This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
File:                     3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa (raw, json)
Hash identifier:          XV2hNpaJYbhpwRbr9SWCrYGivKwNseNJRR+t6doAUgg=
Subject key identifier:   6E:65:17:5F:60:84:DB:15:CD:4E:62:1A:85:6F:80:B8:EC:3E:25:97
Certificate issuer:       /CN=C16940956C9D4811364B5F0969082CDFA737DE6C
Certificate serial:       456FB357304A6080B171B750EFF9581CFA501D2C
Authority key identifier: C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa
Signing time:             Tue 06 Jan 2026 20:52:30 +0000
ROA not before:           Tue 06 Jan 2026 20:47:30 +0000
ROA not after:            Tue 05 Jan 2027 20:52:30 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:b3:57:30:4a:60:80:b1:71:b7:50:ef:f9:58:1c:fa:50:1d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16940956C9D4811364B5F0969082CDFA737DE6C
        Validity
            Not Before: Jan  6 20:47:30 2026 GMT
            Not After : Jan  5 20:52:30 2027 GMT
        Subject: CN=6E65175F6084DB15CD4E621A856F80B8EC3E2597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:8c:c3:82:7d:1d:6a:8f:42:1e:01:06:34:
                    64:be:71:99:f3:64:3c:c1:9f:1a:d5:56:a1:6a:7a:
                    fb:4c:c1:26:09:c7:69:8c:8c:eb:cc:c5:77:25:b3:
                    aa:41:dc:ff:dd:fb:25:94:94:ec:f3:70:25:f6:2c:
                    45:45:75:f8:1a:85:97:6d:1c:cd:d7:59:1e:6a:2c:
                    cc:57:66:ac:44:b9:26:37:46:b8:7e:0f:d4:61:96:
                    67:93:9b:a5:9b:26:8a:f7:a3:8b:c9:0c:55:d6:b0:
                    72:e0:68:e6:03:ef:b0:b6:d2:e5:1b:44:15:34:a0:
                    1a:14:83:18:5d:9b:7c:c2:96:66:f1:db:a1:a7:fa:
                    59:9b:91:b0:17:46:a0:81:db:92:33:3f:8c:6a:e0:
                    98:11:df:45:71:61:8c:63:95:c4:13:ca:ba:11:c0:
                    81:04:80:a9:ec:18:97:0f:5e:24:a2:ed:75:aa:62:
                    81:97:62:b2:28:6a:97:63:ec:54:84:b7:c3:ad:bb:
                    02:68:25:03:ab:b6:cf:1f:4f:e3:a0:b1:37:ef:e3:
                    71:bb:44:02:0c:9b:3e:35:af:3f:f0:c7:83:3c:8b:
                    58:06:6d:52:78:40:8f:97:4b:27:ea:bd:39:59:89:
                    df:6f:31:2f:f7:b5:ee:5d:56:76:1d:ea:a5:a1:39:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:65:17:5F:60:84:DB:15:CD:4E:62:1A:85:6F:80:B8:EC:3E:25:97
            X509v3 Authority Key Identifier:
                keyid:C1:69:40:95:6C:9D:48:11:36:4B:5F:09:69:08:2C:DF:A7:37:DE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/C16940956C9D4811364B5F0969082CDFA737DE6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C16940956C9D4811364B5F0969082CDFA737DE6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E344EA97712ED7F1B01B02EAF9F8CED3034E8F7FCA9B8624F613A0FA0B17F9F/0/3139302e3130362e3131322e302f32312d3234203d3e20323632323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:2e:96:ea:a6:d1:7e:cc:94:7f:f1:e2:02:8d:a9:33:e9:
         77:5f:92:2d:d4:f8:0c:4d:4e:35:bc:b5:57:c9:79:3b:cb:8d:
         07:1c:7f:73:ea:61:c1:e3:e2:69:e0:a6:63:06:52:fe:ff:44:
         b1:1b:0e:3c:e8:6d:ec:e5:86:4a:1d:8f:37:3a:f7:c0:6b:4e:
         c8:4a:74:15:8c:18:7d:82:44:ef:37:84:07:ee:74:95:11:a5:
         83:11:5a:07:39:dc:53:56:ca:b9:84:85:83:39:3d:0e:2a:78:
         4f:71:3f:bb:7b:b6:19:d3:a9:e4:b8:eb:4b:be:4f:19:0e:39:
         87:af:ee:6d:28:b1:bd:6f:1b:9c:2d:95:49:00:ad:b3:b2:90:
         f6:cb:5b:4f:4f:62:06:ce:f4:52:cb:ea:89:74:58:49:94:24:
         55:30:0b:0c:d4:e7:0a:39:38:63:a2:a9:5f:87:ec:31:47:6b:
         ed:43:af:b5:73:74:ab:ce:89:0a:54:97:5c:67:bd:47:e1:a8:
         9e:f1:0c:fc:97:ef:a2:e4:17:3b:c0:f6:00:2d:b2:5e:05:24:
         95:30:cb:7a:e8:35:13:e7:04:cf:f3:fa:13:57:d0:95:4c:0f:
         5c:5b:14:d1:11:59:e3:d4:a5:fe:df:07:0c:6a:13:83:98:bd:
         07:75:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:09 2026 by rpki-client