e6:a7:7d:db:9c:73:
         50:02:eb:f9:af:f9:56:20:05:fa:89:ae:40:99:3b:de:3c:90:
         da:e5:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:51 2026 by rpki-client