This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e302e302f31362d3234203d3e203136383134.roa
File:                     3139302e3231302e302e302f31362d3234203d3e203136383134.roa (raw, json)
Hash identifier:          dgyqTudQX8JzBSbXhrdBPmZmvsV9HuI4391lyRw5yAA=
Subject key identifier:   53:21:75:B1:6C:4F:F4:C5:26:4F:F6:8D:76:F5:34:B8:A1:7D:59:0A
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       0E33894B829802836B9EBE3CED3F78BA1BC89C42
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e302e302f31362d3234203d3e203136383134.roa
Signing time:             Tue 06 Jan 2026 20:55:05 +0000
ROA not before:           Tue 06 Jan 2026 20:50:05 +0000
ROA not after:            Tue 05 Jan 2027 20:55:05 +0000
asID:                     16814
IP address blocks:        190.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:33:89:4b:82:98:02:83:6b:9e:be:3c:ed:3f:78:ba:1b:c8:9c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:05 2026 GMT
            Not After : Jan  5 20:55:05 2027 GMT
        Subject: CN=532175B16C4FF4C5264FF68D76F534B8A17D590A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:fd:5e:67:e9:d7:20:bb:11:66:66:29:20:
                    1b:be:1c:96:22:99:a6:ec:a8:57:0d:0a:2e:28:53:
                    87:f2:76:c3:12:b1:97:af:20:79:89:2b:ae:52:6a:
                    e7:5f:58:f4:80:76:fc:7d:2d:87:92:20:c5:2d:89:
                    ac:7d:12:ae:66:f4:a8:94:b7:39:db:d6:93:fb:ad:
                    5f:49:12:44:13:4e:a7:9a:76:1c:83:00:74:21:f9:
                    de:9d:be:4b:50:61:a1:f3:4b:9c:95:c1:c9:d5:41:
                    72:90:8f:ea:19:1b:1e:37:bc:8d:1d:a0:b8:e5:4e:
                    ae:b9:2b:f8:62:bc:98:32:6f:58:d9:82:2b:85:cc:
                    ce:91:f9:20:eb:a0:40:a9:8e:a9:10:88:93:0b:02:
                    ec:b8:27:bf:95:c4:c7:87:07:1a:0f:be:7c:e8:52:
                    27:61:9e:66:e5:66:82:fb:cb:5f:60:9d:5a:81:cc:
                    a8:cd:fb:ac:7e:5a:63:25:21:23:31:f8:55:20:26:
                    c7:18:bd:8a:d6:0c:72:7a:18:c8:23:1e:63:9a:9a:
                    24:e3:2f:bf:01:11:22:0e:4f:a8:31:59:2b:b1:df:
                    3d:b8:29:04:bd:5f:8b:12:4d:e3:89:87:1f:8b:b9:
                    55:04:d1:8a:99:49:a4:03:25:04:2c:13:4e:51:41:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:75:B1:6C:4F:F4:C5:26:4F:F6:8D:76:F5:34:B8:A1:7D:59:0A
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e302e302f31362d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:8f:ed:61:5e:ad:9c:d5:ab:a8:e0:f5:d6:e0:98:dd:55:
         25:2b:c9:f8:25:99:fc:3e:50:c0:e5:2c:75:08:cd:2d:f4:8d:
         55:4f:df:6a:76:ea:bd:a4:f2:a2:85:bb:b5:2c:d6:a6:c2:e3:
         00:e4:02:51:32:b7:05:ed:f9:5f:7e:e2:2b:f7:52:9a:dc:af:
         e0:00:f8:74:38:9d:8e:5e:13:f9:9b:f0:50:b0:90:43:48:ec:
         3b:80:cd:6e:0b:9c:27:53:d9:ac:91:9c:65:3d:e0:17:93:f5:
         ed:b2:52:21:9a:5e:8d:86:c2:5b:6d:d2:bb:1d:aa:85:6f:51:
         c0:16:14:cb:4c:67:74:ef:e1:9e:0b:1f:01:3c:88:89:4a:93:
         a7:13:0f:e2:b1:ae:78:e1:b7:58:22:47:a1:c7:4e:45:31:c7:
         76:ae:42:e2:50:2e:69:ac:b4:5a:e5:fb:49:26:b4:cb:d8:5c:
         ba:6e:36:cd:1a:b4:77:22:39:9a:bb:69:8a:a8:a2:1e:c5:9a:
         7f:67:1b:03:ae:9c:10:6b:ac:70:83:b5:a4:ae:e0:c7:3f:f9:
         99:e9:37:1f:34:03:be:07:f3:57:f6:31:64:f3:97:8a:f5:ed:
         66:44:16:d4:30:8f:50:35:0c:a4:29:bb:ee:38:31:14:17:0b:
         c6:4f:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:37 2026 by rpki-client