This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
File:                     3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa (raw, json)
Hash identifier:          JAaEnsY6XomipXYQxj+ZzGPsVmxZdgBe3G3fJk3squY=
Subject key identifier:   1B:C7:49:DD:BD:5B:97:7E:44:4A:1B:C6:E0:20:E9:63:E8:B4:00:E2
Certificate issuer:       /CN=8490FC868F718F720126775187964F0F493B0CEB
Certificate serial:       1A5FF90AF954EEEFD60EC450BD554D05988DE489
Authority key identifier: 84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa
Signing time:             Tue 06 Jan 2026 19:16:56 +0000
ROA not before:           Tue 06 Jan 2026 19:11:56 +0000
ROA not after:            Tue 05 Jan 2027 19:16:56 +0000
asID:                     52327
IP address blocks:        190.111.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Jan 2026 21:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5f:f9:0a:f9:54:ee:ef:d6:0e:c4:50:bd:55:4d:05:98:8d:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8490FC868F718F720126775187964F0F493B0CEB
        Validity
            Not Before: Jan  6 19:11:56 2026 GMT
            Not After : Jan  5 19:16:56 2027 GMT
        Subject: CN=1BC749DDBD5B977E444A1BC6E020E963E8B400E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:eb:16:70:8e:a0:0b:da:7a:f0:49:82:2e:
                    67:28:b6:49:20:36:ce:9d:fd:65:8d:bb:89:68:85:
                    5a:8b:bd:15:f7:32:ec:74:d1:68:f7:90:05:cf:a9:
                    33:ef:fb:59:f5:ba:33:bb:46:63:91:d7:7a:1a:80:
                    ed:b0:27:bb:d1:da:c5:05:37:65:86:36:fc:38:42:
                    a9:bb:1e:93:44:ae:7d:60:cf:31:84:e8:f7:cf:e8:
                    09:a6:f6:ee:2b:69:ab:dd:bb:48:c4:49:86:45:d7:
                    33:55:3a:1e:47:d6:55:cf:83:ce:6c:bf:7f:1c:4b:
                    29:bf:b8:84:34:98:cc:3b:b5:3a:29:e6:39:f1:1b:
                    d8:b0:14:06:ec:3b:6a:34:21:38:0b:d9:ce:c7:11:
                    3c:3e:83:0c:8a:45:bd:d6:76:f2:95:df:ee:59:df:
                    19:1a:e3:52:0c:23:6e:4a:9f:14:cd:97:37:d1:51:
                    ce:e5:08:67:27:fc:ec:f2:b8:bd:e2:86:1d:93:f3:
                    4c:a6:80:2a:3e:cc:0c:1d:ef:65:c1:86:81:49:64:
                    f6:bc:bc:ab:64:a5:af:de:51:73:a6:e5:55:b4:e0:
                    30:fa:c4:f7:f0:a9:c6:27:72:ed:d8:0f:0e:73:e1:
                    bf:8f:42:f3:e8:86:7a:31:af:dd:8b:33:fd:db:13:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:49:DD:BD:5B:97:7E:44:4A:1B:C6:E0:20:E9:63:E8:B4:00:E2
            X509v3 Authority Key Identifier:
                keyid:84:90:FC:86:8F:71:8F:72:01:26:77:51:87:96:4F:0F:49:3B:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/8490FC868F718F720126775187964F0F493B0CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8490FC868F718F720126775187964F0F493B0CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F126F7B24F058345981014FBD8FA8F21CC1044BE0D05370DA263D74AB89CBEE9/0/3139302e3131312e3137372e302f32342d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:63:69:4b:be:df:fe:65:27:97:8a:e8:7e:4f:be:14:63:
         cd:55:42:fe:cf:4c:b7:ee:26:13:fc:2d:36:e7:99:58:d8:55:
         90:8e:16:41:15:26:bd:1e:49:39:91:45:70:84:9f:d5:4d:70:
         bb:d1:b8:25:51:c1:5c:90:7c:14:77:28:b6:44:ec:ab:13:77:
         1d:08:98:8c:28:09:a6:9f:8d:50:50:0c:01:8f:81:5e:84:ee:
         af:f2:40:e2:8d:04:6f:15:44:60:37:3f:22:32:15:6b:9a:bb:
         c3:90:7b:2b:b5:7b:92:67:09:92:ad:c4:c0:4f:24:31:a6:e7:
         b5:b8:c7:c9:85:83:a6:11:71:00:91:65:b0:29:2d:43:9e:15:
         80:7d:44:93:e8:f5:01:32:82:86:88:3a:d6:4c:ce:3d:48:56:
         4b:51:ba:01:29:2b:03:b6:53:b3:e7:35:0f:ae:12:9d:3d:12:
         da:fd:02:e9:7f:3f:6d:24:0d:ec:17:fb:8f:8f:ad:ef:1a:da:
         e9:8b:41:f1:3c:a8:b6:01:3b:1d:03:7f:08:a8:16:d7:d0:4a:
         39:03:38:6e:65:43:42:78:dd:3c:b2:84:01:8e:f5:6e:14:c7:
         38:03:f0:0b:8d:08:d2:92:22:ed:41:12:41:ad:1f:c5:24:57:
         a9:60:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 19:05:00 2026 by rpki-client