This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230382e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130362e3230382e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          Dys2B4UvG+UNPjBwUSub8KmESoy/RsbgRL9FgLCHMaI=
Subject key identifier:   6F:52:42:F8:5A:AA:5E:98:A8:99:8C:EE:CF:ED:79:A8:B1:8E:D1:6B
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       0B941682113C2057DFDFA1F743F7BBBD9B0F6E47
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230382e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:21:00 +0000
ROA not before:           Tue 06 Jan 2026 19:16:00 +0000
ROA not after:            Tue 05 Jan 2027 19:21:00 +0000
asID:                     23243
IP address blocks:        190.106.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:16:82:11:3c:20:57:df:df:a1:f7:43:f7:bb:bd:9b:0f:6e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:16:00 2026 GMT
            Not After : Jan  5 19:21:00 2027 GMT
        Subject: CN=6F5242F85AAA5E98A8998CEECFED79A8B18ED16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:fa:87:14:96:ac:44:f0:7d:ca:f8:7d:75:
                    0a:c6:50:58:56:ff:0c:5b:a3:71:22:50:c4:69:29:
                    b3:c0:71:2f:dc:a4:55:0b:b7:cd:7b:23:cf:6d:91:
                    d1:2b:40:75:93:f4:55:63:68:1e:eb:8e:65:a7:0d:
                    d1:40:b6:ba:96:2d:ed:d1:d4:37:b0:aa:f5:84:e4:
                    99:a4:1e:fd:b9:30:1a:cd:f4:c5:d1:05:6a:de:4c:
                    b4:6a:01:9a:80:2e:5b:af:2e:63:e2:85:fe:34:d7:
                    19:9a:99:81:b7:f2:bc:31:a1:57:e8:11:e1:8a:cb:
                    66:63:c9:44:5d:37:67:dd:16:d7:23:36:76:5c:ec:
                    2c:bf:ff:84:0f:98:7e:21:fc:49:02:6a:0b:eb:dc:
                    67:75:69:35:1f:e6:52:6e:d6:84:a0:a9:f9:23:f8:
                    55:96:32:9d:3f:2b:04:89:81:46:46:bd:a9:67:d2:
                    47:68:6f:58:d8:86:2e:5b:d2:e1:80:4b:39:ff:d0:
                    4d:ab:bc:ea:b3:73:3c:d7:12:77:11:a8:33:e3:a1:
                    49:ac:a5:96:9d:ed:a7:e8:db:53:00:58:6e:b9:93:
                    f7:8b:19:32:e6:23:92:55:4f:8f:31:c6:dc:a6:c7:
                    2c:fe:87:b1:4f:fb:81:77:cd:c8:59:66:9f:94:24:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:52:42:F8:5A:AA:5E:98:A8:99:8C:EE:CF:ED:79:A8:B1:8E:D1:6B
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3230382e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:ba:43:7b:a1:07:8e:f0:7d:11:77:a4:8e:14:88:82:4f:
         2b:72:ad:b8:2c:6d:f8:bd:61:7e:4a:96:1d:07:96:36:2a:91:
         fe:87:69:15:21:3e:96:86:ed:9a:52:62:de:9e:e9:2a:2b:79:
         80:50:a4:7b:81:07:97:c1:5d:8e:4e:15:05:09:36:8b:44:72:
         b6:72:21:34:83:4a:78:77:b6:7c:98:ce:41:d8:9d:a4:21:08:
         0e:47:68:14:36:35:03:7f:88:d4:19:36:5c:e3:94:e2:10:d9:
         6a:60:87:2b:1c:35:5a:ef:37:2f:57:04:2f:d9:fb:84:1e:93:
         59:59:8f:24:d1:9b:95:7f:d5:17:6b:95:b5:48:50:0f:34:13:
         f8:ce:f2:90:81:6b:0a:88:2a:ee:49:4f:db:0b:b6:36:f9:be:
         aa:22:2d:7f:ad:a4:4f:da:3f:c4:bc:46:3d:73:72:41:74:6c:
         38:29:20:79:e0:4c:f6:b3:10:6c:4b:12:20:a8:20:92:9c:77:
         23:01:95:58:67:c9:86:ab:a4:64:c2:09:df:b7:4a:24:b4:da:
         1a:b9:22:26:c3:32:13:31:ed:a1:13:36:60:0f:16:05:8e:72:
         7b:f5:00:bf:ed:e9:a6:2a:e3:7d:64:42:2d:b8:c6:9e:ab:d0:
         b5:f1:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:55:46 2026 by rpki-client