This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135382e36342f32362d3236203d3e203139303437.roa
File:                     3139302e39382e3135382e36342f32362d3236203d3e203139303437.roa (raw, json)
Hash identifier:          WEMHdPhY2xBRbsjk+EC7Omg6fzb/vWRrdACOW08YjWo=
Subject key identifier:   25:5D:DB:16:DC:EE:FA:86:7F:81:A1:91:7F:27:02:B1:EF:22:D5:9F
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       05AA61DD75705D45830C9914C415FF5D888FF3E2
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135382e36342f32362d3236203d3e203139303437.roa
Signing time:             Tue 06 Jan 2026 19:20:33 +0000
ROA not before:           Tue 06 Jan 2026 19:15:33 +0000
ROA not after:            Tue 05 Jan 2027 19:20:33 +0000
asID:                     19047
IP address blocks:        190.98.158.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 10:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:aa:61:dd:75:70:5d:45:83:0c:99:14:c4:15:ff:5d:88:8f:f3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Jan  6 19:15:33 2026 GMT
            Not After : Jan  5 19:20:33 2027 GMT
        Subject: CN=255DDB16DCEEFA867F81A1917F2702B1EF22D59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:93:a1:24:f1:bb:e9:f7:5c:32:2f:8f:1c:
                    55:ff:ce:90:f8:00:54:94:5b:f4:39:fb:11:40:6b:
                    42:9c:25:65:17:8d:d6:7c:00:8b:88:6f:6e:a8:3b:
                    a9:23:11:c6:0f:92:cc:41:75:36:a9:61:bc:0c:a0:
                    3e:0e:3b:64:88:37:22:8c:b9:17:58:7e:e9:8d:de:
                    13:72:bd:e9:31:07:a3:d4:bd:f4:3f:c0:17:49:e9:
                    3e:73:96:de:51:7a:e0:d6:db:31:68:59:ba:3f:5c:
                    f8:78:af:e3:a4:1e:03:52:f4:7c:dd:27:64:fd:28:
                    c4:16:54:e6:c4:eb:e9:91:59:28:78:fe:bb:a6:6f:
                    a0:f1:61:84:79:43:71:06:38:0d:6d:07:69:e5:de:
                    b3:8f:51:94:88:5f:ae:a5:1c:49:c6:a5:dc:dc:4a:
                    ec:08:e8:fc:95:aa:ea:73:12:1b:47:41:e4:d9:07:
                    82:4c:1b:f7:87:72:a7:6a:01:f6:7c:bf:c3:ae:9c:
                    e2:8a:ff:95:5c:27:cc:de:4c:85:ff:33:c2:8d:89:
                    fb:e9:9b:36:0e:58:18:ed:76:06:c9:bf:6e:9f:88:
                    22:b9:c0:35:5b:72:b9:4b:30:6f:8c:ce:0f:a8:f4:
                    1c:c8:db:a8:79:93:47:ae:57:11:87:f9:66:25:c0:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:DB:16:DC:EE:FA:86:7F:81:A1:91:7F:27:02:B1:EF:22:D5:9F
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3135382e36342f32362d3236203d3e203139303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.158.64/26

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:c2:16:7b:e2:dc:5f:f9:0c:bc:7b:5b:6b:45:7e:be:4d:
