This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f32342d3234203d3e20323635383637.roa
File:                     3139302e39382e3132382e302f32342d3234203d3e20323635383637.roa (raw, json)
Hash identifier:          3LS62AviYa0bzqDqEzR5Pq6pIWRm1wkbVkRUeC3ZMv4=
Subject key identifier:   10:C0:B2:94:2C:5F:B7:04:01:42:F4:10:28:90:6A:20:FB:8D:5C:1E
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       14AEBF9E316BA44C254A9078B9D941FDA9DA50CA
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f32342d3234203d3e20323635383637.roa
Signing time:             Tue 06 Jan 2026 19:20:33 +0000
ROA not before:           Tue 06 Jan 2026 19:15:33 +0000
ROA not after:            Tue 05 Jan 2027 19:20:33 +0000
asID:                     265867
IP address blocks:        190.98.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 20:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:bf:9e:31:6b:a4:4c:25:4a:90:78:b9:d9:41:fd:a9:da:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Jan  6 19:15:33 2026 GMT
            Not After : Jan  5 19:20:33 2027 GMT
        Subject: CN=10C0B2942C5FB7040142F41028906A20FB8D5C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:62:06:c7:97:23:fc:d5:17:6f:54:aa:14:
                    8b:3d:8f:d8:9a:6c:23:02:8b:29:14:21:e6:86:65:
                    cf:27:d9:e8:b1:d3:9d:23:60:75:78:a6:e4:64:ba:
                    02:65:11:f1:21:4f:da:5e:b0:de:f6:b6:17:74:de:
                    b6:cb:70:ab:4d:e2:6b:fc:a9:73:d1:1f:ba:3e:e6:
                    9b:52:94:62:43:ca:3d:6c:9e:a2:d9:92:51:84:c7:
                    0a:85:62:92:f0:27:e7:b1:89:57:7d:84:9a:8c:5a:
                    f4:51:2c:7f:58:d3:55:ae:5f:9f:fd:eb:46:98:01:
                    d9:b7:fb:fa:20:fb:0d:cc:76:ee:38:81:b1:d6:2f:
                    77:3f:26:cc:f8:30:b6:9b:97:86:89:59:23:54:06:
                    5a:3b:ec:10:00:c2:e7:ec:db:87:ec:c4:cd:90:d6:
                    25:59:47:4a:ba:3c:6d:ae:8b:13:90:15:1d:da:f8:
                    72:55:19:46:75:be:5c:a0:a7:a9:c2:08:15:af:66:
                    0c:70:ae:4c:c4:7f:19:0e:40:28:9a:5d:0c:1d:fc:
                    22:8f:09:47:3c:5d:3d:3c:9f:30:a7:90:60:e2:03:
                    c0:51:39:66:f0:ba:94:d6:04:77:e7:15:a7:4b:b4:
                    79:25:88:46:2d:80:0e:7a:0e:dc:a9:7a:e0:3c:ed:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:B2:94:2C:5F:B7:04:01:42:F4:10:28:90:6A:20:FB:8D:5C:1E
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3132382e302f32342d3234203d3e20323635383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:9f:7b:aa:5a:60:c7:0e:c0:2c:98:73:72:76:b5:1d:86:
         7f:4e:87:c9:ad:6f:54:4d:7f:19:5b:1b:ba:fb:76:be:50:f0:
         1c:b7:b4:e2:42:99:f4:ea:80:52:81:bd:9d:ee:7a:50:51:08:
         22:1e:0c:04:17:f2:b7:39:72:8a:e3:18:00:13:17:d4:09:0c:
         d0:45:aa:67:77:9e:05:e3:d8:90:a9:18:8f:17:8b:f9:a3:6a:
         01:32:b1:48:db:c5:97:df:7d:24:4c:a2:e4:19:e4:b5:df:15:
         e7:eb:8a:70:0a:ad:ba:a9:f1:df:17:c0:0d:ea:ac:f9:5c:b4:
         f0:9b:29:fd:04:09:ef:c1:b5:5b:40:46:44:0d:c3:35:d7:67:
         48:0d:da:b0:f8:cf:b9:b9:b5:29:8f:73:f2:8f:40:25:8b:2e:
         59:01:b2:75:c5:69:fc:61:5c:d6:49:74:71:e5:40:e0:84:67:
         fc:23:d1:0e:3f:9e:60:13:fa:85:73:e6:f1:f9:e9:13:4d:ad:
         65:9b:7d:7b:11:14:f8:3e:f6:d9:78:2c:05:ef:85:3c:74:3f:
         3b:ea:18:d8:c9:b9:5b:b9:77:de:f8:26:ae:bf:9b:9d:69:10:
         a1:48:57:4c:11:4a:d0:20:96:94:9c:d3:26:79:e6:cb:96:32:
         91:ac:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:44:34 2026 by rpki-client