This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          Nu4sIdXuQnbqUOyy3B0UuHaGAnqdwZTbAIom0tuJxro=
Subject key identifier:   87:5E:50:AA:D7:C2:F0:35:BA:F1:86:95:DE:44:59:78:CE:61:EF:86
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       56209B59070222897396A6AF6E4434490B1D6878
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 06 Jan 2026 19:43:32 +0000
ROA not before:           Tue 06 Jan 2026 19:38:32 +0000
ROA not after:            Tue 05 Jan 2027 19:43:32 +0000
asID:                     263245
IP address blocks:        190.107.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:20:9b:59:07:02:22:89:73:96:a6:af:6e:44:34:49:0b:1d:68:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Jan  6 19:38:32 2026 GMT
            Not After : Jan  5 19:43:32 2027 GMT
        Subject: CN=875E50AAD7C2F035BAF18695DE445978CE61EF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:27:15:ce:cd:5d:9d:05:cb:ec:36:91:41:
                    e3:62:43:55:0c:58:7f:6a:50:55:cf:f6:74:80:cc:
                    ae:23:a5:ab:a3:da:c2:ea:74:4a:29:6f:53:4e:ee:
                    08:04:18:cb:aa:19:0f:e1:d9:4e:cf:51:09:97:de:
                    9a:3f:a1:fb:b2:63:b3:2d:ca:95:5a:58:b0:20:52:
                    4d:f5:3a:6e:43:ff:07:d4:97:52:c6:98:9c:77:9f:
                    f3:6c:02:01:2e:50:10:ab:e0:37:93:70:42:db:31:
                    3e:b7:80:b4:49:58:96:a5:34:a0:9a:15:78:a6:d0:
                    c2:0c:d9:9f:3a:cc:d1:be:48:14:1f:f2:49:ba:61:
                    c9:90:d5:be:45:f4:a9:1d:42:21:10:10:18:b4:e5:
                    63:b4:ef:42:c6:f8:c4:2e:8f:22:6d:dc:b2:aa:2d:
                    a3:0a:6b:2a:69:4e:31:46:fb:77:8e:c5:0b:3a:5a:
                    31:10:ae:dc:2e:48:fe:28:06:6f:f4:fe:ca:c8:b9:
                    58:f9:86:75:05:0c:7c:b6:a6:7e:5b:37:22:4c:3e:
                    0a:3a:68:10:5d:3c:c2:5e:b5:61:e2:63:a0:a6:23:
                    24:42:0f:c5:75:dd:66:60:80:7c:7e:69:59:3a:dc:
                    66:25:2b:24:49:0f:a0:63:c5:ad:ef:ce:b5:bb:e8:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:50:AA:D7:C2:F0:35:BA:F1:86:95:DE:44:59:78:CE:61:EF:86
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233322e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c8:07:aa:8f:8a:26:d8:8b:c5:97:36:f5:31:28:4a:1c:a4:
         67:ed:82:bd:41:dc:2b:b6:ea:98:a1:b2:50:06:43:54:36:e1:
         80:01:16:09:6c:24:4e:00:65:c9:e1:71:f2:70:ed:8a:6f:ce:
         2b:62:82:af:95:36:67:79:d4:d7:a4:52:a8:8b:df:d2:c6:48:
         41:ea:d7:a3:bb:5e:31:86:c8:f8:f9:51:df:44:ef:eb:fa:6d:
         54:19:91:86:c4:34:8e:53:33:88:df:5f:11:99:6c:bf:94:13:
         4b:08:17:a0:81:c7:a1:36:c2:88:c5:9a:4c:9e:b5:8d:e4:55:
         f7:90:07:bf:37:62:40:42:97:58:9c:5f:2a:2e:8e:50:d0:00:
         20:55:24:9e:8b:6c:99:c0:63:fd:4d:6a:5a:af:f3:59:5f:41:
         05:1a:09:3f:4a:4a:08:1c:fe:04:e2:a0:c4:e5:1b:ba:db:40:
         3f:98:70:a7:f5:da:f8:94:d6:68:43:f0:be:e1:6d:c1:b5:57:
         f3:76:72:ec:df:00:66:a2:10:eb:85:57:d6:3d:d2:1a:da:ee:
         f7:cf:af:fd:03:f0:bc:fb:c7:6b:c7:db:ba:c8:02:d5:c2:7d:
         5a:a6:1b:ad:1f:bb:3b:6c:70:ac:b3:01:9b:85:e2:68:d1:8f:
         f1:8a:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:26:07 2026 by rpki-client