This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa
File:                     3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa (raw, json)
Hash identifier:          XM2Pw3tcW3BvrCljeWZT9hMglSURXEa1d2bWO6hcn/8=
Subject key identifier:   FE:5C:D0:37:46:08:1F:94:7D:A6:B9:F7:D5:6F:78:6B:82:E9:94:CF
Certificate issuer:       /CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
Certificate serial:       280F5C564AE637018EB053231B8F22D7EAE0806B
Authority key identifier: 4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa
Signing time:             Tue 06 Jan 2026 19:47:04 +0000
ROA not before:           Tue 06 Jan 2026 19:42:04 +0000
ROA not after:            Tue 05 Jan 2027 19:47:04 +0000
asID:                     262208
IP address blocks:        190.13.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0f:5c:56:4a:e6:37:01:8e:b0:53:23:1b:8f:22:d7:ea:e0:80:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A8CA56E3B7BF88CD1347971DBEE896F367714C7
        Validity
            Not Before: Jan  6 19:42:04 2026 GMT
            Not After : Jan  5 19:47:04 2027 GMT
        Subject: CN=FE5CD03746081F947DA6B9F7D56F786B82E994CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:7f:02:56:6b:01:eb:e6:30:9d:01:e6:3f:
                    a3:12:0f:a9:c4:48:cb:10:c8:6e:5e:9e:73:dd:8a:
                    23:29:42:56:42:a4:2d:aa:d4:fc:17:68:79:23:58:
                    68:fd:5e:7d:34:a4:4a:cb:ab:fb:9a:b1:fd:cb:45:
                    4f:07:57:b9:7e:83:ac:f4:8f:60:ec:9e:40:a6:6d:
                    61:5c:c2:f0:e8:ba:a5:eb:de:0f:ec:36:5d:69:31:
                    7b:4a:59:1d:fc:3f:02:22:86:40:49:f9:a6:21:e9:
                    a8:00:ac:f3:28:a3:de:69:2e:b5:72:fe:9d:6d:d1:
                    65:71:98:ee:33:6b:3d:ac:37:80:7f:52:fd:95:39:
                    0e:31:ed:8a:62:fa:c8:5a:07:d5:9b:67:52:b5:e4:
                    21:31:8d:2e:75:b4:2e:de:85:ea:ea:d2:af:0a:52:
                    18:81:5a:fe:e4:d0:d5:04:47:1c:8a:9d:06:e7:6a:
                    67:51:48:4f:9f:0e:eb:5f:63:18:13:0d:56:23:d5:
                    ee:e6:40:0b:6b:99:28:b9:ed:33:21:47:0d:40:83:
                    e4:f2:61:ce:af:32:4f:c7:8a:16:4d:e7:22:02:c5:
                    6d:0d:3d:8f:ba:7c:e4:bd:b6:34:88:3f:37:f0:a8:
                    31:e7:a1:2c:08:99:25:61:4e:4c:5f:e1:ad:56:15:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5C:D0:37:46:08:1F:94:7D:A6:B9:F7:D5:6F:78:6B:82:E9:94:CF
            X509v3 Authority Key Identifier:
                keyid:4A:8C:A5:6E:3B:7B:F8:8C:D1:34:79:71:DB:EE:89:6F:36:77:14:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A8CA56E3B7BF88CD1347971DBEE896F367714C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88FF336A6B2F9FAA9A7980829832DDE757814C175E420E9317DDA53106684047/0/3139302e31332e3231372e302f32342d3234203d3e20323632323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:7c:43:49:84:18:5c:a3:b9:97:a2:2e:dc:d2:14:8e:d2:
         8d:f9:13:e4:39:b6:73:23:7a:02:4b:96:db:51:9c:a0:e7:d7:
         11:67:38:c4:e1:67:54:54:be:39:2a:a4:e1:95:e2:6b:5e:b6:
         b8:fb:83:0c:1c:79:70:c5:0b:c4:ff:e4:e3:9c:85:0d:e0:fe:
         b0:e3:66:ea:15:6b:2a:6e:be:cd:f1:c9:26:c9:61:cf:b5:e2:
         73:a9:58:08:5f:e1:39:bf:ce:d9:1b:08:62:0c:42:42:76:87:
         d5:3b:ce:cc:2f:ab:de:07:0c:19:a0:2b:5e:7c:e7:fc:57:60:
         82:98:86:ef:02:44:33:6d:31:16:ad:02:83:71:c5:41:2d:4b:
         6b:4f:0e:eb:37:09:0d:f1:aa:e3:e8:e9:4d:84:1a:73:88:89:
         94:e0:87:7f:90:63:13:49:28:3f:c8:03:36:3a:5c:63:0b:cd:
         81:6b:2b:1d:b3:c8:1f:db:96:11:19:f0:a2:bf:5c:b3:56:24:
         1b:26:c7:75:06:62:7c:1d:3a:ac:36:67:4f:2b:0a:40:34:3b:
         de:7a:c6:9c:57:b4:52:11:ac:23:0d:60:8c:fd:9f:83:3c:82:
         52:62:13:43:a7:25:d5:a2:95:fe:52:8b:01:8d:e9:24:ee:b0:
         13:32:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:03:38 2026 by rpki-client