This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          eYS+d15/4aoEmtgMInU5L3BxSKD4MrEjwIIBXcI5XrA=
Subject key identifier:   60:34:EE:78:13:12:4C:F1:CD:55:7F:4B:50:F7:8F:5B:6A:0A:16:6F
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       5E745419C24BD74EB9EA57C300184E771B80DAE7
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:24 +0000
ROA not before:           Tue 06 Jan 2026 19:26:24 +0000
ROA not after:            Tue 05 Jan 2027 19:31:24 +0000
asID:                     264688
IP address blocks:        190.196.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:74:54:19:c2:4b:d7:4e:b9:ea:57:c3:00:18:4e:77:1b:80:da:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:24 2026 GMT
            Not After : Jan  5 19:31:24 2027 GMT
        Subject: CN=6034EE7813124CF1CD557F4B50F78F5B6A0A166F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:8d:d4:d3:63:10:ce:20:a9:c4:00:53:60:
                    c4:32:da:e7:ec:72:be:73:23:42:39:9b:44:09:8f:
                    a2:07:08:69:7d:97:13:e5:e5:7b:33:c5:e0:1a:a6:
                    85:e9:d0:22:ce:0c:5f:b9:5e:ed:db:fa:f0:7e:60:
                    54:15:a4:8e:79:86:01:aa:33:3d:39:b1:ea:dd:46:
                    6f:9c:ef:e6:8d:02:94:02:e4:22:1d:8c:73:2a:c5:
                    f5:5d:fd:28:97:d0:34:d5:ee:ec:72:52:bf:61:f0:
                    ed:2b:64:49:90:86:42:f9:15:08:07:91:b4:6f:47:
                    9e:f8:1f:3b:7b:79:00:a7:59:9f:27:4c:9d:f9:e6:
                    7b:d6:5e:a2:0b:2f:ef:7a:fc:e0:94:b7:ee:6a:ec:
                    c6:7b:0a:78:54:25:8e:73:b2:c7:3a:d9:f1:e5:ea:
                    5b:8e:a9:bd:3d:f0:e6:f5:f2:e8:a1:88:ab:95:c1:
                    e6:f3:9e:b8:d0:c4:61:2b:77:40:a5:d7:35:08:b8:
                    7c:d5:89:8a:a4:4a:f4:4c:2c:79:e6:f6:7a:e7:24:
                    81:c5:a3:6d:89:a2:f2:33:84:96:b7:8d:c7:c3:99:
                    05:19:30:a6:d7:0e:fe:a3:c3:cb:c4:4e:39:d5:26:
                    9d:7b:6a:ea:b3:d9:5d:2d:8b:6d:61:76:4c:17:c4:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:EE:78:13:12:4C:F1:CD:55:7F:4B:50:F7:8F:5B:6A:0A:16:6F
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233322e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:69:14:6a:33:ef:9b:49:92:57:79:5c:a1:1d:9f:f5:8a:
         17:fb:e3:b3:10:47:07:27:6c:85:d7:c2:fb:92:b7:ca:66:26:
         5b:75:13:8f:71:f3:11:9a:ca:4f:8e:a0:6c:60:c0:40:4f:6d:
         fc:8d:1f:b5:6f:b4:89:b7:88:a4:47:e5:fe:a4:5c:46:cd:41:
         5d:75:1f:53:c9:83:27:d7:9f:95:5a:0d:4e:fa:fa:c6:84:19:
         29:82:e9:1e:2c:3b:27:03:15:9b:11:dc:33:dd:d4:c7:d4:1d:
         20:44:1f:77:78:b8:1a:dd:fa:71:b1:6d:e9:6e:7a:c6:0e:9e:
         3d:c2:8f:bb:c0:1c:4b:90:3e:46:56:15:76:20:aa:91:ed:01:
         df:03:ef:f5:8d:24:04:23:d3:79:75:04:86:cc:03:04:3b:dc:
         33:01:72:47:e6:a1:53:68:53:9a:30:88:37:f0:45:a1:38:a3:
         be:50:4c:88:fd:08:a6:f1:a4:85:5f:31:5a:81:19:ff:4b:b5:
         87:b5:6b:26:93:a5:3b:cc:64:ab:61:54:76:9a:0c:d1:a2:92:
         a1:83:7c:ba:42:85:c4:2d:de:d1:0b:77:05:49:f9:c7:0c:72:
         7b:bd:78:18:c6:2d:a3:16:bf:41:5c:19:7f:1f:52:e3:a0:06:
         76:cf:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:52 2026 by rpki-client