This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa
File:                     3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa (raw, json)
Hash identifier:          soxa+WLyIdDVwNsY0tIXuTD+cP7m9HDhuclDzJghMRI=
Subject key identifier:   9C:D1:56:57:91:69:7F:D1:73:42:31:73:B3:B3:43:74:41:8A:AF:64
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       222A4AA90C2A5AE55FC18DC4014BFC1995AD8A69
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa
Signing time:             Tue 06 Jan 2026 19:35:05 +0000
ROA not before:           Tue 06 Jan 2026 19:30:05 +0000
ROA not after:            Tue 05 Jan 2027 19:35:05 +0000
asID:                     273120
IP address blocks:        190.217.20.96/28 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:4a:a9:0c:2a:5a:e5:5f:c1:8d:c4:01:4b:fc:19:95:ad:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Jan  6 19:30:05 2026 GMT
            Not After : Jan  5 19:35:05 2027 GMT
        Subject: CN=9CD1565791697FD173423173B3B34374418AAF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:2e:20:b0:fd:43:67:3b:d3:3d:87:a2:32:
                    8c:e3:a5:c5:58:1d:be:94:ce:4f:fb:c8:48:76:2c:
                    55:a6:58:3d:54:10:4f:b1:7b:f5:33:cf:64:7e:57:
                    fe:60:2b:3c:99:2a:1e:3b:1d:fc:a9:8e:fa:f0:ba:
                    63:fd:bd:32:2c:ea:a2:54:9e:88:df:7e:ff:bc:0d:
                    f6:ef:7a:7f:a4:ee:60:96:3c:d9:fc:01:2c:4c:d6:
                    97:fb:fa:d1:45:ef:d6:71:f6:27:6a:4b:e7:31:1f:
                    f2:1d:2f:0f:9b:8c:be:85:c4:81:3f:fb:70:ab:df:
                    06:01:6f:27:23:aa:53:5f:71:4f:b8:e7:b1:c0:90:
                    6c:66:15:1c:c6:28:11:1c:ac:a8:e8:08:87:9d:9c:
                    f8:6a:d7:12:4a:1c:f0:86:e6:2e:2c:02:34:a4:50:
                    28:e9:61:af:16:65:19:34:ab:0d:d2:27:e8:3c:28:
                    b2:8f:e6:89:0f:fb:ee:77:d4:90:74:fc:5e:be:d9:
                    93:e7:61:a8:e0:80:ca:99:fa:5e:85:1c:4d:1f:63:
                    13:d4:69:ad:d8:51:f5:cc:ba:c6:04:4f:42:04:85:
                    16:2f:14:fc:3d:6c:19:03:3b:b3:47:86:83:f8:4c:
                    f9:04:dc:a5:a1:f1:53:83:6a:a0:b3:32:72:24:65:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D1:56:57:91:69:7F:D1:73:42:31:73:B3:B3:43:74:41:8A:AF:64
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231372e32302e39362f32382d3332203d3e20323733313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.20.96/28

    Signature Algorithm: sha256WithRSAEncryption
         97:b7:80:4b:44:34:95:e3:9e:b5:ec:9b:5b:c6:d9:6c:0f:ff:
         e4:08:fa:e7:43:0d:76:5d:8f:d2:1b:27:55:81:e0:79:3f:bc:
