This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa
File:                     3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          EfIlpi4LFdYWmV2GebkdwNDFfDfduBCB/XL5iVik8Bw=
Subject key identifier:   01:D5:D6:4F:01:56:07:BC:26:FD:09:73:C2:7B:A2:88:BA:04:BD:10
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       479ABAF1E924C75D1D17AA30748A9C3CC3F017AD
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:21:05 +0000
ROA not before:           Tue 06 Jan 2026 19:16:05 +0000
ROA not after:            Tue 05 Jan 2027 19:21:05 +0000
asID:                     23243
IP address blocks:        190.106.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:ba:f1:e9:24:c7:5d:1d:17:aa:30:74:8a:9c:3c:c3:f0:17:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:16:05 2026 GMT
            Not After : Jan  5 19:21:05 2027 GMT
        Subject: CN=01D5D64F015607BC26FD0973C27BA288BA04BD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:21:0c:5d:1c:51:2d:eb:fc:6b:07:e9:8c:
                    bc:ab:59:b7:75:1e:74:b3:63:a3:12:29:b8:fc:87:
                    01:9b:7c:99:23:cf:f7:54:dd:19:84:4b:e3:1a:0b:
                    f3:bb:19:15:5c:db:d2:40:ba:97:67:fc:86:ea:58:
                    e3:c7:ca:eb:f0:e7:86:09:3a:3f:3a:29:c3:86:56:
                    53:71:57:6d:14:95:e6:4a:f7:c9:be:cd:89:e0:a2:
                    bc:c2:28:e8:5a:d8:30:8f:29:4b:63:75:f1:ff:ee:
                    5f:69:11:8e:e0:63:65:53:57:62:e4:e3:bf:c8:49:
                    98:a1:55:d3:76:ca:c2:da:1d:45:ae:78:c5:a7:65:
                    e4:b5:44:ed:e3:d2:da:82:85:3c:06:8d:15:bd:05:
                    56:83:c0:ce:b8:ec:fb:ba:44:22:e0:22:8b:4a:41:
                    67:0f:50:8f:dc:35:2e:35:e6:cc:b9:f7:41:6c:34:
                    f0:5d:90:e9:88:88:5c:19:7f:63:5e:0a:82:e5:48:
                    e8:58:e2:8f:6c:1f:3d:1e:2f:a9:f9:23:ec:9a:9b:
                    3c:73:94:33:ca:12:17:11:0e:4b:ef:ed:03:e2:21:
                    51:d6:b1:21:c6:8d:a0:00:9d:c3:ff:1b:3e:07:49:
                    93:9e:b4:d8:96:d6:64:52:5d:8c:db:48:79:31:45:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:D6:4F:01:56:07:BC:26:FD:09:73:C2:7B:A2:88:BA:04:BD:10
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3231312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d8:1a:08:c0:70:33:e2:4c:7b:8c:74:d0:32:ac:2c:7f:03:
         35:99:18:e9:7b:e2:05:e5:e2:b5:18:08:dd:f5:fc:98:ec:0a:
         cb:7c:b4:cf:95:a8:c5:52:b9:45:83:21:63:35:74:3e:10:74:
         6e:ff:4d:2c:2b:43:e1:4f:a4:0f:b3:47:c8:f4:e8:51:90:c2:
         e4:0a:fa:b5:bd:eb:1a:40:93:d6:bc:d7:64:9a:85:f6:24:35:
         d3:12:30:6b:ce:b4:5b:32:e7:c8:92:b4:6f:c2:b2:3b:9c:78:
         53:8a:30:41:5c:08:a8:17:03:0d:84:5a:b9:c8:5a:f3:60:7e:
         80:2c:f8:1e:38:a3:51:6c:92:1e:db:b8:64:00:7b:6e:5b:04:
         f2:ac:aa:c5:6d:9c:ce:a3:bc:99:a4:5f:4f:50:07:17:b9:79:
         4a:b0:f2:d9:ff:b1:b3:33:53:11:7b:10:e2:04:99:6b:f6:c1:
         f9:3f:fb:59:6d:79:bb:1d:e4:a4:e2:45:98:36:d3:8b:2b:79:
         1a:be:e4:a8:ec:8c:86:64:b3:af:25:6b:dd:40:b3:1a:9e:4b:
         62:83:1b:e8:be:31:c1:2a:2a:03:92:f4:ed:63:5c:91:57:a6:
         11:50:e6:d7:b4:d1:e4:a9:85:b8:7f:b5:8d:3b:49:82:c0:07:
         3a:bf:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:56:56 2026 by rpki-client