This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131372e302f32342d3234203d3e20323633373631.roa
File:                     3139302e39392e3131372e302f32342d3234203d3e20323633373631.roa (raw, json)
Hash identifier:          IcV3UoSpknP/MtOhxgGzNixC4latAP/0GooIdVTRwC8=
Subject key identifier:   20:CB:DE:5D:3C:46:5E:8C:E6:04:83:20:45:A6:4E:D0:F3:06:89:29
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       395D323487416DACA2B23EBFE0ECBD0052459503
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131372e302f32342d3234203d3e20323633373631.roa
Signing time:             Mon 26 Jan 2026 15:27:27 +0000
ROA not before:           Mon 26 Jan 2026 15:22:27 +0000
ROA not after:            Mon 25 Jan 2027 15:27:27 +0000
asID:                     263761
IP address blocks:        190.99.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5d:32:34:87:41:6d:ac:a2:b2:3e:bf:e0:ec:bd:00:52:45:95:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Jan 26 15:22:27 2026 GMT
            Not After : Jan 25 15:27:27 2027 GMT
        Subject: CN=20CBDE5D3C465E8CE604832045A64ED0F3068929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:81:38:39:b7:e2:3b:f5:5b:ea:97:bf:c3:
                    45:8d:c5:76:d8:92:d2:72:a5:10:77:b4:df:e0:15:
                    57:04:cb:5c:37:0d:82:b1:e2:d2:60:44:97:63:25:
                    68:ff:1a:b9:10:54:4f:89:46:1b:f5:e3:b1:7b:8d:
                    76:84:71:c4:93:ab:ef:c3:4f:75:20:9d:61:85:82:
                    22:92:48:69:57:8c:05:f1:95:12:95:cf:8a:60:c7:
                    dd:b9:23:1f:a3:cf:9c:10:a5:7b:d0:21:22:9c:96:
                    cd:3f:0a:05:de:93:d3:49:d4:b1:10:62:e9:7d:51:
                    36:2b:7a:3c:24:9d:0f:f0:c1:66:b2:f0:4f:4a:5a:
                    de:dc:62:c7:ca:ee:b4:65:d5:0f:b7:4f:8d:56:91:
                    0f:7d:3c:bb:72:87:c5:2b:c1:c4:a8:1d:d8:de:5d:
                    00:da:f0:07:89:7f:a3:d5:6a:cf:4e:06:73:b1:32:
                    33:45:65:89:dd:56:bc:57:43:9e:34:c6:7f:31:c7:
                    de:6a:1e:24:61:2c:59:c2:f1:50:9a:5a:ef:3e:12:
                    51:29:62:f4:58:18:c6:71:8a:52:ab:14:1e:c2:1f:
                    65:43:53:4d:16:68:ff:56:9f:c1:ff:f0:d4:4f:3e:
                    37:c6:9a:14:c3:23:9f:ae:31:43:99:c0:e6:cf:cb:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CB:DE:5D:3C:46:5E:8C:E6:04:83:20:45:A6:4E:D0:F3:06:89:29
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3139302e39392e3131372e302f32342d3234203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:8f:10:09:a5:16:83:98:52:dd:1c:25:78:46:27:66:95:
         7a:d7:df:de:f6:74:ef:fd:01:11:9c:36:e1:b2:2a:40:14:89:
