This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39342e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39342e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          6+naD9zFYd2dF8TdxkSE74Pj12m/uBp3z16SDwCiZE4=
Subject key identifier:   D4:BB:FF:4E:6B:2C:52:5F:1A:88:55:8E:52:10:BB:4B:7E:CC:8F:AC
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       14FFA7E5785DF6180A1B81712786679BF5F059CB
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39342e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 02 Dec 2025 20:10:03 +0000
ROA not before:           Tue 02 Dec 2025 20:05:03 +0000
ROA not after:            Tue 01 Dec 2026 20:10:03 +0000
asID:                     18678
IP address blocks:        190.108.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 06:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ff:a7:e5:78:5d:f6:18:0a:1b:81:71:27:86:67:9b:f5:f0:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Dec  2 20:05:03 2025 GMT
            Not After : Dec  1 20:10:03 2026 GMT
        Subject: CN=D4BBFF4E6B2C525F1A88558E5210BB4B7ECC8FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:eb:9d:49:a1:02:98:f0:39:e0:cc:42:87:
                    da:eb:27:fa:aa:ce:d9:f1:17:99:3c:b6:25:b1:58:
                    71:6c:54:f8:97:87:75:ef:92:31:dc:9d:31:eb:b9:
                    2e:76:61:fc:44:e2:97:2f:17:12:54:b1:60:a2:9d:
                    10:d5:0f:1d:6e:79:ce:ed:20:ec:16:7c:65:34:a2:
                    c5:38:ab:95:e4:ef:a4:d3:fd:7c:de:4f:65:b2:01:
                    32:65:27:41:b8:c3:2a:22:18:03:14:52:fb:7c:99:
                    6f:39:ad:95:39:41:65:16:71:98:b3:e5:63:66:89:
                    8a:9f:6e:43:c2:85:84:f9:fe:ae:3b:c2:18:be:06:
                    c5:50:a4:53:7c:3b:29:e6:39:04:be:c9:da:10:8e:
                    21:14:29:9e:62:69:1e:b2:73:59:0d:e6:b4:29:14:
                    4f:30:e3:ea:24:d3:0e:d8:33:7d:48:0c:c6:50:c8:
                    2c:c2:08:eb:80:93:c4:f8:d2:02:eb:29:b1:96:95:
                    e6:c5:a5:59:91:ba:78:45:42:8c:3f:a9:e2:94:d7:
                    9b:31:29:d8:67:39:69:0a:30:e4:26:b4:9f:aa:74:
                    0c:cc:5e:e4:78:05:5f:21:a5:45:d0:92:27:e2:07:
                    22:9b:f2:3d:87:c2:01:c5:bd:6a:e2:ad:8e:42:c6:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BB:FF:4E:6B:2C:52:5F:1A:88:55:8E:52:10:BB:4B:7E:CC:8F:AC
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39342e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:67:3b:fd:eb:1d:fa:08:ac:8e:f7:45:51:a7:90:0b:de:b8:
         f1:e5:ba:0c:6c:86:fd:6e:a6:b2:23:2b:6f:db:69:3b:bb:0a:
         10:32:b6:ad:9d:b8:4c:12:e0:f9:32:e8:d0:8e:e5:16:cc:da:
         aa:0c:6a:dd:7d:b9:70:56:06:44:aa:d9:f2:b2:60:ee:ca:3b:
         41:d8:78:17:fd:53:04:af:6e:57:65:a9:c9:2c:b7:b1:28:b5:
         ab:e2:94:f3:d7:b3:b0:e3:cb:f4:47:39:a4:b7:37:76:93:2e:
         18:64:26:85:b0:d0:80:be:cf:1a:c1:6f:5a:f1:59:c1:0c:dd:
         b5:e1:56:4c:b6:e9:f4:57:82:d1:f6:97:2e:43:0f:e9:f1:0d:
         06:e5:1e:95:ec:fa:5c:70:b1:cb:32:d4:5f:06:9f:e1:18:56:
         b7:85:de:6b:22:87:5d:41:9f:9a:44:f3:92:a9:d8:1d:a3:0c:
         b7:6c:7a:ba:ea:a4:09:ed:06:55:ab:55:f4:60:dd:20:13:3d:
         e3:45:64:94:6a:b7:f2:65:c4:30:d4:b6:4e:f9:08:16:7b:99:
         c7:19:89:3d:d4:3b:d2:02:4e:77:70:fd:ca:3f:f7:d1:08:8f:
         e1:79:1a:bd:0c:1b:10:c4:30:48:06:7e:8a:44:97:4c:4b:0b:
         c5:0b:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:25:31 2025 by rpki-client