This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235332e302f32342d3234203d3e20323633373731.roa
File:                     3139302e3231362e3235332e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          pMZQas2auyXrvKRAxGZoBRllOfLpW66kKrQ8Lu+DBLo=
Subject key identifier:   36:42:2E:DD:76:ED:C1:F4:D2:7E:04:5C:3C:7C:56:22:20:2E:2A:F1
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       064E42FEC4F0DBCCD097C18A8293B5A23BD51D99
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235332e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 06 Jan 2026 19:35:20 +0000
ROA not before:           Tue 06 Jan 2026 19:30:20 +0000
ROA not after:            Tue 05 Jan 2027 19:35:20 +0000
asID:                     263771
IP address blocks:        190.216.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4e:42:fe:c4:f0:db:cc:d0:97:c1:8a:82:93:b5:a2:3b:d5:1d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:20 2026 GMT
            Not After : Jan  5 19:35:20 2027 GMT
        Subject: CN=36422EDD76EDC1F4D27E045C3C7C5622202E2AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:eb:03:77:a4:30:49:df:35:e4:3b:47:3c:
                    79:1a:32:b8:f1:27:53:5e:90:df:ab:ef:ba:be:bd:
                    1d:43:6b:5a:50:1e:0b:a2:f6:f3:35:80:b8:b3:c9:
                    ce:ee:bb:86:df:1b:ab:54:cc:0b:f3:b6:b0:7b:50:
                    30:01:8b:f1:39:b7:1f:e9:31:ce:ae:84:8a:43:f2:
                    ef:fb:92:cd:e6:2b:37:53:aa:50:0d:ad:88:ff:4c:
                    ee:4e:3c:3f:c5:42:a3:f3:0a:07:ee:df:b2:6d:00:
                    ca:d9:ef:ba:d8:cf:bd:e4:86:f5:a1:36:a8:04:16:
                    05:76:e1:37:89:6a:fd:de:07:f5:8d:02:ff:8f:2c:
                    29:6f:86:12:bf:d7:17:10:47:44:3e:ce:a6:e2:64:
                    01:4d:8a:0b:df:21:68:c8:95:54:84:ce:92:e7:41:
                    f0:8b:03:a6:c6:6b:dd:38:9e:9a:09:d4:43:66:fb:
                    d2:39:f5:e9:c6:d3:c5:c0:7b:b8:0e:c3:70:ea:d0:
                    a0:c8:c5:fb:e4:78:67:01:47:d3:81:e4:4c:79:07:
                    15:f0:99:cf:b7:1e:87:c3:cd:b3:3e:d7:0c:94:da:
                    c0:54:03:22:6b:fd:43:e2:6a:13:97:a8:97:5b:ef:
                    1a:78:42:9b:70:b7:a0:ee:45:da:5e:23:f5:f8:7d:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:42:2E:DD:76:ED:C1:F4:D2:7E:04:5C:3C:7C:56:22:20:2E:2A:F1
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3235332e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:44:32:f5:d6:ac:0f:59:b5:ce:55:eb:83:78:9c:69:e2:
         a3:2c:67:1b:ca:ff:20:5b:6b:a2:29:c6:36:0e:90:45:ea:c8:
         89:62:88:32:13:59:47:7d:3b:7b:38:aa:ce:3e:72:77:f2:ca:
         56:ba:c9:26:4b:ad:7c:ad:2e:d7:22:c4:2b:c1:ec:08:20:ad:
         7d:bd:12:3c:be:5d:d9:5c:7b:c0:06:bb:2f:1c:95:de:a8:29:
         4e:8e:31:1a:57:47:7c:66:8c:de:af:05:a8:f3:76:63:9d:c0:
         e1:2c:fe:5c:14:48:9b:ea:7a:54:1b:c1:2d:47:28:8e:e7:78:
         9b:fc:34:0f:8d:3f:31:3e:70:99:fa:f8:a9:9d:68:2f:7a:01:
         76:5b:f5:af:8c:6b:47:19:2e:48:93:61:03:1c:12:84:73:90:
         6e:bd:63:2e:81:db:18:7f:60:39:3d:a0:04:34:7e:e1:75:67:
         55:bc:f0:ef:37:b3:0f:cd:bd:07:c0:44:32:c2:fd:b2:45:10:
         b4:a8:34:f6:f6:98:b1:a3:f5:6b:71:a7:66:c5:fd:b5:e8:be:
         25:2e:6c:4b:70:2a:04:76:ff:13:33:4c:74:16:53:fd:2b:2a:
         35:d3:88:da:f4:7e:14:c8:4c:ee:27:07:83:c8:11:64:e7:bb:
         6e:fd:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:42:49 2026 by rpki-client