This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          zBCLe9UX2wwfcepCQnskAyycLuiICT7o16/bqzwfc7g=
Subject key identifier:   8B:F4:85:64:64:41:85:6A:F9:D9:E4:56:27:9C:18:3F:CF:AD:29:4E
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       44A886C199D32C8091DBA9E7CCE082BF1C19CF4C
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 06 Jan 2026 19:31:28 +0000
ROA not before:           Tue 06 Jan 2026 19:26:28 +0000
ROA not after:            Tue 05 Jan 2027 19:31:28 +0000
asID:                     264688
IP address blocks:        190.196.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a8:86:c1:99:d3:2c:80:91:db:a9:e7:cc:e0:82:bf:1c:19:cf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Jan  6 19:26:28 2026 GMT
            Not After : Jan  5 19:31:28 2027 GMT
        Subject: CN=8BF485646441856AF9D9E456279C183FCFAD294E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:0c:13:f4:dd:18:08:53:11:63:3f:38:1a:
                    0a:db:7e:ec:18:16:9b:e6:09:ec:c0:bf:0d:4d:40:
                    4a:43:0a:64:a9:8f:33:b6:b9:a1:62:8c:51:5f:4b:
                    5b:68:c8:57:ea:f6:f9:0d:08:44:d1:8c:80:31:1d:
                    79:15:6f:47:7f:85:5f:be:97:6c:57:44:56:13:0e:
                    d6:0e:48:98:f1:d7:61:e9:6f:8d:26:78:d6:a8:08:
                    07:22:0b:aa:32:9b:d5:ea:65:4d:b3:f2:37:ee:f4:
                    8b:33:b5:b7:d7:b6:77:da:e7:28:2b:3e:9f:42:a5:
                    b6:26:ee:55:37:c3:55:f8:d4:22:84:bd:98:29:61:
                    ad:ca:97:23:4b:56:60:c5:49:35:32:9b:12:48:91:
                    8b:1d:ee:7a:a7:03:ec:5f:32:7c:4a:af:e0:c9:0d:
                    68:d1:80:6a:95:54:0c:fa:7b:a2:0a:21:fb:72:f7:
                    25:09:dd:c5:43:aa:ef:52:18:01:3b:16:30:9a:50:
                    bb:21:d7:27:32:7a:e3:16:5d:5c:be:56:d8:31:0c:
                    c4:d0:d9:88:88:ac:cb:ab:81:41:8b:23:2d:b8:f7:
                    f2:86:f8:5d:9a:28:ed:ca:69:87:03:7e:bf:7e:b7:
                    2a:6c:54:e3:35:89:e5:41:98:d8:1b:e2:27:ac:4f:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:85:64:64:41:85:6A:F9:D9:E4:56:27:9C:18:3F:CF:AD:29:4E
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233332e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:1b:e2:f4:93:95:d5:0f:e9:aa:26:06:47:92:9a:47:db:
         ed:a2:e5:86:00:f7:1f:69:17:f6:94:08:e6:3b:a1:f9:e9:35:
         c0:f1:9a:17:40:c9:7d:fc:13:b6:41:33:aa:4d:5c:89:68:a3:
         d1:ae:4d:5a:23:7a:84:a0:b8:c4:31:fa:d4:6f:9d:d2:63:af:
         e2:40:0a:fd:ac:b4:0a:fe:6e:a5:c1:5b:2d:3d:79:9b:c3:69:
         43:e5:54:c6:ac:87:ee:51:9b:9e:7d:87:ce:7a:66:77:fb:db:
         ba:3a:50:d5:6b:04:1b:b0:4a:55:bf:d7:7d:36:5b:81:a0:73:
         2c:a4:d4:7b:40:47:c9:16:9b:32:d0:ed:f0:a8:99:99:14:38:
         0b:6d:a3:5a:f5:c3:b9:7d:ce:6d:13:b4:5e:14:3b:48:8e:86:
         5f:39:0f:f8:0e:e9:c2:f1:a4:ae:09:ae:5c:14:0e:86:4b:74:
         6e:86:69:76:19:ca:55:eb:18:de:77:fe:bf:45:6d:46:c2:70:
         1c:60:ec:f9:d8:7b:c6:a4:cb:d7:c1:ad:de:a8:07:39:e6:98:
         60:a6:6c:51:91:0a:64:73:64:f2:e9:4b:fa:9b:06:4d:4c:0e:
         39:44:0d:97:60:d3:fd:f3:0d:99:d1:4b:83:f1:b7:29:bf:5b:
         f3:a4:2d:95
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURKiGwZnTLICR26nnzOCCvxwZz0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNjAxMDYxOTI2MjhaFw0yNzAxMDUxOTMxMjhaMDMxMTAvBgNV
BAMTKDhCRjQ4NTY0NjQ0MTg1NkFGOUQ5RTQ1NjI3OUMxODNGQ0ZBRDI5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMAwT9N0YCFMRYz84GgrbfuwY
FpvmCezAvw1NQEpDCmSpjzO2uaFijFFfS1toyFfq9vkNCETRjIAxHXkVb0d/hV++
l2xXRFYTDtYOSJjx12Hpb40meNaoCAciC6oym9XqZU2z8jfu9IsztbfXtnfa5ygr
Pp9CpbYm7lU3w1X41CKEvZgpYa3KlyNLVmDFSTUymxJIkYsd7nqnA+xfMnxKr+DJ
DWjRgGqVVAz6e6IKIfty9yUJ3cVDqu9SGAE7FjCaULsh1ycyeuMWXVy+VtgxDMTQ
2YiIrMurgUGLIy249/KG+F2aKO3KaYcDfr9+typsVOM1ieVBmNgb4iesT4jvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUi/SFZGRBhWr52eRWJ5wYP8+tKU4wHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzOTM2MmUzMjMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
xOkwDQYJKoZIhvcNAQELBQADggEBAEqpG+L0k5XVD+mqJgZHkppH2+2i5YYA9x9p
F/aUCOY7ofnpNcDxmhdAyX38E7ZBM6pNXIloo9GuTVojeoSguMQx+tRvndJjr+JA
Cv2stAr+bqXBWy09eZvDaUPlVMash+5Rm559h856Znf727o6UNVrBBuwSlW/1302
W4Ggcyyk1HtAR8kWmzLQ7fComZkUOAtto1r1w7l9zm0TtF4UO0iOhl85D/gO6cLx
pK4JrlwUDoZLdG6GaXYZylXrGN53/r9FbUbCcBxg7PnYe8aky9fBrd6oBznmmGCm
bFGRCmRzZPLpS/qbBk1MDjlEDZdg0/3zDZnRS4Pxtym/W/OkLZU=
-----END CERTIFICATE-----
Generated at Tue Jan 13 02:54:48 2026 by rpki-client