This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139332e302f32342d3234203d3e203233353230.roa
File:                     3139302e3133312e3139332e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          x/5RZKgB+oJ8nk/65JziXWuKMZ17rA7AXFcRqmKYwgQ=
Subject key identifier:   31:DC:D9:EF:51:96:66:95:9B:A3:7B:39:24:4F:06:3C:EB:6F:5B:68
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4EDA70289371F07DF86948CBDB8F63C977DF13F8
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139332e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 06 Jan 2026 20:55:27 +0000
ROA not before:           Tue 06 Jan 2026 20:50:27 +0000
ROA not after:            Tue 05 Jan 2027 20:55:27 +0000
asID:                     23520
IP address blocks:        190.131.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:da:70:28:93:71:f0:7d:f8:69:48:cb:db:8f:63:c9:77:df:13:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:27 2026 GMT
            Not After : Jan  5 20:55:27 2027 GMT
        Subject: CN=31DCD9EF519666959BA37B39244F063CEB6F5B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:54:34:94:aa:6b:5c:2a:51:21:14:ac:e4:
                    71:2d:f6:9b:f8:cc:73:1a:44:65:71:ef:da:47:03:
                    d4:da:76:ed:4b:fb:d0:80:52:a3:be:5d:fd:89:64:
                    e6:93:16:cd:a4:d6:b7:67:fc:aa:37:2a:37:2c:d9:
                    da:3e:ae:a2:62:e7:83:ce:de:04:7b:3f:83:8c:e4:
                    a8:08:2a:26:72:f2:81:e2:2d:cd:98:9e:68:bb:5f:
                    d4:2b:23:50:79:24:5e:f9:fe:56:8b:4d:ef:e2:64:
                    ac:bd:f8:39:af:f7:c1:fe:f2:7c:30:24:cd:1f:f9:
                    5e:98:37:a7:9c:8a:a3:67:43:fa:fd:03:c0:10:b5:
                    6e:d9:63:53:50:c5:b9:2f:ad:e6:2e:f1:01:6b:3f:
                    3c:44:e3:be:e9:72:3f:ca:2c:16:1b:9f:db:f1:dc:
                    c3:ea:3d:34:ab:41:fe:f2:10:81:69:87:49:7c:12:
                    4a:dd:ed:b6:b9:72:d9:1e:29:fa:cf:55:22:16:ff:
                    a6:45:c9:37:71:fd:bf:94:03:d7:01:98:ed:ce:36:
                    96:a0:c4:0d:08:83:6b:93:20:95:20:8d:a2:dd:3c:
                    cb:a1:ef:59:19:6a:e8:1c:8a:f9:30:90:11:5f:f2:
                    96:fe:3a:df:bf:9e:4c:29:86:82:86:1f:ac:b9:5e:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:D9:EF:51:96:66:95:9B:A3:7B:39:24:4F:06:3C:EB:6F:5B:68
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139332e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:9b:91:cb:0e:aa:51:3d:86:ce:20:d5:89:90:2c:0c:f3:
         75:d6:27:56:ee:a0:f0:5c:85:8b:d9:e3:0a:c5:f7:c6:8e:0d:
         ed:80:fb:0a:81:18:78:40:6a:42:ab:1d:ab:99:a4:e2:61:7b:
         bc:e8:4c:e4:8e:1b:3a:05:1d:c8:06:83:36:8d:8e:cf:5b:71:
         76:56:c0:0c:0d:50:e4:16:bf:26:c2:b1:65:4a:8d:75:e7:bc:
         a7:32:3e:4e:b3:83:25:3c:57:bc:ce:96:ce:88:31:9e:1a:5b:
         9a:16:6f:27:f6:2d:7d:4e:4a:13:1e:8d:c9:6c:18:08:58:13:
         0a:66:b1:b0:7b:fe:f6:0d:0a:8a:65:60:c8:7b:45:7e:26:ba:
         31:a6:68:6a:15:ef:b5:16:a3:5e:8a:c2:17:40:92:6d:98:69:
         37:d5:7b:2e:28:6e:b2:7c:e1:7b:1d:df:57:1f:49:61:9a:d5:
         9f:5f:ec:a2:d7:b4:a0:ef:cf:6b:fc:c4:e6:7d:17:f2:4c:f3:
         f2:83:aa:95:69:7a:ac:32:48:40:aa:b3:8c:47:c3:99:85:2c:
         ad:8a:da:7a:44:cf:d2:ad:a9:51:ed:97:21:53:93:06:d4:bc:
         7b:5a:ac:8a:46:79:a7:76:f9:7b:09:4c:e8:03:d4:f2:96:96:
         a8:77:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:47 2026 by rpki-client