This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3130372e32302e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          ks/Kn4xkrb/vM92hLI0KjxBlfmDt56IfqNiEr6HgI8s=
Subject key identifier:   70:3F:98:37:E8:90:08:49:A6:0F:C0:94:42:AB:FD:1A:E4:C8:A3:22
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       3031D777D3A28837D8A097DF3E4E0480053FF37B
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 20:48:40 +0000
ROA not before:           Tue 06 Jan 2026 20:43:40 +0000
ROA not after:            Tue 05 Jan 2027 20:48:40 +0000
asID:                     262589
IP address blocks:        190.107.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 00:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:31:d7:77:d3:a2:88:37:d8:a0:97:df:3e:4e:04:80:05:3f:f3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:40 2026 GMT
            Not After : Jan  5 20:48:40 2027 GMT
        Subject: CN=703F9837E8900849A60FC09442ABFD1AE4C8A322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:a5:6d:50:c6:e4:35:95:fc:e1:d6:42:21:
                    9e:a0:b5:9f:8f:3c:89:e4:22:f3:5a:79:1a:04:53:
                    79:62:a2:94:b2:70:9f:40:20:2c:9e:7f:18:e3:23:
                    73:f3:bf:b0:e0:5b:25:97:2b:09:0e:2a:7c:f2:9c:
                    a8:d8:24:0d:21:a7:83:35:e5:2a:d3:be:7e:06:95:
                    56:31:12:a6:2b:7e:10:86:fc:14:30:4e:02:42:64:
                    08:fe:d6:28:11:5d:e8:78:94:43:90:2d:7e:44:05:
                    ca:58:42:cc:a0:12:fd:98:5c:83:69:d6:5c:d3:a4:
                    48:5b:56:93:af:e1:75:9f:8a:95:7a:0a:42:22:17:
                    27:46:f8:2e:ae:99:24:f3:13:ed:02:cf:ce:1e:45:
                    16:2b:4b:9a:5c:ef:cb:34:5d:51:c4:c3:25:89:25:
                    83:ac:82:9f:80:4a:8e:12:15:93:05:59:e6:a5:43:
                    94:25:83:41:a2:16:68:f5:80:4e:ab:e2:9f:4f:b8:
                    1a:45:1d:07:89:2c:53:6c:f5:d7:da:c8:11:b5:77:
                    9f:3f:ee:cc:ee:73:18:7b:7e:5e:40:54:82:69:27:
                    39:47:e8:5c:5c:cd:eb:2e:22:ab:26:b7:d3:a6:c2:
                    dd:3f:7a:78:fa:6a:e2:3c:50:9b:74:c5:ce:82:b9:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:98:37:E8:90:08:49:A6:0F:C0:94:42:AB:FD:1A:E4:C8:A3:22
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:0a:8a:79:fa:80:4d:fb:96:26:6c:3e:55:c9:73:6f:67:
         15:b2:0c:0d:c3:aa:6c:47:24:fb:e1:60:17:f7:fe:c9:53:b6:
         95:8f:37:05:45:62:31:25:ca:6e:1e:0d:2b:b9:ee:f5:8b:b1:
         35:7a:20:37:39:08:b2:e2:61:3f:f0:88:1d:1c:74:85:34:66:
         fd:0e:b8:c0:df:ce:b6:b4:62:d0:03:eb:ae:99:ed:08:e8:10:
         36:43:a1:7f:73:5d:84:12:a4:41:cc:75:14:f9:a2:79:1f:65:
         87:4e:f0:a5:1e:47:c9:65:fa:7c:9a:61:53:b5:ad:07:75:a8:
         f5:d8:73:5d:c3:47:36:45:35:0b:00:72:90:b8:73:37:cc:12:
         b7:57:30:0a:44:df:1d:eb:39:d3:d9:bd:7d:0b:0b:a7:8f:c1:
         4a:45:d2:e9:34:c9:d4:fe:92:96:0f:94:0e:cd:29:a7:60:c5:
         c0:0c:cd:ca:8a:70:f7:dc:b1:e1:64:74:34:d1:e5:8e:05:2d:
         97:95:79:02:5d:4e:ec:92:e7:1b:69:fc:1d:61:c3:01:59:f4:
         80:e7:73:b9:f8:95:e3:a0:ae:11:fa:47:f6:14:00:aa:f4:84:
         ca:2c:7e:b1:25:4b:38:ce:a7:36:03:89:ec:09:21:5b:28:37:
         41:37:e7:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMDHXd9OiiDfYoJffPk4EgAU/83swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNjAxMDYyMDQzNDBaFw0yNzAxMDUyMDQ4NDBaMDMxMTAvBgNV
BAMTKDcwM0Y5ODM3RTg5MDA4NDlBNjBGQzA5NDQyQUJGRDFBRTRDOEEzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnaVtUMbkNZX84dZCIZ6gtZ+P
PInkIvNaeRoEU3liopSycJ9AICyefxjjI3Pzv7DgWyWXKwkOKnzynKjYJA0hp4M1
5SrTvn4GlVYxEqYrfhCG/BQwTgJCZAj+1igRXeh4lEOQLX5EBcpYQsygEv2YXINp
1lzTpEhbVpOv4XWfipV6CkIiFydG+C6umSTzE+0Cz84eRRYrS5pc78s0XVHEwyWJ
JYOsgp+ASo4SFZMFWealQ5Qlg0GiFmj1gE6r4p9PuBpFHQeJLFNs9dfayBG1d58/
7szucxh7fl5AVIJpJzlH6FxczesuIqsmt9Omwt0/enj6auI8UJt0xc6CuaslAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcD+YN+iQCEmmD8CUQqv9GuTIoyIwHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzkzMDJlMzEzMDM3MmUzMjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzUzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmsU
MA0GCSqGSIb3DQEBCwUAA4IBAQCDyQqKefqATfuWJmw+Vclzb2cVsgwNw6psRyT7
4WAX9/7JU7aVjzcFRWIxJcpuHg0rue71i7E1eiA3OQiy4mE/8IgdHHSFNGb9DrjA
3862tGLQA+uume0I6BA2Q6F/c12EEqRBzHUU+aJ5H2WHTvClHkfJZfp8mmFTta0H
daj12HNdw0c2RTULAHKQuHM3zBK3VzAKRN8d6znT2b19Cwunj8FKRdLpNMnU/pKW
D5QOzSmnYMXADM3KinD33LHhZHQ00eWOBS2XlXkCXU7skucbafwdYcMBWfSA53O5
+JXjoK4R+kf2FACq9ITKLH6xJUs4zqc2A4nsCSFbKDdBN+cG
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:31 2026 by rpki-client