         78:8b:ae:fc:e3:97:df:9a:e6:cd:d2:0f:62:bf:13:e0:ca:9e:
         61:4b:f1:b7:61:58:7b:95:4c:cb:85:af:5a:f5:dc:e0:82:86:
         f9:80:90:f3:b7:e1:a0:76:88:22:1b:7b:c7:73:76:92:e2:0a:
         0e:b2:79:17:19:5b:3d:fd:3d:9d:45:e5:67:1c:e3:44:f6:2a:
         c8:25:c2:03:43:9a:4c:65:77:01:ab:6a:83:26:0d:46:ff:38:
         a5:a4:73:4e:51:4a:4c:7d:29:dd:19:d1:a5:68:aa:13:f9:1d:
         08:79:a9:b9:5a:f8:01:89:96:33:1a:34:36:4a:70:50:da:89:
         d4:0a:00:0b:6f:32:34:8c:ea:32:7d:66:52:20:dd:31:aa:d5:
         1c:c3:6b:0e:d0:94:5a:03:04:59:fb:a7:74:18:1c:33:a2:2b:
         22:45:81:fa:96:80:98:57:68:2f:30:b9:b9:5e:1c:b1:a3:3a:
         eb:79:68:50:d6:c9:4f:17:b1:c1:1c:a2:cc:8c:5c:f2:b8:96:
         13:86:36:14:42:05:75:01:39:33:63:24:0e:90:53:44:f7:4c:
         9b:3f:c6:fa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOV0yNIdBbayisj6/4Oy9AFJFlQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI3OUQ2NjFDNEUwM0ZGMEM4NDNDMEUxMjJFNDgzOTU2
NTkzM0M3QzAeFw0yNjAxMjYxNTIyMjdaFw0yNzAxMjUxNTI3MjdaMDMxMTAvBgNV
BAMTKDIwQ0JERTVEM0M0NjVFOENFNjA0ODMyMDQ1QTY0RUQwRjMwNjg5MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbK4E4ObfiO/Vb6pe/w0WNxXbY
ktJypRB3tN/gFVcEy1w3DYKx4tJgRJdjJWj/GrkQVE+JRhv147F7jXaEccSTq+/D
T3UgnWGFgiKSSGlXjAXxlRKVz4pgx925Ix+jz5wQpXvQISKcls0/CgXek9NJ1LEQ
Yul9UTYrejwknQ/wwWay8E9KWt7cYsfK7rRl1Q+3T41WkQ99PLtyh8UrwcSoHdje
XQDa8AeJf6PVas9OBnOxMjNFZYndVrxXQ540xn8xx95qHiRhLFnC8VCaWu8+ElEp
YvRYGMZxilKrFB7CH2VDU00WaP9Wn8H/8NRPPjfGmhTDI5+uMUOZwObPy4VVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIMveXTxGXozmBIMgRaZO0PMGiSkwHwYDVR0j
BBgwFoAU8nnWYcTgP/DIQ8DhIuSDlWWTPHwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTY2NEY3MkQ5QjM5MUU1M0JEMjMzRTI1OEJGMEMyRTk3
MTkzNDA1QTRGOEJBQzhBNkQ3QkQ4MjNFQTNDOUE2LzAvRjI3OUQ2NjFDNEUwM0ZG
MEM4NDNDMEUxMjJFNDgzOTU2NTkzM0M3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMjc5RDY2MUM0RTAzRkYwQzg0
M0MwRTEyMkU0ODM5NTY1OTMzQzdDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUU2NjRGNzJEOUIzOTFFNTNCRDIzM0UyNThCRjBDMkU5NzE5MzQwNUE0
RjhCQUM4QTZEN0JEODIzRUEzQzlBNi8wLzMxMzkzMDJlMzkzOTJlMzEzMTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmN1
MA0GCSqGSIb3DQEBCwUAA4IBAQBK7I8QCaUWg5hS3RwleEYnZpV619/e9nTv/QER
nDbhsipAFIl4i67845ffmubN0g9ivxPgyp5hS/G3YVh7lUzLha9a9dzggob5gJDz
t+GgdogiG3vHc3aS4goOsnkXGVs9/T2dReVnHONE9irIJcIDQ5pMZXcBq2qDJg1G
/zilpHNOUUpMfSndGdGlaKoT+R0Ieam5WvgBiZYzGjQ2SnBQ2onUCgALbzI0jOoy
fWZSIN0xqtUcw2sO0JRaAwRZ+6d0GBwzoisiRYH6loCYV2gvMLm5XhyxozrreWhQ
1slPF7HBHKLMjFzyuJYThjYUQgV1ATkzYyQOkFNE90ybP8b6
-----END CERTIFICATE-----
Generated at Tue Feb 10 20:34:27 2026 by rpki-client