This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa
File:                     3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa (raw, json)
Hash identifier:          JVe4RnyB8bf5hq2NbIVYIegSbT6Hor0C9pY+Vx1jBDQ=
Subject key identifier:   F8:0D:D0:79:70:FE:D8:87:2B:C4:BC:FA:D1:11:04:1C:49:70:8B:88
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       570D5188449595EBE46843896B0AA40CC1EB4B94
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa
Signing time:             Tue 06 Jan 2026 19:35:21 +0000
ROA not before:           Tue 06 Jan 2026 19:30:21 +0000
ROA not after:            Tue 05 Jan 2027 19:35:21 +0000
asID:                     27989
IP address blocks:        190.216.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0d:51:88:44:95:95:eb:e4:68:43:89:6b:0a:a4:0c:c1:eb:4b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:21 2026 GMT
            Not After : Jan  5 19:35:21 2027 GMT
        Subject: CN=F80DD07970FED8872BC4BCFAD111041C49708B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:64:88:94:58:d4:81:bd:bc:fb:c9:50:c9:22:
                    2b:f5:8f:5e:88:25:66:73:e7:58:84:70:6c:8f:f2:
                    09:ba:26:8a:2f:e0:6a:20:1b:0c:3a:e0:3b:84:fa:
                    da:2d:78:10:3d:ee:0a:2c:a9:d0:ec:d1:51:b0:11:
                    3c:c5:0b:3f:24:0d:b1:e3:4d:5c:1a:c4:91:b9:2a:
                    db:bc:0a:4f:00:85:16:78:e9:2b:d1:b9:24:0b:82:
                    e8:eb:a0:2c:ae:67:62:b7:f4:e8:f7:9d:fa:e3:a8:
                    4e:38:e9:72:5e:d3:aa:69:eb:b7:e1:91:f2:9d:51:
                    c3:31:5f:92:cb:6e:bf:59:b3:62:48:07:d9:8f:a9:
                    b5:ac:6b:e5:4e:fc:f7:db:42:9a:d3:f7:fb:9d:eb:
                    4c:e8:5c:bb:a0:0a:bd:1d:36:14:df:cb:04:d3:28:
                    cb:66:cb:fb:85:14:f0:d4:42:83:70:6d:44:a6:0b:
                    66:a4:d7:a9:31:55:37:b4:40:90:5c:32:6f:17:e2:
                    db:f4:fb:8f:5d:ff:04:98:fc:42:1c:b0:e3:47:72:
                    10:92:a6:7b:be:9e:76:60:40:b1:a4:9f:24:de:77:
                    6d:34:66:b1:55:0e:5b:58:0e:60:8a:35:dc:de:fe:
                    87:ca:f4:1a:77:eb:8b:f7:78:bf:06:1d:5e:21:65:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:D0:79:70:FE:D8:87:2B:C4:BC:FA:D1:11:04:1C:49:70:8B:88
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3139362e302f32342d3234203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:3b:8b:ba:b5:25:0c:70:dc:dc:2f:3e:8c:e3:7d:a5:79:
         19:fa:43:ea:a1:fc:96:a1:74:86:3d:39:93:de:52:58:30:82:
         82:0e:8f:fc:5a:3a:39:ac:fe:20:b4:9e:70:d7:d3:44:c3:68:
         b4:ce:ca:01:39:eb:e0:8c:2b:61:f9:53:85:08:29:98:7d:3f:
         aa:4a:5d:ff:3c:3e:52:30:91:05:b9:bc:d8:f3:61:f7:07:47:
         68:1f:72:65:65:14:34:94:09:66:68:83:24:8c:f6:79:d6:3d:
         cd:03:f1:dc:d9:89:79:88:ab:41:a3:26:ce:41:59:9b:72:bd:
         cd:0b:04:ed:e5:82:5e:ab:30:b6:63:c1:4a:6c:67:33:bb:53:
         80:6a:32:c9:fa:93:45:3c:32:b9:e5:a9:52:b9:19:45:13:06:
         1a:1a:0a:b5:13:5a:3e:10:4c:8f:ff:2e:3a:76:e6:56:d5:41:
         e8:38:30:ae:d4:3c:5f:c5:43:e6:46:74:5a:d1:2a:c9:06:7e:
         7a:0a:20:59:1b:92:e7:c8:38:f5:a8:94:9b:07:99:81:3d:16:
         97:0c:37:13:83:bd:02:88:5f:5e:86:27:6a:75:3f:49:6b:d9:
         94:75:be:c8:6c:df:80:3f:49:8b:db:05:6c:82:72:9a:aa:0f:
         fe:e4:68:4a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVw1RiESVlevkaEOJawqkDMHrS5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAxMDYxOTMwMjFaFw0yNzAxMDUxOTM1MjFaMDMxMTAvBgNV
BAMTKEY4MEREMDc5NzBGRUQ4ODcyQkM0QkNGQUQxMTEwNDFDNDk3MDhCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ZIiUWNSBvbz7yVDJIiv1j16I
JWZz51iEcGyP8gm6Joov4GogGww64DuE+toteBA97gosqdDs0VGwETzFCz8kDbHj
TVwaxJG5Ktu8Ck8AhRZ46SvRuSQLgujroCyuZ2K39Oj3nfrjqE446XJe06pp67fh
kfKdUcMxX5LLbr9Zs2JIB9mPqbWsa+VO/PfbQprT9/ud60zoXLugCr0dNhTfywTT
KMtmy/uFFPDUQoNwbUSmC2ak16kxVTe0QJBcMm8X4tv0+49d/wSY/EIcsONHchCS
pnu+nnZgQLGknyTed200ZrFVDltYDmCKNdze/ofK9Bp364v3eL8GHV4hZSnRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+A3QeXD+2IcrxLz60REEHElwi4gwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM2MmUzMTM5MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzkzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvtjE
MA0GCSqGSIb3DQEBCwUAA4IBAQAlXzuLurUlDHDc3C8+jON9pXkZ+kPqofyWoXSG
PTmT3lJYMIKCDo/8Wjo5rP4gtJ5w19NEw2i0zsoBOevgjCth+VOFCCmYfT+qSl3/
PD5SMJEFubzY82H3B0doH3JlZRQ0lAlmaIMkjPZ51j3NA/Hc2Yl5iKtBoybOQVmb
cr3NCwTt5YJeqzC2Y8FKbGczu1OAajLJ+pNFPDK55alSuRlFEwYaGgq1E1o+EEyP
/y46duZW1UHoODCu1DxfxUPmRnRa0SrJBn56CiBZG5LnyDj1qJSbB5mBPRaXDDcT
g70CiF9ehidqdT9Ja9mUdb7IbN+AP0mL2wVsgnKaqg/+5GhK
-----END CERTIFICATE-----
Generated at Wed Jan 21 05:42:48 2026 by rpki-client