This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          lluQWXLtT4JZchjWAptCT5AS7U9IVePUVSRjaAfqKHg=
Subject key identifier:   22:F1:0F:23:91:72:A3:70:EA:75:14:C4:62:5E:5C:2E:3F:64:B5:A0
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       05F6B54D398AFA5FB19FA3EA67CD5A977284CA92
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:28 +0000
ROA not before:           Tue 06 Jan 2026 19:26:28 +0000
ROA not after:            Tue 05 Jan 2027 19:31:28 +0000
asID:                     264688
IP address blocks:        190.196.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f6:b5:4d:39:8a:fa:5f:b1:9f:a3:ea:67:cd:5a:97:72:84:ca:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:28 2026 GMT
            Not After : Jan  5 19:31:28 2027 GMT
        Subject: CN=22F10F239172A370EA7514C4625E5C2E3F64B5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:d1:05:aa:c8:16:2b:e3:4f:22:36:77:6c:
                    0a:9d:8b:57:d5:76:f8:f8:15:4e:fd:dd:0f:30:3f:
                    e4:85:74:f9:d3:62:14:0b:cb:2d:fc:a9:b7:a9:ac:
                    77:13:e7:f3:5e:7d:b4:77:fc:42:f2:f6:19:fb:b5:
                    93:b5:a7:bc:cd:b1:a9:5c:89:fa:d0:26:53:47:59:
                    09:1a:6a:e5:a3:a4:33:61:c2:9a:bd:e6:49:4b:a4:
                    fb:51:b5:61:d3:6b:44:4e:91:0a:aa:25:e3:d3:95:
                    52:12:a7:49:d4:f9:51:6e:f8:ff:73:d1:72:4f:8f:
                    53:92:12:3e:ee:0a:8a:05:14:13:f2:0d:fa:67:c4:
                    0f:a4:1f:f7:00:7e:3b:91:9d:c2:a3:a0:ae:7a:11:
                    d0:a6:0f:d2:b2:ed:1c:bf:94:da:5b:27:bc:7c:ef:
                    ac:10:e7:d8:3e:99:3b:62:b6:08:8f:22:9d:6f:fe:
                    47:b0:02:f7:db:e3:bd:82:96:de:33:0f:a9:4e:31:
                    7d:38:62:73:98:37:22:41:83:fb:47:0a:c1:fa:e3:
                    88:de:c2:ed:de:93:18:d0:98:62:a7:ca:a5:88:6e:
                    71:e3:67:77:15:9d:ea:4b:2f:6c:4a:4c:a6:e3:aa:
                    ab:c8:6f:77:cd:05:88:64:ee:73:8a:18:05:f9:c1:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:0F:23:91:72:A3:70:EA:75:14:C4:62:5E:5C:2E:3F:64:B5:A0
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:e9:93:e0:59:61:18:24:0d:68:2d:1c:47:0b:cf:be:d1:
         06:4d:72:bc:bf:c4:78:09:29:4d:6c:b8:42:86:ca:5f:29:a4:
         fc:d1:cc:7f:49:18:03:21:20:c4:27:99:f0:b5:2a:64:e5:73:
         ac:44:ed:d6:c3:2c:86:75:05:05:f7:b9:67:95:a4:c3:e9:f0:
         0c:cf:e2:59:20:69:f0:8e:30:08:7e:e8:2b:cb:98:38:99:7b:
         af:19:d2:13:6b:ae:0e:24:16:01:8c:27:fc:fd:74:34:6d:6b:
         4a:dc:c8:ef:e2:e8:cb:db:04:a2:e1:d8:f4:62:a6:3a:87:47:
         fe:c2:98:2c:7b:a2:9c:9b:b1:6c:af:67:a5:d1:4c:d1:64:23:
         7c:42:7b:ab:2c:3c:6c:ea:f5:e3:1b:5e:dd:a2:db:3a:d2:c2:
         cb:8a:a8:ad:cb:0e:ad:f0:f1:cf:53:98:79:b1:f4:c5:28:f2:
         c5:a7:e5:d5:9e:16:53:ef:02:7c:3b:8a:86:a7:9e:62:f4:f9:
         5d:8e:89:b9:cb:5a:ee:cf:56:f9:5e:18:7c:87:f4:c7:e9:62:
         af:b4:b9:e5:69:7c:2f:c0:bf:d0:6c:f9:0f:3f:27:2f:25:2a:
         11:fe:a8:7a:ba:fe:1b:51:0e:03:7f:28:0f:ea:f0:0f:72:79:
         15:95:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:53 2026 by rpki-client