This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa
File:                     3139302e35342e3138382e302f32322d3232203d3e2036353335.roa (raw, json)
Hash identifier:          BDf9FF4zFJynMjERJ5vf1bcHv9hlrEqSn1JMw6rbvUk=
Subject key identifier:   25:44:58:D6:97:69:02:A2:F1:C7:9F:8E:1D:4A:91:E5:7B:27:3F:0D
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       6FD1503E99808B6FDA3BB1C0A684A1C87B97C912
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:12 +0000
ROA not before:           Tue 06 Jan 2026 20:49:12 +0000
ROA not after:            Tue 05 Jan 2027 20:54:12 +0000
asID:                     6535
IP address blocks:        190.54.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d1:50:3e:99:80:8b:6f:da:3b:b1:c0:a6:84:a1:c8:7b:97:c9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:12 2026 GMT
            Not After : Jan  5 20:54:12 2027 GMT
        Subject: CN=254458D6976902A2F1C79F8E1D4A91E57B273F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:74:19:5f:80:7d:1f:8b:96:a4:49:21:d5:
                    1b:4f:23:0c:84:aa:c4:d9:71:bf:b0:2b:36:11:00:
                    df:de:51:58:98:f8:f0:ba:2e:4f:84:dd:d8:70:b1:
                    af:3c:07:36:09:d7:24:ee:f2:a1:e2:6a:ac:33:de:
                    71:bc:29:da:8b:f0:37:69:00:c5:bf:b7:c7:5e:ac:
                    92:b6:59:ba:23:43:46:59:bd:8f:2e:67:c3:df:ad:
                    b3:c7:04:13:d8:52:e4:d0:d5:fd:20:e5:40:e9:49:
                    f5:65:1c:f5:d8:76:8c:66:86:18:3d:a3:30:d4:15:
                    e0:a9:70:96:0a:e0:3f:66:81:6b:1e:ae:4e:15:4b:
                    69:2f:4f:05:7d:b7:76:d2:9f:21:f5:93:c8:ed:38:
                    a6:b7:12:04:9f:87:90:92:1b:26:03:8c:dc:82:7b:
                    95:f8:7e:a7:b0:76:3b:d6:48:a5:35:f9:16:0d:a9:
                    2f:8c:f0:1e:f0:31:1d:8a:d9:34:be:69:02:46:77:
                    e1:ef:6b:86:11:ce:74:a6:8d:83:41:64:f8:5d:6e:
                    e2:c2:6f:87:0a:36:86:31:d2:6a:55:63:5b:c6:90:
                    11:31:7e:22:33:bf:22:56:7a:a3:d6:0b:9e:e4:78:
                    bd:5b:c4:4f:25:48:3f:5f:76:58:85:d6:f4:6b:3d:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:58:D6:97:69:02:A2:F1:C7:9F:8E:1D:4A:91:E5:7B:27:3F:0D
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138382e302f32322d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:2d:59:75:43:56:ba:df:14:12:d4:13:0c:84:ad:1f:1d:
         bf:7f:08:07:5a:55:1f:7e:a9:3a:53:d1:0e:9e:a1:a5:14:64:
         67:7b:1a:57:6e:99:ea:0e:27:9a:9b:30:b9:77:42:ca:b1:9f:
         b0:6e:4b:a2:19:1b:8c:db:c6:e4:c0:c0:42:69:9c:9d:eb:be:
         ef:0a:47:60:9c:9b:9c:cf:1a:79:42:89:b4:19:3c:64:b3:e9:
         fa:ef:76:fe:1d:0f:3f:d8:29:ad:bf:2b:96:56:7b:c2:2f:2f:
         62:18:b0:2a:a3:22:45:53:4f:7a:f6:1c:3c:60:3c:8c:c9:d1:
         9f:26:e9:15:c9:1a:4d:5d:8b:cc:d3:b2:0b:51:16:a8:2a:01:
         38:6d:3f:a5:e4:63:40:c4:08:fc:cd:5e:b8:82:56:36:f5:23:
         88:19:c8:c6:f9:76:67:92:7e:15:38:58:39:89:39:9d:31:0f:
         b0:12:0c:ae:7a:8b:56:62:10:7a:31:08:b2:f8:33:6f:08:02:
         ce:29:15:2a:61:f5:70:f6:78:7c:98:38:d2:b6:01:f0:49:81:
         c9:1f:c8:6c:60:a5:4c:5b:0e:a7:74:cc:3b:b4:39:8e:5d:21:
         a6:06:97:c4:7b:4e:28:7c:91:5f:af:72:6c:e5:9e:c4:a9:7b:
         df:38:10:d6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUb9FQPpmAi2/aO7HApoShyHuXyRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNjAxMDYyMDQ5MTJaFw0yNzAxMDUyMDU0MTJaMDMxMTAvBgNV
BAMTKDI1NDQ1OEQ2OTc2OTAyQTJGMUM3OUY4RTFENEE5MUU1N0IyNzNGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFh3QZX4B9H4uWpEkh1RtPIwyE
qsTZcb+wKzYRAN/eUViY+PC6Lk+E3dhwsa88BzYJ1yTu8qHiaqwz3nG8KdqL8Ddp
AMW/t8derJK2WbojQ0ZZvY8uZ8PfrbPHBBPYUuTQ1f0g5UDpSfVlHPXYdoxmhhg9
ozDUFeCpcJYK4D9mgWserk4VS2kvTwV9t3bSnyH1k8jtOKa3EgSfh5CSGyYDjNyC
e5X4fqewdjvWSKU1+RYNqS+M8B7wMR2K2TS+aQJGd+Hva4YRznSmjYNBZPhdbuLC
b4cKNoYx0mpVY1vGkBExfiIzvyJWeqPWC57keL1bxE8lSD9fdliF1vRrPZ3tAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUJURY1pdpAqLxx5+OHUqR5XsnPw0wHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzEzODM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+NrwwDQYJ
KoZIhvcNAQELBQADggEBACpMLVl1Q1a63xQS1BMMhK0fHb9/CAdaVR9+qTpT0Q6e
oaUUZGd7GldumeoOJ5qbMLl3Qsqxn7BuS6IZG4zbxuTAwEJpnJ3rvu8KR2Ccm5zP
GnlCibQZPGSz6frvdv4dDz/YKa2/K5ZWe8IvL2IYsCqjIkVTT3r2HDxgPIzJ0Z8m
6RXJGk1di8zTsgtRFqgqAThtP6XkY0DECPzNXriCVjb1I4gZyMb5dmeSfhU4WDmJ
OZ0xD7ASDK56i1ZiEHoxCLL4M28IAs4pFSph9XD2eHyYONK2AfBJgckfyGxgpUxb
Dqd0zDu0OY5dIaYGl8R7Tih8kV+vcmzlnsSpe984ENY=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:42 2026 by rpki-client