This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e20323731383638.roa
File:                     3139302e3130382e39312e302f32342d3234203d3e20323731383638.roa (raw, json)
Hash identifier:          oHr6VXQzL1WYx847Q9n7COQ+6x4cgrGp16lfwgR8b5A=
Subject key identifier:   7E:CB:06:9B:B9:23:66:71:06:D7:61:A1:34:09:0E:88:97:64:4B:19
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       592CB544DDE585C79E9E2057B1FE98E605A7F7F6
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e20323731383638.roa
Signing time:             Tue 06 Jan 2026 19:26:16 +0000
ROA not before:           Tue 06 Jan 2026 19:21:16 +0000
ROA not after:            Tue 05 Jan 2027 19:26:16 +0000
asID:                     271868
IP address blocks:        190.108.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2c:b5:44:dd:e5:85:c7:9e:9e:20:57:b1:fe:98:e6:05:a7:f7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jan  6 19:21:16 2026 GMT
            Not After : Jan  5 19:26:16 2027 GMT
        Subject: CN=7ECB069BB923667106D761A134090E8897644B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:97:f8:9e:18:06:c1:6d:70:ab:6a:d2:43:
                    19:6d:8a:9c:10:50:60:6b:b8:86:9c:82:a8:35:f9:
                    d8:1c:1a:3b:bf:ca:e2:8e:46:ad:7d:b5:42:1a:27:
                    f7:0a:fa:11:47:86:d3:1b:db:52:ad:9a:e2:36:e5:
                    6d:58:49:90:21:74:39:a1:59:23:7b:b1:66:a3:f4:
                    bc:99:fe:6a:3d:7b:e5:34:11:c1:36:05:03:ea:57:
                    64:b4:b7:9f:1e:b2:2f:2e:6e:ba:49:6e:c5:2f:cf:
                    c1:59:19:bf:7d:8a:2c:e6:b0:38:b0:b1:fb:b7:7f:
                    bf:ae:83:0c:83:4d:a0:3e:53:a0:b6:97:97:49:8f:
                    94:9d:0c:51:df:83:fc:fb:b9:a1:db:a4:b4:fe:54:
                    98:8e:33:a4:a6:87:73:f2:24:ff:d6:22:a6:6d:06:
                    95:e1:a2:f9:fd:68:c6:3d:c1:3e:a4:23:d4:d0:c8:
                    3b:2a:a8:66:b8:a1:c0:95:eb:6e:81:a4:e4:39:ff:
                    24:53:ae:7c:5a:54:59:c2:ba:f3:f7:4f:8f:0e:c7:
                    32:a5:1c:26:63:ca:eb:00:41:79:e7:0d:0d:58:28:
                    c8:50:9d:e5:4b:fe:06:13:46:df:76:c1:82:5b:8a:
                    4b:39:d2:46:81:92:db:6f:ae:d1:26:51:32:90:f4:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:06:9B:B9:23:66:71:06:D7:61:A1:34:09:0E:88:97:64:4B:19
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e20323731383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:ac:ed:de:bd:80:b7:f2:c0:96:2a:b9:a8:6d:71:cf:04:
         ff:f7:e2:56:91:62:14:4b:7a:be:bf:ee:90:02:06:24:c4:d7:
         63:ec:ce:ef:a5:2b:b7:fa:ce:97:65:07:ba:c8:1f:84:87:70:
         ee:24:ba:05:0d:8e:85:04:36:5e:07:cd:80:d8:6b:16:95:f2:
         a9:e1:24:0d:ac:91:0d:93:cc:18:7e:b2:e9:10:68:1f:a9:e7:
         f1:c4:69:9d:e8:8d:ae:c2:ae:5b:2b:f7:33:cf:38:75:0e:79:
         62:bf:f8:04:a4:c6:6d:d6:e1:d1:42:45:a4:21:80:a5:26:18:
         a3:50:4c:9c:b3:81:fa:4c:3a:3b:e9:32:9c:c7:bb:d4:07:29:
         09:5d:5d:19:6e:63:9e:f7:96:ae:22:53:70:01:10:c2:95:33:
         91:f9:38:28:dd:39:75:cb:0e:6b:c5:2c:24:cb:74:3a:3f:04:
         ae:12:19:c8:8b:92:98:36:77:df:3f:56:6c:89:fb:3b:a4:d8:
         bc:b7:e3:84:23:11:98:09:59:89:51:fb:19:d2:9a:a8:94:2e:
         28:40:24:93:89:6f:28:81:10:e5:0f:29:cc:c2:bb:da:b0:f6:
         e3:71:bf:a1:92:03:50:18:13:94:70:77:72:cf:dd:a8:57:2a:
         4f:de:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 11:20:51 2026 by rpki-client