This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa
File:                     3139302e32302e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          QRW9VfbobMvacKS/hLPQnZsgMrhZ9ZzFotH9iTfIjU0=
Subject key identifier:   BB:30:DD:31:4A:17:9B:3F:8B:55:16:33:D8:69:DC:97:18:C7:E9:AD
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       0ACFEAC026C4141A4C11F19FE923A64D5CAA2A2E
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:44 +0000
ROA not before:           Tue 06 Jan 2026 19:19:44 +0000
ROA not after:            Tue 05 Jan 2027 19:24:44 +0000
asID:                     7418
IP address blocks:        190.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cf:ea:c0:26:c4:14:1a:4c:11:f1:9f:e9:23:a6:4d:5c:aa:2a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:44 2026 GMT
            Not After : Jan  5 19:24:44 2027 GMT
        Subject: CN=BB30DD314A179B3F8B551633D869DC9718C7E9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:d8:ca:3f:8e:5c:da:f4:ae:87:33:19:b2:
                    99:ff:37:1c:f8:49:d3:f2:68:2c:d3:a0:22:ed:e8:
                    30:bc:ac:0a:ef:37:82:3e:69:6a:ba:b9:19:a5:47:
                    fe:62:4f:fd:c0:6e:ce:70:4e:e4:28:3d:08:13:6f:
                    21:2c:b3:65:1e:60:aa:72:6f:bf:a2:b6:fc:e8:2a:
                    b8:4d:9d:4b:eb:3c:52:7d:9f:f4:68:cf:5d:81:79:
                    4c:7c:08:52:a6:d8:2a:5d:86:8a:49:ad:53:07:48:
                    db:d7:62:dc:96:1d:ef:0f:4e:50:40:52:73:4b:e0:
                    c1:46:54:a8:6f:24:ba:07:5e:08:65:16:c5:0b:29:
                    3c:24:73:26:c2:dc:71:c5:6b:10:63:ab:3a:84:23:
                    5e:3b:93:95:d2:57:d5:05:08:7e:56:9f:af:34:51:
                    61:07:3b:a8:f3:0c:a4:58:dc:11:4a:6b:2d:9c:e0:
                    22:50:f4:53:27:d2:29:4d:b1:7e:57:6e:40:86:96:
                    53:3d:62:3d:93:af:00:7e:e7:e7:7a:17:99:30:82:
                    80:87:7b:49:6d:1a:30:d4:a4:57:17:6d:13:e4:64:
                    23:3e:56:11:d2:69:25:c6:29:dc:12:65:a3:dc:e8:
                    7c:14:f9:e2:6f:7e:88:0c:40:4e:d0:36:5c:53:d0:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:DD:31:4A:17:9B:3F:8B:55:16:33:D8:69:DC:97:18:C7:E9:AD
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:32:5e:1f:7a:47:fb:bc:b2:6e:98:71:64:2b:74:72:30:80:
         dd:67:be:02:90:1f:c2:c9:0d:9c:18:68:2d:51:f1:00:c0:1e:
         51:93:ff:e1:48:c2:fa:20:ff:f0:e2:8d:c8:57:95:04:38:b7:
         ef:ac:7d:19:4b:aa:19:19:18:f3:e5:d6:be:b1:de:d0:f1:8b:
         80:b4:03:cd:a8:d7:7d:d3:6c:c1:9b:13:24:ac:3a:94:40:a6:
         ab:9e:6a:2c:f1:a8:56:25:31:b8:0b:4c:fe:cb:91:4b:8d:45:
         63:20:34:1e:cc:1f:08:4a:c3:0a:52:e5:c9:79:c9:0a:c1:ce:
         ab:47:89:6b:16:2c:ad:b2:84:64:89:1e:e5:1f:51:7f:36:4b:
         cc:5e:90:e8:f9:61:7d:21:a5:b1:c6:df:49:09:d9:ac:87:27:
         a4:b0:e3:f9:82:16:3d:cc:ed:90:b6:c0:48:eb:f2:2b:5f:8a:
         35:36:b6:9d:1c:ab:73:22:c0:6f:b7:ba:c0:de:5d:c7:b0:22:
         98:96:00:06:96:8e:c4:3e:8d:af:ee:26:fa:6a:97:9c:2e:8c:
         bc:53:cf:eb:db:a4:75:20:72:dc:3b:d4:c0:a0:27:9a:2c:82:
         41:92:73:95:23:08:b1:a2:e7:c1:5b:80:7a:35:29:7a:12:a4:
         33:a9:a1:47
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUCs/qwCbEFBpMEfGf6SOmTVyqKi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNjAxMDYxOTE5NDRaFw0yNzAxMDUxOTI0NDRaMDMxMTAvBgNV
BAMTKEJCMzBERDMxNEExNzlCM0Y4QjU1MTYzM0Q4NjlEQzk3MThDN0U5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyNjKP45c2vSuhzMZspn/Nxz4
SdPyaCzToCLt6DC8rArvN4I+aWq6uRmlR/5iT/3Abs5wTuQoPQgTbyEss2UeYKpy
b7+itvzoKrhNnUvrPFJ9n/Roz12BeUx8CFKm2CpdhopJrVMHSNvXYtyWHe8PTlBA
UnNL4MFGVKhvJLoHXghlFsULKTwkcybC3HHFaxBjqzqEI147k5XSV9UFCH5Wn680
UWEHO6jzDKRY3BFKay2c4CJQ9FMn0ilNsX5XbkCGllM9Yj2TrwB+5+d6F5kwgoCH
e0ltGjDUpFcXbRPkZCM+VhHSaSXGKdwSZaPc6HwU+eJvfogMQE7QNlxT0EgDAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUuzDdMUoXmz+LVRYz2GnclxjH6a0wHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzkzMDJlMzIzMDJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzNzM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL4UMA0GCSqGSIb3
DQEBCwUAA4IBAQBSMl4fekf7vLJumHFkK3RyMIDdZ74CkB/CyQ2cGGgtUfEAwB5R
k//hSML6IP/w4o3IV5UEOLfvrH0ZS6oZGRjz5da+sd7Q8YuAtAPNqNd902zBmxMk
rDqUQKarnmos8ahWJTG4C0z+y5FLjUVjIDQezB8ISsMKUuXJeckKwc6rR4lrFiyt
soRkiR7lH1F/NkvMXpDo+WF9IaWxxt9JCdmshyeksOP5ghY9zO2QtsBI6/IrX4o1
NradHKtzIsBvt7rA3l3HsCKYlgAGlo7EPo2v7ib6apecLoy8U8/r26R1IHLcO9TA
oCeaLIJBknOVIwixoufBW4B6NSl6EqQzqaFH
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:19:38 2026 by rpki-client