This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          htvkbSsL6lw4Eh3xszdS469vyZcvQw6t1nEJ+QRtzxY=
Subject key identifier:   60:00:C2:23:CB:AA:E3:36:2F:C8:87:35:12:43:A7:AD:1E:45:BA:6E
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       25DB87BACE3A5DB925E8B14EACD9B0AD3DFD71E1
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 06 Jan 2026 19:06:35 +0000
ROA not before:           Tue 06 Jan 2026 19:01:35 +0000
ROA not after:            Tue 05 Jan 2027 19:06:35 +0000
asID:                     262234
IP address blocks:        190.185.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:db:87:ba:ce:3a:5d:b9:25:e8:b1:4e:ac:d9:b0:ad:3d:fd:71:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Jan  6 19:01:35 2026 GMT
            Not After : Jan  5 19:06:35 2027 GMT
        Subject: CN=6000C223CBAAE3362FC887351243A7AD1E45BA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:ee:a2:16:d5:1b:e0:3f:8e:6b:0a:eb:af:
                    6e:3d:9a:64:be:08:b5:3c:07:fb:cd:f4:52:a1:d7:
                    f2:7e:86:c1:0e:dd:88:2b:8a:5c:0b:8d:a9:32:bf:
                    c1:2e:f1:b8:5a:ea:7e:0c:3f:6c:5c:b8:39:69:46:
                    14:5b:14:95:01:1e:42:8f:4a:6a:17:91:11:44:70:
                    4c:6f:ff:a0:99:9c:3a:13:48:fb:f3:fa:26:e7:4e:
                    b0:7a:ab:b5:06:cc:ab:2d:53:f2:2d:81:7a:e8:d2:
                    62:ba:e8:42:43:9a:96:be:4c:25:a0:02:a4:59:0e:
                    39:77:ab:45:11:d8:76:7d:40:31:81:e5:58:c1:75:
                    39:91:fb:e8:48:f9:88:19:cb:0e:72:56:e6:bd:73:
                    72:6d:84:b9:70:9c:71:35:f9:38:75:b1:55:64:6c:
                    87:1f:37:7c:ff:34:56:79:96:f6:ea:ea:8c:fd:d1:
                    8c:26:cd:ca:49:51:e8:7c:0c:e0:4b:09:39:aa:07:
                    d7:ab:e3:4d:c3:b9:74:8d:1d:53:62:a2:7b:94:2a:
                    9e:bb:c5:08:f1:b1:bc:a9:1e:22:82:7d:b0:66:8e:
                    1b:92:dd:ec:3b:c0:66:02:05:79:a8:16:e4:d1:ba:
                    8c:4b:43:ec:7e:b7:2a:f6:d0:78:14:c9:27:a1:46:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:00:C2:23:CB:AA:E3:36:2F:C8:87:35:12:43:A7:AD:1E:45:BA:6E
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:a5:3f:7c:2b:9d:0a:b2:a7:d9:5a:eb:3c:d6:31:a0:a4:
         0c:fb:1c:0e:8d:95:27:fc:80:36:8d:28:be:f6:d6:c4:3f:4a:
         cd:76:bf:a7:4b:03:1a:c4:7e:09:be:eb:3e:4c:9f:4c:fb:ad:
         ca:58:2b:eb:8d:85:c7:82:32:ec:5e:3a:7c:18:7e:44:76:36:
         f2:36:a5:68:49:32:01:5f:25:a9:60:c1:be:0a:af:f0:7b:43:
         50:e2:7e:80:7f:d8:9e:37:b0:ad:92:e5:56:5e:26:61:8c:a1:
         8a:da:42:15:f1:f1:e0:0a:a1:d5:4b:62:1d:60:70:9e:3f:c5:
         73:1b:d0:06:f8:dc:23:80:40:5d:30:bb:c4:83:ad:1c:41:be:
         50:99:47:aa:d3:ca:b9:60:b2:7d:7c:37:91:d4:33:c2:62:7e:
         d5:4f:e9:81:89:29:31:ed:f6:da:11:3c:6e:e9:a0:09:e5:ba:
         f8:be:45:a5:48:b2:c4:5f:8f:22:bf:29:15:f2:d6:1a:12:82:
         da:17:08:d6:be:d3:58:de:ee:f4:65:a6:0d:fe:f2:44:98:4f:
         9e:1a:4b:83:71:52:6b:74:fa:38:04:b9:a3:8d:36:e2:a3:4d:
         91:07:1c:c5:f9:aa:cb:81:b2:50:ac:2f:69:c4:4a:aa:f9:c2:
         17:bf:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 11:22:07 2026 by rpki-client