This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa
File:                     3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          xiu4Rds2NKCdubBx5RhDgQfxNsDhwSaNuN3b6IQtJK0=
Subject key identifier:   EA:FB:41:CC:31:5C:32:B5:98:86:AF:A5:E8:37:53:88:B9:71:70:DE
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       3DD6180D44DB39BD249EB580DFAEE813E96C849D
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:21:13 +0000
ROA not before:           Tue 06 Jan 2026 19:16:13 +0000
ROA not after:            Tue 05 Jan 2027 19:21:13 +0000
asID:                     14754
IP address blocks:        190.110.228.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 09:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d6:18:0d:44:db:39:bd:24:9e:b5:80:df:ae:e8:13:e9:6c:84:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Jan  6 19:16:13 2026 GMT
            Not After : Jan  5 19:21:13 2027 GMT
        Subject: CN=EAFB41CC315C32B59886AFA5E8375388B97170DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:9f:cf:ca:93:28:73:b4:c0:f7:56:09:39:
                    09:e5:2c:be:31:36:ef:71:a1:af:76:9d:72:fe:63:
                    b6:cd:a8:60:8c:51:1a:70:96:2f:dd:d7:35:0d:8b:
                    b6:db:a6:25:19:77:f3:e3:4f:7d:ba:6f:32:85:3e:
                    10:9a:9a:3b:3b:98:42:1c:f7:91:cc:0b:30:b9:85:
                    dc:8a:d8:0a:23:1a:e8:89:08:39:e9:63:2f:0a:4b:
                    69:32:68:2e:0a:73:f5:37:19:88:ab:15:0c:ad:3d:
                    35:06:ec:04:12:17:eb:ac:db:cb:7e:49:5c:e1:08:
                    b7:0e:14:a0:62:ec:c2:b4:e4:fd:24:fe:14:17:a9:
                    22:90:ec:60:9c:4b:64:f9:f8:52:d9:48:eb:d4:a2:
                    8a:25:5f:d9:77:d9:1d:d9:b4:88:6f:0e:d9:71:ad:
                    a3:ca:42:69:62:55:d4:02:8a:bb:03:c9:dc:ab:ca:
                    25:df:2f:c5:37:b7:28:fa:4a:51:46:9e:57:29:46:
                    4e:31:38:63:e6:33:2c:30:52:9d:c9:85:f6:13:67:
                    1a:52:8c:ff:f1:e4:10:1d:ab:24:71:4b:39:50:32:
                    57:6a:41:f8:b3:f9:37:fb:8a:61:77:13:84:cc:d2:
                    27:c5:23:21:2d:0e:2b:67:70:23:44:6e:d6:b4:cc:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:41:CC:31:5C:32:B5:98:86:AF:A5:E8:37:53:88:B9:71:70:DE
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3139302e3131302e3232382e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:49:c2:dd:13:92:eb:af:ba:be:3c:ed:d9:05:a8:b9:af:
         45:81:f6:ed:04:9e:cb:06:6b:52:90:17:81:ab:1f:8a:1b:ca:
         b3:2a:8e:31:91:9c:40:a2:c2:71:b4:90:ac:f2:6a:74:ce:eb:
         ec:15:5b:d7:e5:8b:b3:f0:a2:5b:a1:41:cd:db:84:e5:32:7f:
         91:65:aa:46:93:94:3c:52:71:4d:b6:0e:aa:66:fe:6c:37:00:
         12:fe:0f:f5:fc:cb:b1:87:e8:b9:78:51:12:ca:22:7e:2c:74:
         bc:ed:5f:cd:2b:ce:07:70:31:41:a1:f5:2c:45:e7:67:33:c4:
         66:3d:63:c6:78:7c:b9:b7:1f:f2:6a:d6:f2:64:c5:e7:17:5c:
         dc:25:93:1e:50:91:44:95:99:6a:a2:ac:67:e8:33:d7:17:24:
         34:1b:72:0c:71:c2:f7:70:f3:30:18:5d:77:97:4d:c9:77:7e:
         87:15:c5:7c:ec:76:db:d3:7a:41:9b:0a:fa:5e:2e:29:d8:0e:
         a5:94:a7:61:89:ce:ce:b5:ab:a1:51:62:06:69:7c:66:54:e5:
         9b:44:c6:d7:89:9d:04:34:21:2e:de:bd:0d:2d:e1:3c:27:ab:
         e3:1b:d4:1c:cb:08:31:a0:68:bc:b7:a0:90:cf:15:8e:2f:f8:
         41:b2:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:39:58 2026 by rpki-client