This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131392e302f32342d3234203d3e20323633373631.roa
File:                     3139302e39392e3131392e302f32342d3234203d3e20323633373631.roa (raw, json)
Hash identifier:          qqhXn1Te5DoWJmKYR8AZYzS0mDo4g+Q3+9NegpXUmhU=
Subject key identifier:   F3:02:41:34:56:1A:19:D3:DE:93:9E:86:BF:10:37:E3:24:B6:2F:77
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       224CCA8792B4B22EA3B4C337F674C6163B5A8457
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131392e302f32342d3234203d3e20323633373631.roa
Signing time:             Tue 06 Jan 2026 18:58:40 +0000
ROA not before:           Tue 06 Jan 2026 18:53:40 +0000
ROA not after:            Tue 05 Jan 2027 18:58:40 +0000
asID:                     263761
IP address blocks:        190.99.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4c:ca:87:92:b4:b2:2e:a3:b4:c3:37:f6:74:c6:16:3b:5a:84:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Jan  6 18:53:40 2026 GMT
            Not After : Jan  5 18:58:40 2027 GMT
        Subject: CN=F3024134561A19D3DE939E86BF1037E324B62F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:59:a4:c3:ce:78:1b:4b:46:4d:db:f8:5b:
                    e1:7a:56:0c:de:7b:b3:2c:9c:c7:91:5a:df:c3:2c:
                    0a:38:be:8e:7d:18:1c:85:f7:f1:47:2e:90:f3:40:
                    83:27:b6:39:f1:c8:89:d7:62:b8:40:98:0c:bd:a6:
                    97:d9:37:11:24:f8:9a:3f:58:04:a3:a0:79:07:0b:
                    12:73:cb:d6:d0:4b:b6:c6:a2:35:f5:20:84:a5:0e:
                    8d:bf:d2:4a:d2:2c:66:45:71:f8:ff:6f:0d:2c:9f:
                    b0:76:79:34:8f:c9:7b:3a:d6:11:dd:c9:30:9b:42:
                    54:0f:63:ec:24:2a:08:f2:72:5e:64:50:83:66:46:
                    b0:92:ac:ae:27:f3:cc:14:40:7a:56:5d:48:68:78:
                    88:ec:25:2e:b9:9a:96:83:99:a8:49:66:95:ee:e7:
                    63:bb:d9:4e:9f:ec:e7:9b:ff:82:52:12:2b:9a:49:
                    16:ab:8d:62:65:c5:6c:95:26:7a:4d:f9:35:a7:33:
                    66:0f:45:77:55:8a:99:6b:56:55:ff:44:f9:d7:c6:
                    b2:41:18:6d:4c:d2:3a:3c:b6:2d:37:cd:a5:4b:8a:
                    50:15:21:4d:e1:28:fe:8a:84:7a:81:b8:03:6c:54:
                    1a:7f:36:cd:2f:f9:6b:26:b2:26:53:bf:64:14:55:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:41:34:56:1A:19:D3:DE:93:9E:86:BF:10:37:E3:24:B6:2F:77
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131392e302f32342d3234203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:79:ee:e7:54:a2:f8:2d:d7:e0:ef:5f:e3:51:09:bd:4e:86:
         91:d7:09:7b:fc:8e:d6:f5:3d:b8:a9:ee:47:f0:27:1b:12:22:
         c0:26:5e:f1:bb:29:1a:ec:4d:5b:5d:17:78:f5:57:36:c2:b7:
         12:e1:0b:de:fe:f0:53:01:74:69:ef:b9:c6:51:89:40:ac:60:
         43:ae:e2:fa:cb:f6:34:6a:ca:2c:04:33:62:f4:c2:f3:93:5c:
         53:3f:9d:e7:08:d8:a4:ca:1b:df:bb:72:85:52:81:2a:6e:34:
         7d:7e:15:f6:7e:72:1a:d5:20:ce:6f:fd:9c:ce:c1:df:11:e1:
         e6:b7:0f:85:f9:ea:1d:00:2a:c6:f8:ef:60:52:69:b6:11:5b:
         0d:76:54:81:d7:78:57:ab:b9:a6:ff:e0:92:5e:43:7d:93:23:
         6a:6c:35:f3:0a:ac:18:39:3a:5f:0c:32:b7:3b:df:aa:56:1c:
         83:9d:46:2a:9f:7e:90:45:a1:af:3d:78:19:54:0d:81:3b:db:
         fa:aa:50:4c:3e:d4:ba:09:a4:09:cc:04:95:b2:86:55:ae:35:
         50:c3:2a:0d:2b:49:0a:8a:20:02:8e:33:94:c1:90:2a:c5:e9:
         f3:7e:c2:73:d4:92:94:1f:fe:5b:60:c4:61:c0:62:73:9d:34:
         18:0d:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:51 2026 by rpki-client