This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
File:                     3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa (raw, json)
Hash identifier:          Ca4R3rvKCZ+O++UBniGjsEoz7eVSbTRAA3FXfDgEoPw=
Subject key identifier:   EA:7F:71:1C:22:CA:10:C1:5C:13:DA:FC:75:BE:F2:47:FE:FE:BC:69
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       469249BC273A84A9691BAD8E853AE3D58D845B3E
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa
Signing time:             Tue 06 Jan 2026 19:32:12 +0000
ROA not before:           Tue 06 Jan 2026 19:27:12 +0000
ROA not after:            Tue 05 Jan 2027 19:32:12 +0000
asID:                     28007
IP address blocks:        190.114.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:92:49:bc:27:3a:84:a9:69:1b:ad:8e:85:3a:e3:d5:8d:84:5b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Jan  6 19:27:12 2026 GMT
            Not After : Jan  5 19:32:12 2027 GMT
        Subject: CN=EA7F711C22CA10C15C13DAFC75BEF247FEFEBC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:1b:7b:21:e8:30:90:19:74:55:97:db:73:
                    4c:a2:af:e1:69:f6:92:59:70:0b:25:ba:d8:ce:5c:
                    95:21:09:47:de:b9:a0:85:84:42:4f:df:11:37:60:
                    48:c2:4d:db:fb:88:a0:55:32:b3:a7:eb:88:62:4e:
                    8d:0a:46:0f:00:53:10:86:e3:ff:2e:24:4f:1b:cf:
                    f6:0a:00:06:8c:2a:73:e2:d3:22:63:2e:38:13:d0:
                    75:6a:3b:db:36:6b:8e:df:4c:fe:dc:c6:67:26:5a:
                    c2:85:a3:4e:09:1a:bb:a3:1d:ef:57:11:ed:4f:df:
                    2d:a5:b5:ac:70:ff:b0:23:6e:bf:74:65:30:74:76:
                    88:bb:53:95:1a:76:db:a0:f8:a9:46:ef:81:4d:7e:
                    ce:f8:64:06:68:72:9b:de:83:f5:ce:9c:4c:f7:9d:
                    fd:12:63:eb:c8:8d:ff:7c:28:4d:66:42:c3:09:3f:
                    2a:48:fe:99:d9:2b:19:bc:36:0b:ec:c9:4f:85:86:
                    1e:a2:a2:4b:5f:c2:0a:ff:df:57:ab:37:e8:09:b0:
                    da:1c:87:c6:4a:72:e5:0a:6a:b8:59:1d:4c:da:dd:
                    87:ab:89:1e:9b:0d:0d:76:0d:92:a3:79:d4:26:a8:
                    db:29:0a:f5:fb:5b:83:d7:85:ce:cd:2b:fe:b7:58:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:71:1C:22:CA:10:C1:5C:13:DA:FC:75:BE:F2:47:FE:FE:BC:69
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e3131342e3234302e302f32312d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:6b:ef:5f:1c:45:78:17:0e:c3:36:d7:be:ae:1c:53:12:
         dc:a8:70:40:ff:58:3f:29:51:79:36:5e:6f:44:0a:7c:13:af:
         d0:63:f0:61:d8:91:40:d2:d1:7d:cb:5d:86:2c:1b:af:d9:12:
         1f:b3:3b:19:13:6f:43:a1:8e:a2:c3:ba:56:19:5c:55:40:ee:
         b1:14:25:58:2c:d4:5d:fe:56:92:b9:11:19:4d:7a:e7:18:d0:
         f3:95:5b:fb:83:17:9d:60:90:eb:8c:d2:83:aa:ec:d7:23:d2:
         02:4d:ec:4e:02:56:e2:48:a4:e2:db:35:cb:3f:4b:2b:60:a7:
         93:01:cd:01:07:32:46:cb:99:b9:09:76:86:66:ca:c6:f9:3b:
         f1:17:92:4d:f3:cd:89:fa:3a:7b:9b:81:86:f1:ab:3c:ce:d8:
         50:bc:e7:f4:a9:5b:04:a5:cf:ef:4b:e4:c8:81:49:39:cc:ab:
         57:c2:f1:31:28:68:11:2e:e9:02:16:8a:d7:46:62:d7:fc:e1:
         08:a7:a6:28:68:8c:ad:07:62:87:7f:fd:8e:71:34:4e:c1:78:
         6b:75:d7:0d:6e:d0:82:75:ad:22:d3:74:9a:77:7d:72:34:81:
         02:68:33:19:ca:f3:0a:e4:a8:28:1e:29:80:76:19:d5:30:dd:
         36:96:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 19:39:52 2026 by rpki-client