         9a:63:82:29:1b:25:d7:d7:10:6c:bb:1d:b8:a0:50:ff:5a:7d:
         5f:a9:a6:db:f6:b5:79:27:09:04:9a:8a:e3:ef:21:0a:f2:e9:
         af:38:4d:f4:a1:be:2e:99:e0:69:6b:fe:83:93:f7:4e:87:99:
         5a:14:d9:aa:20:4d:c9:9f:37:1c:bb:a7:31:bb:14:87:f8:30:
         4b:ff:44:d5:0e:ec:90:64:1f:9b:b7:90:9b:36:6a:8a:86:66:
         34:48:91:7c:6c:5e:5c:a8:f8:4f:24:a8:21:85:42:34:46:ff:
         21:e6:e1:37:a9:73:c0:6f:1e:0c:2a:1c:f9:f6:9f:4d:2a:48:
         e2:54:ae:3e:9c:93:79:f0:ea:c7:4d:b2:ec:51:15:d4:bd:55:
         4c:6f:04:0c:4a:6e:fc:41:e0:30:87:50:2a:15:7f:06:e3:14:
         25:06:23:df:7b:61:42:3b:00:5a:c1:a0:c0:22:7a:f2:7b:cf:
         66:ba:73:ba:ae:a5:d0:c6:7e:f2:d9:30:9d:7e:2d:c2:00:85:
         5a:ce:ea:42:80:d7:e1:01:43:50:23:e0:40:1d:09:a9:a1:89:
         8d:d9:93:83:16:57:e7:f6:ac:e9:d2:1f:8e:55:7d:15:99:e2:
         f0:ce:9b:c3
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUBaph3XVwXUWDDJkUxBX/XYiP8+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxQUJGMjM3Mjc3RkVBRjI0MTE3RUJCRTI4RDlENTdF
NDQyNDMzQTAeFw0yNjAxMDYxOTE1MzNaFw0yNzAxMDUxOTIwMzNaMDMxMTAvBgNV
BAMTKDI1NUREQjE2RENFRUZBODY3RjgxQTE5MTdGMjcwMkIxRUYyMkQ1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR3JOhJPG76fdcMi+PHFX/zpD4
AFSUW/Q5+xFAa0KcJWUXjdZ8AIuIb26oO6kjEcYPksxBdTapYbwMoD4OO2SINyKM
uRdYfumN3hNyvekxB6PUvfQ/wBdJ6T5zlt5ReuDW2zFoWbo/XPh4r+OkHgNS9Hzd
J2T9KMQWVObE6+mRWSh4/rumb6DxYYR5Q3EGOA1tB2nl3rOPUZSIX66lHEnGpdzc
SuwI6PyVqupzEhtHQeTZB4JMG/eHcqdqAfZ8v8OunOKK/5VcJ8zeTIX/M8KNifvp
mzYOWBjtdgbJv26fiCK5wDVbcrlLMG+Mzg+o9BzI26h5k0euVxGH+WYlwC8dAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUJV3bFtzu+oZ/gaGRfycCse8i1Z8wHwYDVR0j
BBgwFoAUthq/I3J3/q8kEX674o2dV+RCQzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRDlEODEwOUI1QjBFRDg2RkY5MUMwMjJEOTY0MTJENkRB
MDg2Qjg2NDlDNTk3NUJBREVCMzY5RjUwRjIzOTIzLzAvQjYxQUJGMjM3Mjc3RkVB
RjI0MTE3RUJCRTI4RDlENTdFNDQyNDMzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjFBQkYyMzcyNzdGRUFGMjQx
MTdFQkJFMjhEOUQ1N0U0NDI0MzNBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUQ5RDgxMDlCNUIwRUQ4NkZGOTFDMDIyRDk2NDEyRDZEQTA4NkI4NjQ5
QzU5NzVCQURFQjM2OUY1MEYyMzkyMy8wLzMxMzkzMDJlMzkzODJlMzEzNTM4MmUz
NjM0MmYzMjM2MmQzMjM2MjAzZDNlMjAzMTM5MzAzNDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGvmKe
QDANBgkqhkiG9w0BAQsFAAOCAQEAarnCFnvi3F/5DLx7W2tFfr5NmmOCKRsl19cQ
bLsduKBQ/1p9X6mm2/a1eScJBJqK4+8hCvLprzhN9KG+LpngaWv+g5P3ToeZWhTZ
qiBNyZ83HLunMbsUh/gwS/9E1Q7skGQfm7eQmzZqioZmNEiRfGxeXKj4TySoIYVC
NEb/IebhN6lzwG8eDCoc+fafTSpI4lSuPpyTefDqx02y7FEV1L1VTG8EDEpu/EHg
MIdQKhV/BuMUJQYj33thQjsAWsGgwCJ68nvPZrpzuq6l0MZ+8tkwnX4twgCFWs7q
QoDX4QFDUCPgQB0JqaGJjdmTgxZX5/as6dIfjlV9FZni8M6bww==
-----END CERTIFICATE-----
Generated at Thu Jan 8 23:58:40 2026 by rpki-client