This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
File:                     3139302e36312e33332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          1Y8GSz2NDPR5rhjxCz7ZJmUFNWeif6IgDQNbkkFa8YQ=
Subject key identifier:   91:9A:AC:36:E4:37:E6:4E:C4:CC:1C:3B:E7:54:51:F2:2A:16:4E:37
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       366F6AC2B87A78A0F5C316E8E171C663273F9537
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 20:55:09 +0000
ROA not before:           Tue 06 Jan 2026 20:50:09 +0000
ROA not after:            Tue 05 Jan 2027 20:55:09 +0000
asID:                     52468
IP address blocks:        190.61.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6f:6a:c2:b8:7a:78:a0:f5:c3:16:e8:e1:71:c6:63:27:3f:95:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Jan  6 20:50:09 2026 GMT
            Not After : Jan  5 20:55:09 2027 GMT
        Subject: CN=919AAC36E437E64EC4CC1C3BE75451F22A164E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e9:52:aa:2b:aa:a7:a3:a8:aa:69:b0:10:39:
                    94:64:1b:e6:0f:2e:e4:dc:ee:16:2d:9a:85:60:6e:
                    50:93:d1:41:37:a6:4a:da:26:eb:a1:36:25:08:be:
                    83:a7:72:ba:cf:6f:cc:aa:99:79:2b:56:18:b5:1e:
                    ed:20:b0:3d:96:40:a7:84:b8:99:95:94:10:5f:c1:
                    83:4d:33:57:29:77:69:c1:55:56:bd:c7:f3:5a:c1:
                    ae:d5:ad:71:13:7f:a0:3c:4a:bc:db:5f:c0:47:db:
                    27:bd:d9:e9:4a:45:79:a0:f9:b7:fb:6b:70:13:31:
                    68:1f:38:17:6f:23:9c:5e:b8:76:f4:9c:8a:38:ed:
                    b2:76:72:52:75:c4:76:3c:fe:ad:13:aa:eb:89:e2:
                    04:e0:77:4f:9b:32:d5:e9:91:08:8b:a7:2c:96:9d:
                    ad:2d:b0:56:eb:3e:70:5f:61:a8:c2:b4:b3:96:13:
                    82:a5:a5:5e:03:94:6d:fe:be:88:02:9c:38:42:7d:
                    18:a2:e6:72:06:39:fb:b5:67:18:c5:57:36:09:76:
                    b5:46:a5:a6:89:fc:ce:16:fa:9f:f4:72:c3:9c:52:
                    8c:a8:05:66:7b:0d:8a:02:4f:43:a8:3c:f6:da:fc:
                    a1:55:a0:c1:fe:7f:e4:17:fc:b7:4c:ba:58:01:46:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:AC:36:E4:37:E6:4E:C4:CC:1C:3B:E7:54:51:F2:2A:16:4E:37
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:94:3b:64:3f:f7:94:b9:d4:8c:01:e3:a2:8e:be:3c:6e:
         cd:af:6b:cb:1c:9f:35:1e:18:24:61:66:ca:8c:b3:13:a9:09:
         7d:dd:62:67:9b:0b:88:f9:e9:3a:ad:39:cd:de:e3:f4:98:9a:
         f4:aa:cf:95:0f:9c:17:e4:6d:a4:51:42:fa:56:e0:aa:3f:d7:
         98:cd:ad:32:e7:3b:cc:54:88:57:d1:08:67:c5:4f:37:cc:10:
         b5:2a:22:ef:5b:af:b7:a3:9e:18:62:34:fa:c0:94:9a:5f:59:
         35:ed:d9:55:a8:bd:94:a8:18:05:0f:59:42:c2:83:04:5b:27:
         94:29:41:ff:19:f4:76:ff:ad:15:a7:e8:ff:1d:f1:8d:57:5b:
         88:4f:f7:85:dd:da:f2:d4:3c:48:aa:60:a9:4e:41:d6:59:01:
         90:42:76:33:94:51:9e:ee:d6:24:80:21:5c:c0:57:a5:39:fe:
         d6:8f:6f:a4:04:0e:53:4d:6b:d6:07:bd:7e:0a:78:8c:ac:4f:
         5b:2d:d2:b4:74:b3:a6:2e:e7:bd:89:1e:41:7e:54:ab:1b:55:
         c4:1b:09:e3:c1:06:d2:ea:e9:0e:4b:0d:ed:f5:b2:e5:a8:a0:
         74:42:2c:53:8e:e7:49:fc:77:b5:01:63:aa:6e:96:be:40:bd:
         c4:cb:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:15 2026 by rpki-client