This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
File:                     3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa (raw, json)
Hash identifier:          7sUzk0D7fwn8sMmVe2uMQoc+U0IJf9bJba9twcEfdhk=
Subject key identifier:   D1:5B:AF:30:EB:E6:7E:9D:21:9D:E9:CD:05:12:5F:AE:06:7A:23:43
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       0E6DEF6E134136A86C6FEAC4EA9EC100A22EE7AC
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa
Signing time:             Tue 06 Jan 2026 19:06:40 +0000
ROA not before:           Tue 06 Jan 2026 19:01:40 +0000
ROA not after:            Tue 05 Jan 2027 19:06:40 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6d:ef:6e:13:41:36:a8:6c:6f:ea:c4:ea:9e:c1:00:a2:2e:e7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Jan  6 19:01:40 2026 GMT
            Not After : Jan  5 19:06:40 2027 GMT
        Subject: CN=D15BAF30EBE67E9D219DE9CD05125FAE067A2343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:1a:fa:52:19:1e:0d:32:ac:ec:4c:3b:39:
                    88:03:a0:e4:82:a9:e4:ee:4e:ab:ca:c3:c8:b0:2c:
                    01:cd:a2:24:b8:40:32:e1:19:33:28:fd:1e:ad:e0:
                    63:c1:92:38:15:c6:be:af:c4:98:88:ff:0c:b6:d7:
                    a5:9b:7d:86:3f:4b:d5:02:2c:cf:40:d0:5f:01:f9:
                    42:e7:82:d6:80:ba:54:23:3b:41:bc:e4:00:c2:67:
                    45:2b:97:fc:b6:a5:91:8b:89:08:ab:29:fc:b7:b1:
                    9f:a8:fc:d8:9a:fb:3b:fb:d8:1c:0a:53:7c:ef:1e:
                    1c:45:1c:74:32:be:fc:b1:fc:8a:e0:56:ba:03:e4:
                    2b:e7:00:53:b6:98:89:bf:8a:f1:1a:a9:ae:f9:17:
                    80:b4:fb:41:9e:a8:27:d8:15:f6:0c:07:9d:7e:ec:
                    ab:7f:d1:ed:ce:12:a0:66:32:fb:df:dc:5e:28:30:
                    48:4f:88:5c:57:17:66:e5:24:69:61:e5:af:0e:88:
                    c2:16:04:2b:1a:0a:e9:00:16:4d:08:9a:01:39:16:
                    3f:8d:c3:07:3a:f2:9e:c2:54:9b:d0:ac:ce:5c:b7:
                    4f:26:e1:51:7a:44:95:c0:87:68:5c:1f:c1:6d:74:
                    c6:80:8e:15:32:ca:5e:50:7d:84:bb:02:6a:ce:12:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:AF:30:EB:E6:7E:9D:21:9D:E9:CD:05:12:5F:AE:06:7A:23:43
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234342e302f32322d3232203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:da:93:3f:4c:9d:5e:35:82:98:e1:12:07:73:b0:2e:c1:7b:
         fa:45:05:b8:52:6d:b9:12:bf:e3:e2:d0:e3:10:0f:94:6d:f9:
         78:db:31:7f:8f:04:13:93:9d:b0:4c:b2:16:ce:8c:88:35:82:
         1a:4e:5f:ba:a9:d5:14:dd:f9:3c:7b:8f:2d:fc:10:47:04:fc:
         c4:52:98:16:32:61:1c:40:6e:d1:a1:f8:3e:b0:68:65:88:00:
         86:8a:0a:c4:ae:71:f2:5f:aa:44:9b:eb:19:f5:41:0c:98:29:
         4f:78:1f:1d:18:fc:39:2d:5b:69:28:8b:b2:60:dd:ca:cf:9b:
         f9:a4:8b:80:0b:56:c8:b8:c8:c6:70:3f:6d:1c:09:5a:11:97:
         ec:54:c8:2b:1e:3f:34:c0:d8:3c:9b:93:f6:a1:77:e7:81:22:
         52:3e:e1:ac:c7:07:de:d5:5e:3f:ee:76:de:8c:a7:28:f5:ba:
         1f:76:38:71:5e:23:a3:b1:aa:0f:73:da:4d:b0:d2:9f:b6:2e:
         0d:c3:e6:e8:8c:52:bf:4d:cb:7e:be:69:46:2e:4c:a6:fb:1b:
         a0:1d:3f:a9:b3:b1:94:c2:e1:a3:0f:f5:ca:cf:f7:da:7c:b0:
         31:54:41:c9:13:f2:9c:f5:1a:4c:db:a8:28:f7:f5:65:66:a3:
         e7:66:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:29 2026 by rpki-client