This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
File:                     3139302e302e3233322e302f32312d3234203d3e203238303733.roa (raw, json)
Hash identifier:          0DSCwyIPJRnWzIGwtTeFQQoWUqtJ5ASS4IcD/gX4Vug=
Subject key identifier:   BD:D1:BB:EE:A7:1E:F4:2B:85:41:68:FB:4E:AB:2E:EF:24:32:5E:1C
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       330C6E0471805E2C480460D99DF95923562E6835
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
Signing time:             Tue 06 Jan 2026 19:43:37 +0000
ROA not before:           Tue 06 Jan 2026 19:38:37 +0000
ROA not after:            Tue 05 Jan 2027 19:43:37 +0000
asID:                     28073
IP address blocks:        190.0.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 22:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0c:6e:04:71:80:5e:2c:48:04:60:d9:9d:f9:59:23:56:2e:68:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Jan  6 19:38:37 2026 GMT
            Not After : Jan  5 19:43:37 2027 GMT
        Subject: CN=BDD1BBEEA71EF42B854168FB4EAB2EEF24325E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:c0:5b:a1:6f:83:ff:8b:38:2a:93:5c:bd:
                    84:a8:2a:b2:a9:bc:ee:5d:5c:70:05:f7:45:68:45:
                    7f:b9:88:13:de:60:cd:6e:fd:6a:ba:f8:3f:91:64:
                    84:ca:8a:95:05:ef:a8:d1:3d:62:a7:4d:62:e0:56:
                    0e:06:3b:34:bd:94:18:1a:6f:9e:06:58:93:83:29:
                    3e:f9:1d:4f:0a:de:d1:9b:01:ff:24:42:8c:0a:a2:
                    90:83:02:61:d3:71:a0:48:88:8f:fa:ec:81:15:0e:
                    28:45:e5:a5:75:bb:06:fd:0d:74:d2:5a:d0:ef:f9:
                    14:10:e4:d9:41:07:1e:78:f0:a7:c8:9b:b6:fe:cb:
                    eb:3c:af:57:82:ee:1c:b2:7f:d5:4c:f3:6d:83:1c:
                    15:91:95:a4:91:95:cf:17:fd:38:0a:dc:fb:bc:5e:
                    21:d6:ae:8e:47:ef:ce:08:7d:66:33:c7:a6:f5:ac:
                    1c:5c:63:89:90:ee:fb:ea:35:0e:9d:ba:d0:56:93:
                    08:e1:8c:c6:af:e0:64:fa:bc:2e:ae:06:65:42:78:
                    e0:d7:17:c7:43:26:67:88:bb:ba:ce:b2:d8:98:43:
                    7b:f9:c9:78:b9:d0:39:b0:f3:93:32:4d:a1:54:17:
                    ae:68:49:89:9c:07:70:91:75:a8:c6:a9:97:f5:35:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:BB:EE:A7:1E:F4:2B:85:41:68:FB:4E:AB:2E:EF:24:32:5E:1C
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:f9:5f:17:2d:82:1c:36:3d:ac:91:79:1c:58:bf:8f:9e:
         52:48:41:d9:3f:31:68:a0:3d:85:b9:39:72:6d:a5:5a:fa:a7:
         60:a5:7e:4e:e2:7c:30:e7:b6:55:02:ff:87:b6:c8:d5:0a:87:
         c0:92:d3:4b:28:75:68:f5:af:b4:a3:55:ee:ca:67:8a:90:85:
         4a:45:0d:6b:6e:f3:0f:99:97:d9:3a:5b:45:1f:c1:95:5c:38:
         6f:47:d7:c4:01:6e:57:e2:34:71:92:2f:0c:1f:6a:4b:8e:a3:
         8e:c8:b8:02:df:c2:eb:a8:7b:fe:11:e2:e0:3e:76:82:53:35:
         91:95:58:ac:24:31:83:67:ce:b6:d4:15:55:2c:14:9b:a7:38:
         7b:15:24:51:3f:6b:56:27:35:77:45:63:f3:af:88:ab:82:d2:
         51:ce:66:5d:c3:a5:7c:ba:9b:c1:9f:4b:73:0c:81:45:fa:ae:
         ed:fb:9d:8a:c6:b1:35:df:49:81:3c:ca:e3:1e:6c:c5:84:b3:
         1f:eb:c7:df:72:6a:b4:76:e1:54:6e:aa:db:d4:be:61:68:f8:
         52:70:3f:20:87:a0:c6:9c:4a:3d:1c:d1:52:57:9b:4e:ac:74:
         3e:dc:9b:93:87:eb:12:8d:ea:82:ed:61:47:7f:da:3c:a1:61:
         69:68:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:18:18 2026 by rpki-client