This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa
File:                     3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          AK9vT3wHxwCZDPwM3J730E72SIsCLpybcV1G64NzgQg=
Subject key identifier:   BA:58:EC:3F:23:EF:2E:FB:0A:70:8A:36:30:D2:F5:61:4C:98:1F:EC
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       68EA6AFEF3D77893A9AE38602367DFFA07EDEA76
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:21:02 +0000
ROA not before:           Tue 06 Jan 2026 19:16:02 +0000
ROA not after:            Tue 05 Jan 2027 19:21:02 +0000
asID:                     23243
IP address blocks:        190.106.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:6a:fe:f3:d7:78:93:a9:ae:38:60:23:67:df:fa:07:ed:ea:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:16:02 2026 GMT
            Not After : Jan  5 19:21:02 2027 GMT
        Subject: CN=BA58EC3F23EF2EFB0A708A3630D2F5614C981FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:14:d0:6d:30:a2:e8:c6:dc:27:e6:17:8e:
                    6d:07:b8:10:17:40:f1:90:43:77:b5:fa:04:30:de:
                    17:47:8f:a8:85:63:d4:d4:84:dd:14:42:1a:54:39:
                    38:45:bb:25:02:79:11:d1:e8:82:55:90:2d:2f:a1:
                    c0:9a:28:35:34:18:8d:dc:80:17:b2:37:94:d6:e3:
                    d8:51:7d:33:5b:e5:f9:6c:7c:e3:74:1e:4c:1d:cd:
                    03:4a:87:48:e3:26:d5:2a:6e:29:d1:2a:f3:9a:a9:
                    21:ea:9c:bf:c9:ce:bd:5e:c7:9b:6f:c5:18:b8:6f:
                    27:93:7c:ef:fa:62:b1:e4:b2:46:9a:23:f1:b9:7e:
                    78:2f:21:a8:7e:92:fd:ac:d4:e4:8c:73:fe:50:c7:
                    60:0c:55:f4:2e:e7:d1:78:40:c7:b1:19:c9:6c:1e:
                    f3:18:ee:eb:e6:08:ae:7e:24:20:d9:ef:27:c4:5a:
                    9b:10:c4:a3:15:35:c2:7b:17:c4:dc:23:2d:db:3e:
                    ec:f8:99:f6:e4:22:69:2e:2a:7b:29:e0:85:66:92:
                    d1:6c:18:2c:35:67:2f:85:7d:b3:4c:be:a3:1f:86:
                    4e:d4:54:bc:88:6f:ce:a7:3b:50:b4:a8:d0:2e:43:
                    71:13:f8:6e:2a:45:c4:97:db:70:77:80:91:ea:79:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:EC:3F:23:EF:2E:FB:0A:70:8A:36:30:D2:F5:61:4C:98:1F:EC
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:be:2d:53:67:50:63:4c:8f:d4:ef:fb:2f:cc:c7:88:28:ec:
         46:bf:97:53:ea:f9:fd:3e:42:f7:5d:01:61:2c:ab:8d:cd:3c:
         cc:33:18:2c:1b:db:db:1c:01:8d:e1:b8:76:c0:9d:a2:9f:d2:
         06:fb:23:9d:34:48:08:e3:1c:cd:63:07:12:f4:a1:de:9d:e5:
         a5:38:9e:40:00:ca:14:2e:1b:5f:b4:81:5a:3b:02:5b:ad:24:
         1e:79:95:10:cc:2e:fe:48:c6:06:5c:d0:5c:d2:e4:a0:ac:2b:
         7d:ec:97:33:2e:b2:a7:f2:5b:7e:dd:76:4f:69:c9:94:c9:ae:
         fc:3d:35:d3:fe:d6:20:bf:ff:a3:d4:38:1c:d8:c8:e3:c7:ce:
         d8:5e:f0:2c:b5:c2:11:8b:71:02:f9:6c:8a:22:60:83:ab:85:
         45:43:34:81:8c:40:dd:11:a9:94:27:45:de:f3:9b:a2:3d:a4:
         dd:21:a9:df:5e:e3:fd:a2:e5:4c:11:07:c2:fa:53:64:c2:3d:
         58:66:2d:5d:66:4e:12:9f:7c:a4:ac:80:b1:fa:af:85:62:50:
         ca:74:84:3f:5a:0d:21:d2:52:f5:8f:56:bd:a0:bf:73:34:5d:
         5f:4e:25:6f:f0:e3:52:b5:ac:48:e0:03:59:43:39:42:4a:0f:
         1b:ae:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:55:59 2026 by rpki-client