This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135372e302f32342d3234203d3e203532323333.roa
File:                     3139302e342e3135372e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          69PKtziQ7UtYVhSOVUA4rHDZAh22zHPQCJ5jGQHyYU4=
Subject key identifier:   DB:0B:9F:22:F2:AA:AC:5D:D3:C5:EF:C2:23:BE:D4:60:C0:8B:B2:F2
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       3FCD52E6013CA2D7CE831A1423A908C223B5A2C3
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135372e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:25 +0000
ROA not before:           Tue 06 Jan 2026 19:38:25 +0000
ROA not after:            Tue 05 Jan 2027 19:43:25 +0000
asID:                     52233
IP address blocks:        190.4.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cd:52:e6:01:3c:a2:d7:ce:83:1a:14:23:a9:08:c2:23:b5:a2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:25 2026 GMT
            Not After : Jan  5 19:43:25 2027 GMT
        Subject: CN=DB0B9F22F2AAAC5DD3C5EFC223BED460C08BB2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:98:15:83:eb:0e:b7:ab:0d:ea:e4:0d:de:
                    6d:df:a0:c3:1c:34:bd:79:81:4a:26:36:35:2b:04:
                    6b:d5:8b:a1:0e:70:a9:96:db:4b:73:78:22:ba:4b:
                    43:ba:b8:a5:82:a7:53:c3:04:2d:3c:71:71:a9:be:
                    cd:6d:3a:76:45:aa:e6:b8:d7:7c:81:43:b0:fc:44:
                    e1:da:d6:d4:91:cc:97:1f:de:50:0d:d9:d0:2d:ae:
                    2b:44:25:51:f6:2d:37:00:13:7f:8f:78:f7:e6:1d:
                    cd:d8:47:68:ae:a6:5c:c9:b9:4b:f7:5f:75:2c:e4:
                    45:ba:c9:e7:c5:dc:05:93:d2:bc:41:49:19:16:73:
                    72:99:26:f9:63:15:a9:8b:4c:fc:99:ae:00:43:44:
                    06:37:c9:e5:ec:f5:ce:61:38:4b:1f:d7:7f:3c:a3:
                    ad:f5:3f:e1:6c:4f:50:71:3f:0d:e8:c7:47:5d:45:
                    57:71:97:54:61:38:d9:a0:49:0a:3b:23:2b:22:0d:
                    44:b4:25:68:42:40:9f:94:3d:b6:ed:ed:e5:e0:73:
                    50:9e:88:f2:7c:37:82:95:4d:5d:4a:f1:e0:b4:57:
                    85:d1:fe:2a:79:a9:4d:6d:a9:6f:19:a0:dd:cb:c6:
                    88:4f:25:4c:e4:0e:20:b9:ce:c7:3b:1d:12:52:b5:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:9F:22:F2:AA:AC:5D:D3:C5:EF:C2:23:BE:D4:60:C0:8B:B2:F2
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135372e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:b1:84:45:6d:82:c8:8a:8d:12:d4:4b:19:25:4f:03:c6:
         91:c1:78:ad:1a:d1:bc:1a:6c:d1:44:ff:1a:40:ba:6e:e3:7c:
         b0:85:ea:9f:c1:d2:c1:4d:06:89:7f:0d:98:24:d6:5a:a4:3f:
         2b:42:ac:f2:f2:62:b7:71:02:a3:21:80:38:11:a4:d4:c0:ab:
         6f:ad:c9:f4:91:11:c9:93:69:bb:9c:87:f3:b2:14:9a:8f:22:
         e3:56:61:3c:de:fd:a2:da:25:4b:58:67:2c:1b:7b:96:9a:5a:
         8d:5f:e9:1f:cf:84:f4:b7:04:d0:6b:db:24:4e:95:51:c9:bf:
         e7:0a:a2:c8:5a:0d:33:3c:83:b5:07:b6:5d:ae:a0:ce:4b:f5:
         3d:28:39:53:af:e6:85:64:e9:36:bf:af:70:36:10:e5:4d:5a:
         01:c3:a9:28:c5:98:b4:6e:d1:d3:60:0c:9a:a7:dd:f5:28:12:
         8d:5c:ed:a2:69:9f:b8:a2:c8:58:48:9f:a1:45:16:09:e4:55:
         e3:37:d9:87:08:ad:b7:db:29:0a:50:e7:03:b7:db:dd:08:5e:
         d0:93:1f:3b:59:61:0d:bf:88:69:36:cd:62:43:b5:67:94:bd:
         86:c4:fd:c5:c9:7d:37:14:1b:6a:8a:ce:55:43:ec:7c:7e:89:
         be:ec:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:37:01 2026 by rpki-client