This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa
File:                     3139302e39302e302e302f31372d3234203d3e203138363738.roa (raw, json)
Hash identifier:          XBipEb+lw5GJbgU7vtF7UGt5JGmVmFErraqvQ54zYZE=
Subject key identifier:   5E:ED:02:6F:3B:51:D7:05:73:97:42:FB:76:1C:6D:C9:38:E2:57:39
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       01E9678AC3F28BD075C5D640A48331DB1D480469
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa
Signing time:             Tue 27 Jan 2026 20:27:54 +0000
ROA not before:           Tue 27 Jan 2026 20:22:54 +0000
ROA not after:            Tue 26 Jan 2027 20:27:54 +0000
asID:                     18678
IP address blocks:        190.90.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:67:8a:c3:f2:8b:d0:75:c5:d6:40:a4:83:31:db:1d:48:04:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 27 20:22:54 2026 GMT
            Not After : Jan 26 20:27:54 2027 GMT
        Subject: CN=5EED026F3B51D705739742FB761C6DC938E25739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:71:45:ed:6d:b1:5b:6b:ba:08:04:4f:6a:
                    28:41:61:dd:70:c0:2c:6f:fe:82:27:78:a4:8e:02:
                    d4:6a:e2:d6:9e:bd:aa:95:55:d4:96:5e:c8:b2:e2:
                    b4:a0:06:da:98:0b:3a:d8:e7:2c:b4:de:51:41:5d:
                    da:af:22:ce:1d:40:95:5e:21:0f:82:35:4f:38:87:
                    20:6c:d0:cd:02:4c:00:27:db:3f:71:77:e0:03:35:
                    2d:7f:db:59:a8:87:39:d3:08:5a:56:8e:4b:7c:f0:
                    29:53:ac:4b:02:05:6d:35:a8:4c:4a:d5:ea:25:c3:
                    0c:c8:17:29:29:41:8e:b4:3a:a0:79:c4:4f:f1:72:
                    10:16:66:ec:05:f0:ed:95:32:9b:50:29:fc:db:04:
                    a3:49:44:ee:f9:0a:12:dd:25:34:86:66:7b:7f:d0:
                    d3:fa:0d:b5:da:69:42:bf:53:d7:fa:a6:6e:4c:86:
                    01:29:35:3b:de:91:44:3f:12:f1:e7:5e:85:28:0f:
                    95:ad:9d:d6:30:6e:87:47:cf:30:46:1d:d7:1e:49:
                    6a:02:ea:b5:a4:92:4d:d1:2b:5e:f9:7b:13:5b:de:
                    a1:55:5d:71:72:85:08:ea:33:b7:d7:63:9b:a9:6a:
                    9c:99:9b:20:bc:5e:74:1e:4f:34:14:fc:07:af:a8:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:02:6F:3B:51:D7:05:73:97:42:FB:76:1C:6D:C9:38:E2:57:39
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:67:3c:de:41:8a:ac:9d:c0:21:07:53:c4:97:79:b0:a2:
         3f:67:7e:fd:4c:41:f4:5d:c5:29:14:84:28:a6:1c:fd:37:3c:
         6e:06:f3:74:5f:05:fd:74:31:5c:c4:bc:bf:3f:5e:7d:39:62:
         e4:e1:6c:49:ab:83:29:82:e8:40:7a:7d:45:13:e4:d1:c5:6b:
         e6:26:53:b8:cd:4d:f8:50:f4:8f:91:09:9e:7e:e0:b5:e7:18:
         0f:ed:43:54:ec:69:f9:fa:7a:57:3c:d3:c0:56:04:db:7d:d5:
         d3:be:9e:4c:cd:2c:79:1a:65:7f:56:a9:8a:83:c3:4c:45:b3:
         7e:ab:a9:1b:4c:91:2b:6f:df:16:2c:9d:24:cc:87:2d:1d:64:
         b4:8b:f3:d1:7e:20:bc:f0:3b:a9:9f:7f:d3:ff:4c:f2:93:89:
         50:5b:e6:4e:ac:55:01:e7:a5:b5:2a:e1:44:19:4a:66:04:f2:
         83:97:46:39:14:f3:b3:53:e3:14:41:00:de:22:5b:7c:ba:4b:
         0b:be:1e:47:12:b1:31:8e:b6:88:06:ac:db:a9:ef:ba:98:29:
         64:92:71:a7:68:0c:44:29:02:dc:44:9b:16:62:43:49:84:4c:
         f4:de:f1:79:b1:a9:8d:18:f5:f2:14:7b:e0:a5:8d:3a:33:18:
         e8:14:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 08:01:07 2026 by rpki-client