This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32342d3234203d3e20323730303938.roa
File:                     3139302e3137312e38382e302f32342d3234203d3e20323730303938.roa (raw, json)
Hash identifier:          HDexa5JtpAWe6cXvy24rezz7SWVW75lJVkJXc93XHHU=
Subject key identifier:   4E:21:8B:38:91:C0:54:9D:57:2E:25:5D:DE:DE:0C:E2:69:81:40:1E
Certificate issuer:       /CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
Certificate serial:       55526875D84CA21C2C588D7FEF8D0A221F8DFE39
Authority key identifier: 55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32342d3234203d3e20323730303938.roa
Signing time:             Tue 06 Jan 2026 19:13:41 +0000
ROA not before:           Tue 06 Jan 2026 19:08:41 +0000
ROA not after:            Tue 05 Jan 2027 19:13:41 +0000
asID:                     270098
IP address blocks:        190.171.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:68:75:d8:4c:a2:1c:2c:58:8d:7f:ef:8d:0a:22:1f:8d:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F219F28FE2F3F09DA001E12205DC896E7B3977
        Validity
            Not Before: Jan  6 19:08:41 2026 GMT
            Not After : Jan  5 19:13:41 2027 GMT
        Subject: CN=4E218B3891C0549D572E255DDEDE0CE26981401E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:74:ca:9e:3e:a3:0e:bc:e6:cc:02:78:ef:
                    03:37:33:78:15:55:b7:8b:67:d8:2f:92:19:62:ab:
                    83:d7:74:56:e7:cf:8a:1d:c5:f9:3d:71:a1:ee:9c:
                    87:95:65:9f:e3:43:dc:39:60:7c:bd:0d:f1:b7:e4:
                    b1:88:35:c0:ce:fe:15:76:8a:ac:5f:f5:1a:f0:9d:
                    d7:5c:97:81:9a:19:f7:91:31:14:3e:cc:f8:5a:17:
                    06:7c:22:72:94:2b:73:41:71:34:dc:f9:47:a1:e9:
                    b4:53:b6:64:b6:14:92:46:9c:e7:31:6e:fb:67:4f:
                    73:4b:61:a0:0a:1a:82:bb:66:5e:17:21:9b:d2:2a:
                    85:b1:be:36:92:35:ae:65:c3:c7:8e:b9:c1:bf:47:
                    d7:4b:2c:e5:c3:e7:a7:61:1f:39:a6:57:4f:0b:53:
                    41:a7:77:fd:55:03:e3:b8:91:83:41:28:aa:d5:95:
                    70:af:3d:10:f8:02:cf:29:0c:fc:4d:20:53:57:95:
                    1e:92:d5:56:c6:c3:39:74:b5:62:d1:92:9c:4f:de:
                    75:f6:c7:dd:9d:91:67:04:96:c0:32:6d:1c:8b:3d:
                    16:53:53:42:43:b2:db:dd:00:23:9a:04:89:23:5a:
                    9f:0a:a4:7b:b9:fb:56:d8:ce:21:2f:e2:bb:5d:a0:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:8B:38:91:C0:54:9D:57:2E:25:5D:DE:DE:0C:E2:69:81:40:1E
            X509v3 Authority Key Identifier:
                keyid:55:F2:19:F2:8F:E2:F3:F0:9D:A0:01:E1:22:05:DC:89:6E:7B:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55F219F28FE2F3F09DA001E12205DC896E7B3977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC0C4DA0A5D37CFFCF5CD44422AD420D288033003ECE00CC5C985BF7B3EC452/0/3139302e3137312e38382e302f32342d3234203d3e20323730303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:c2:21:9f:56:8c:54:ac:1f:d4:82:41:de:3b:b6:24:12:
         2a:2a:5e:c9:a1:a3:8c:ba:d7:3f:39:d3:d3:58:d2:26:25:48:
         6f:12:f0:c0:ad:06:4b:68:44:99:4f:78:a3:57:cb:9b:6d:81:
         f6:b2:d6:9f:1d:41:64:71:2c:e1:57:7b:d9:a1:71:a4:28:e5:
         b7:6b:0f:c5:d1:db:36:4c:19:12:e2:ab:d6:d1:12:78:f9:7f:
         48:c8:d9:4b:e8:b8:ff:20:22:ea:48:8a:6f:08:3a:b2:2b:5f:
         21:05:9f:24:9c:3a:7e:79:2a:ae:23:d9:bd:0b:1d:2e:1f:77:
         80:5f:b2:ae:d7:57:67:b8:0f:b2:49:b3:f7:f5:09:37:84:db:
         cc:7c:f3:d4:ed:a5:f4:dd:1b:f2:a4:f9:f7:ac:c7:47:02:35:
         a5:d5:43:20:fe:5c:15:cc:87:a9:e8:ef:14:26:ab:d1:03:ff:
         0b:36:3a:fa:68:8f:65:ff:ff:5e:62:e9:2d:e6:07:82:8e:e1:
         68:99:3b:b1:69:1d:84:a4:39:90:b3:26:e2:07:9f:e9:eb:d6:
         b5:7c:31:93:a1:e8:9a:1d:cf:e4:0e:aa:11:a3:30:5d:c0:24:
         42:62:12:10:ac:a3:30:04:0e:54:a4:ee:4c:00:1d:14:90:1f:
         e0:3b:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:34:38 2026 by rpki-client