         cd:66:7c:1e:21:ee:4d:73:3d:29:76:54:bf:58:4e:9c:1d:c3:
         a0:c1:53:8d:4b:c9:e8:86:aa:a1:af:ac:ad:22:69:15:05:ed:
         af:3f:72:f2:fc:09:f1:4a:f7:90:a5:ba:10:50:39:cd:da:88:
         3f:20:78:c7:35:31:6d:50:aa:20:e4:2b:77:60:84:68:6d:3c:
         bd:87:e5:06:4f:91:3a:df:06:79:32:48:cd:6f:c7:92:1c:d4:
         a7:2c:da:2b:f3:c9:47:21:f8:43:ad:81:52:f4:d1:86:75:3c:
         82:e3:5b:f8:18:db:4c:1a:90:ef:8e:20:18:fe:41:df:cc:b6:
         2b:7c:15:00:98:86:c6:09:35:09:26:7a:7f:ef:9e:b9:99:96:
         72:c7:ef:37:5f:94:4b:81:4c:e8:07:0c:71:b6:12:50:27:e3:
         e3:db:aa:2a:36:19:b1:88:4e:4f:d3:f9:df:9c:b7:d7:1e:2c:
         f6:43:4e:3b:c5:72:58:39:5d:da:64:a7:26:64:b5:f1:e2:cc:
         58:65:fc:dc:12:38:63:04:e8:47:55:92:c6:e9:ed:22:86:8e:
         c7:90:7c:5f
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUIipKqQwqWuVfwY3EAUv8GZWtimkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QzU1QTQ0ODFGMTlDOUI2MTg0OTQ0QjE4N0IzODEz
QjdDRUM1NjAeFw0yNjAxMDYxOTMwMDVaFw0yNzAxMDUxOTM1MDVaMDMxMTAvBgNV
BAMTKDlDRDE1NjU3OTE2OTdGRDE3MzQyMzE3M0IzQjM0Mzc0NDE4QUFGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRy4gsP1DZzvTPYeiMozjpcVY
Hb6Uzk/7yEh2LFWmWD1UEE+xe/Uzz2R+V/5gKzyZKh47HfypjvrwumP9vTIs6qJU
nojffv+8Dfbven+k7mCWPNn8ASxM1pf7+tFF79Zx9idqS+cxH/IdLw+bjL6FxIE/
+3Cr3wYBbycjqlNfcU+457HAkGxmFRzGKBEcrKjoCIednPhq1xJKHPCG5i4sAjSk
UCjpYa8WZRk0qw3SJ+g8KLKP5okP++531JB0/F6+2ZPnYajggMqZ+l6FHE0fYxPU
aa3YUfXMusYET0IEhRYvFPw9bBkDO7NHhoP4TPkE3KWh8VODaqCzMnIkZRBNAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUnNFWV5Fpf9FzQjFzs7NDdEGKr2QwHwYDVR0j
BBgwFoAUyHxVpEgfGcm2GElEsYezgTt87FYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEE2NkE2QTJBNkNGRTkzQzBGNkUzREZDMjBERDMzMUI1
ODBGQjIwMzgzQjYyRkU0QjI2QzAyOTRCNDY4N0M3LzAvQzg3QzU1QTQ0ODFGMTlD
OUI2MTg0OTQ0QjE4N0IzODEzQjdDRUM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODdDNTVBNDQ4MUYxOUM5QjYx
ODQ5NDRCMTg3QjM4MTNCN0NFQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBBNjZBNkEyQTZDRkU5M0MwRjZFM0RGQzIwREQzMzFCNTgwRkIyMDM4
M0I2MkZFNEIyNkMwMjk0QjQ2ODdDNy8wLzMxMzkzMDJlMzIzMTM3MmUzMjMwMmUz
OTM2MmYzMjM4MmQzMzMyMjAzZDNlMjAzMjM3MzMzMTMyMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQS+
2RRgMA0GCSqGSIb3DQEBCwUAA4IBAQCXt4BLRDSV45617JtbxtlsD//kCPrnQw12
XY/SGydVgeB5P7zNZnweIe5Ncz0pdlS/WE6cHcOgwVONS8nohqqhr6ytImkVBe2v
P3Ly/AnxSveQpboQUDnN2og/IHjHNTFtUKog5Ct3YIRobTy9h+UGT5E63wZ5MkjN
b8eSHNSnLNor88lHIfhDrYFS9NGGdTyC41v4GNtMGpDvjiAY/kHfzLYrfBUAmIbG
CTUJJnp/7565mZZyx+83X5RLgUzoBwxxthJQJ+Pj26oqNhmxiE5P0/nfnLfXHiz2
Q047xXJYOV3aZKcmZLXx4sxYZfzcEjhjBOhHVZLG6e0iho7HkHxf
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:16 2026 by rpki-client