This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
File:                     3139302e32312e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          ZU284vxipQ5TSHHo1qSGEzGgCe/Qss83w3OTTGvxl8M=
Subject key identifier:   56:A5:FA:48:50:FE:37:05:0D:C9:28:90:D9:6A:AE:F9:73:A0:EA:CC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       08E7CED8AA923ACD6C69B863E71AFCB6EBDCB527
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:53 +0000
ROA not before:           Tue 06 Jan 2026 19:19:53 +0000
ROA not after:            Tue 05 Jan 2027 19:24:53 +0000
asID:                     16629
IP address blocks:        190.21.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e7:ce:d8:aa:92:3a:cd:6c:69:b8:63:e7:1a:fc:b6:eb:dc:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:53 2026 GMT
            Not After : Jan  5 19:24:53 2027 GMT
        Subject: CN=56A5FA4850FE37050DC92890D96AAEF973A0EACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:14:75:76:c0:47:d4:46:f7:bc:ee:2a:3c:
                    a4:4a:cc:01:e8:c0:fa:39:c5:ee:22:16:50:15:c4:
                    33:05:aa:06:f7:9c:4f:9e:3e:4e:ac:ec:fe:15:8c:
                    bd:40:e2:f1:a6:c4:e4:3a:c0:63:01:d6:cc:3e:a0:
                    1f:cf:7f:e8:8b:e8:3a:2a:2e:92:5c:03:a7:e3:a9:
                    51:c1:ce:bc:0a:20:ff:b2:c0:b8:cc:6e:e3:d7:e9:
                    9f:3f:02:6b:ee:65:7c:45:f9:2b:33:ab:e5:83:4c:
                    c8:ed:9c:85:8c:0d:40:d3:67:46:08:67:51:b3:59:
                    3a:01:7a:3e:ec:53:3f:39:6a:0c:a2:f7:8b:a5:72:
                    d8:b7:11:3c:95:04:ce:4b:8c:17:6b:c0:75:d3:7c:
                    0b:41:1f:62:c9:ce:34:74:e7:b0:29:34:42:bc:96:
                    bc:56:25:62:2c:4b:fb:48:00:d0:f7:03:fd:a7:a6:
                    12:a4:a9:11:58:4f:90:8e:6b:cd:ba:04:47:40:45:
                    48:91:a4:23:00:d5:17:02:6b:5a:a6:f5:6b:c2:a5:
                    49:80:2f:f4:81:df:93:eb:4a:60:03:72:1a:f5:13:
                    f2:4c:54:da:06:ae:10:8e:83:d7:f2:21:95:50:17:
                    7d:33:18:7c:ea:fd:b1:5f:e2:b5:0a:41:71:37:d5:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A5:FA:48:50:FE:37:05:0D:C9:28:90:D9:6A:AE:F9:73:A0:EA:CC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32312e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:a1:04:8c:fc:b7:4a:7f:66:eb:87:21:62:43:7d:01:65:
         7a:0e:12:4d:9a:19:c3:37:58:82:65:d6:a2:71:cf:55:14:ac:
         41:d2:48:43:17:ed:28:fc:a8:9f:c6:4f:45:bc:4f:bc:24:e4:
         9e:a3:d7:bc:62:3a:ea:5c:d8:d9:13:75:37:07:ad:a8:70:f0:
         01:48:fd:01:03:1e:19:ba:df:d7:52:9c:86:65:d2:73:57:8c:
         32:3b:33:e1:21:c4:9a:d0:a2:b5:15:d1:0f:22:d8:66:04:c6:
         77:3f:c6:42:5a:7c:e3:ce:27:1a:cf:81:02:ff:2d:f2:3e:45:
         27:07:1d:43:96:44:5b:f2:95:4f:54:58:ec:c2:18:18:a8:e6:
         b9:ad:51:b7:48:a9:1b:2f:95:49:08:af:61:15:9c:8d:00:53:
         ca:31:9a:8c:03:0a:18:4c:49:54:b2:b9:66:42:99:5e:32:6b:
         7c:8f:fa:7f:bf:b8:8b:4b:bb:c2:ab:ea:49:34:99:17:f9:27:
         44:72:4e:9e:c0:4e:34:8a:e9:19:37:2a:3c:e8:56:aa:c2:53:
         ea:a4:2a:c2:68:6a:68:2d:93:34:8b:a5:f7:78:5f:fc:6e:48:
         5e:06:f1:33:34:f9:4a:a9:a9:fd:91:c9:24:eb:49:55:62:5f:
         38:b8:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:41 2026 by rpki-client