This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa
File:                     3139302e3231372e322e302f32342d3234203d3e203238303132.roa (raw, json)
Hash identifier:          d7wLX+tv8GjUebI/G/VMBBzveDTJGpcYlOdtKVEFU6U=
Subject key identifier:   6B:11:C1:15:92:B1:83:96:46:F7:61:A3:5B:BB:7F:E1:4A:B4:15:C5
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       4515B7018668C3CE36CCE0324C4544FD3AEEABC5
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa
Signing time:             Tue 06 Jan 2026 19:35:12 +0000
ROA not before:           Tue 06 Jan 2026 19:30:12 +0000
ROA not after:            Tue 05 Jan 2027 19:35:12 +0000
asID:                     28012
IP address blocks:        190.217.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:15:b7:01:86:68:c3:ce:36:cc:e0:32:4c:45:44:fd:3a:ee:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:12 2026 GMT
            Not After : Jan  5 19:35:12 2027 GMT
        Subject: CN=6B11C11592B1839646F761A35BBB7FE14AB415C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:ca:cd:aa:0b:73:ae:8c:02:69:c5:70:87:
                    98:20:ff:da:68:a8:85:b6:db:94:50:08:65:27:9f:
                    7e:c0:a4:ca:e6:4f:cd:ce:f8:07:b4:54:d6:e6:4c:
                    8a:d3:34:79:3a:48:fe:d0:08:32:09:46:03:6d:99:
                    53:35:16:eb:f8:ca:1e:45:0c:62:97:bf:9e:3a:9c:
                    33:36:68:7b:ac:e5:81:cb:1f:74:46:11:74:75:71:
                    e8:91:71:16:39:24:7e:a0:ec:4f:ab:db:42:68:47:
                    27:a0:ea:4b:e0:60:37:00:82:59:fc:ed:ba:68:1e:
                    36:60:75:46:cc:2e:10:cb:24:e4:08:e1:8a:cb:5c:
                    8d:5a:b5:8b:42:13:64:17:5a:ef:c6:6c:fb:58:03:
                    bf:e9:4b:c0:00:0f:95:73:c8:ec:ee:9b:cf:a7:f4:
                    94:2f:9e:01:06:f9:e1:35:66:27:e3:17:9a:2f:bc:
                    68:2e:c8:3d:1d:f2:08:57:b5:94:4e:38:3f:02:c6:
                    3b:f0:a6:1e:06:c3:2e:ac:68:34:df:91:89:4a:4d:
                    81:83:3f:3d:db:62:f0:34:5e:52:16:2b:f6:46:dd:
                    27:3b:b5:e2:35:f8:3b:c6:bf:c2:d8:c0:03:0f:ec:
                    1f:25:5d:f8:71:91:27:45:7e:53:c1:25:4e:51:c5:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:11:C1:15:92:B1:83:96:46:F7:61:A3:5B:BB:7F:E1:4A:B4:15:C5
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e322e302f32342d3234203d3e203238303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b4:4d:e7:9b:87:4a:a8:02:9a:f6:8d:ee:c9:4d:8c:a5:a2:
         6a:af:73:b0:9f:9b:ea:ba:13:53:87:60:6e:21:27:02:c4:42:
         15:76:d8:1c:b8:a3:72:7d:6c:ae:6b:97:69:3a:7f:1e:39:0d:
         77:30:ed:1c:63:58:f9:ce:10:03:2f:c5:10:00:22:d3:e3:e6:
         4e:5f:2e:1f:9b:45:d8:b8:9e:a2:77:9e:f9:9e:c4:94:4b:ce:
         81:a1:c5:b5:70:18:4b:73:62:fb:c9:51:14:f6:60:60:b4:18:
         41:fd:42:5d:b9:b1:bd:f4:61:74:d5:19:3d:19:3b:2d:6f:ab:
         60:fa:61:ba:76:a3:2f:7e:6a:13:44:49:83:d3:89:02:c1:9e:
         ce:e9:cf:73:f3:2e:0d:51:3b:8b:33:85:e7:52:d0:5d:f6:04:
         63:b2:df:1f:db:e5:22:ec:0b:8f:a0:18:5b:1a:99:fb:af:10:
         34:4e:d1:97:c1:d4:a0:c2:94:7a:e5:6d:28:d7:06:10:7f:98:
         9c:eb:b9:cb:3b:02:2f:2b:e1:de:3d:18:02:48:d0:a4:79:5e:
         e0:94:66:8a:12:d3:71:e2:59:85:44:6b:25:b5:ef:05:aa:34:
         33:e3:d4:9c:84:ee:71:fc:66:f9:1b:af:b2:d1:e5:66:27:41:
         ff:e1:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:42:38 2026 by rpki-client