This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234352e302f32342d3234203d3e203532323935.roa
File:                     3139302e3231312e3234352e302f32342d3234203d3e203532323935.roa (raw, json)
Hash identifier:          xVuSCUcBXUYYjvQ6u6uhkytC6qmBfqNOdVF7A/+JzAg=
Subject key identifier:   4B:2B:EC:FC:A2:F4:80:F1:97:8E:23:F3:08:C9:FF:7B:B0:80:3F:D4
Certificate issuer:       /CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
Certificate serial:       25EB7B23198437FCE674B2FE9BB37DA656D4AB89
Authority key identifier: B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234352e302f32342d3234203d3e203532323935.roa
Signing time:             Tue 06 Jan 2026 19:06:40 +0000
ROA not before:           Tue 06 Jan 2026 19:01:40 +0000
ROA not after:            Tue 05 Jan 2027 19:06:40 +0000
asID:                     52295
IP address blocks:        190.211.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:eb:7b:23:19:84:37:fc:e6:74:b2:fe:9b:b3:7d:a6:56:d4:ab:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B077359C4210D94FBBE53EA8A385C44F8DE3A26C
        Validity
            Not Before: Jan  6 19:01:40 2026 GMT
            Not After : Jan  5 19:06:40 2027 GMT
        Subject: CN=4B2BECFCA2F480F1978E23F308C9FF7BB0803FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:54:6a:5f:2f:f2:2e:f2:af:cb:cb:58:e5:
                    db:76:ed:c8:c3:b1:0a:48:f5:fc:ad:d6:34:0a:14:
                    47:74:77:9d:2a:10:8f:31:bc:00:ec:a7:b7:cd:a2:
                    e3:86:bc:58:b3:e3:00:76:07:0d:1b:94:c5:e2:4e:
                    78:dc:9f:18:0f:80:ba:53:ed:76:40:bc:68:72:86:
                    8b:c8:de:d6:e0:22:68:8f:47:4f:6b:90:4b:0a:10:
                    22:5e:a3:ba:55:01:3e:fb:0b:20:7a:be:fa:20:69:
                    16:0b:e7:80:19:38:59:bc:b7:35:24:94:d6:3e:de:
                    d1:35:c3:8d:e6:0b:60:68:7d:b5:b6:d8:20:55:09:
                    d1:31:e0:49:49:99:f8:c1:f1:f3:a1:86:28:4b:f0:
                    70:9e:a1:a6:1e:2a:96:43:1f:ba:29:dd:17:24:44:
                    c3:11:2e:c1:b8:9d:23:03:6d:2e:5d:36:7b:aa:d2:
                    2e:63:f1:e3:1a:9a:69:0b:c6:66:3f:19:0a:9f:66:
                    12:20:90:29:0b:ce:ad:80:42:1e:56:72:f6:2b:e8:
                    02:e1:b1:59:6f:1d:ef:7e:6b:b3:14:41:f5:46:1a:
                    f7:5a:63:2c:b9:ba:6c:6b:8c:af:e4:40:91:02:28:
                    14:b0:b9:72:5b:85:ad:7d:f5:60:6e:a3:cd:fb:9c:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:EC:FC:A2:F4:80:F1:97:8E:23:F3:08:C9:FF:7B:B0:80:3F:D4
            X509v3 Authority Key Identifier:
                keyid:B0:77:35:9C:42:10:D9:4F:BB:E5:3E:A8:A3:85:C4:4F:8D:E3:A2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B077359C4210D94FBBE53EA8A385C44F8DE3A26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E122FAF1730B8623D999FB338DCD2AE979344BBE1D54B4A1709C0035F73F848/0/3139302e3231312e3234352e302f32342d3234203d3e203532323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:d6:15:bb:4a:ce:d3:7f:a2:76:89:31:ce:2b:1b:f3:db:
         30:35:69:d7:6a:a1:d8:33:f4:d7:69:be:c0:14:99:8a:7a:6c:
         89:37:ba:45:f2:54:84:c8:1b:06:1d:8c:b4:65:4d:4c:a6:16:
         e0:e2:30:83:e5:0b:f7:d3:4e:7f:f4:23:52:5d:b9:17:c8:7b:
         bb:57:fa:b0:d9:23:48:24:24:63:03:6c:59:ad:4e:05:5f:15:
         dd:87:e1:08:36:ea:9e:11:89:b2:ee:ba:18:10:ae:c2:51:b4:
         a6:05:ee:c1:6f:bd:96:cc:77:02:61:3e:b2:14:3a:3d:db:9a:
         25:85:fb:64:46:0d:76:f9:1a:94:5c:b0:c1:d9:c6:e5:9d:88:
         b0:57:73:ae:f5:49:60:9b:d2:a5:fb:e8:21:f1:ff:99:5e:1e:
         09:69:94:b0:c9:18:b2:71:1d:0e:6c:d9:70:84:e5:fd:37:16:
         96:b6:18:85:25:85:ee:dd:eb:18:fe:57:79:88:83:25:d4:67:
         50:ea:1f:0e:a3:f8:92:bd:8f:05:ef:71:8f:1a:15:c8:d2:3a:
         77:06:75:48:c1:ec:2a:a3:9d:19:52:01:b3:a3:ad:b3:04:22:
         16:8b:46:77:e9:27:dc:c6:74:85:19:2d:8c:0a:45:b1:bf:6d:
         00:48:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:13 2026 by rpki-client