This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3232203d3e20323634363238.roa
File:                     3139302e382e3136342e302f32322d3232203d3e20323634363238.roa (raw, json)
Hash identifier:          VJQs8VAKMTYNsToGI2TEDac4tKKTz54jWkO3QWCPElE=
Subject key identifier:   F4:D6:75:C9:2F:33:5B:97:06:3D:91:C8:9B:13:48:02:2C:58:BA:FF
Certificate issuer:       /CN=597B422C63F4E901AB522655E1EDFD64C35BD133
Certificate serial:       1CAFA3B3B3FF679B4F8381BE81BA2FE0C033AC38
Authority key identifier: 59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3232203d3e20323634363238.roa
Signing time:             Fri 09 Jan 2026 13:20:06 +0000
ROA not before:           Fri 09 Jan 2026 13:15:06 +0000
ROA not after:            Fri 08 Jan 2027 13:20:06 +0000
asID:                     264628
IP address blocks:        190.8.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:af:a3:b3:b3:ff:67:9b:4f:83:81:be:81:ba:2f:e0:c0:33:ac:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597B422C63F4E901AB522655E1EDFD64C35BD133
        Validity
            Not Before: Jan  9 13:15:06 2026 GMT
            Not After : Jan  8 13:20:06 2027 GMT
        Subject: CN=F4D675C92F335B97063D91C89B1348022C58BAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:87:d4:6c:61:c1:35:82:c3:0b:f8:79:e9:
                    2b:0a:d8:51:39:aa:cb:a8:15:4d:c0:3a:62:d1:7d:
                    75:4c:c7:92:e3:44:62:c6:36:2d:79:40:a3:ea:ea:
                    e7:ef:fa:a8:03:e7:64:09:2c:5e:3c:ec:ad:00:a3:
                    c1:f1:66:24:d2:23:b9:bd:f8:c5:75:4f:16:f4:79:
                    16:6c:db:dd:59:f6:ad:c1:3d:7f:cd:b2:9c:ad:bb:
                    9d:63:53:14:1d:b7:c3:fc:f9:21:36:5c:4a:cf:85:
                    9e:2d:c7:c1:72:ec:cb:ea:56:10:e9:cb:7d:16:b0:
                    fe:8c:e8:99:80:e2:64:6f:d3:2b:9c:94:36:00:0a:
                    ed:31:9f:75:57:6e:7f:b2:9e:06:c7:cb:90:63:2c:
                    36:f8:1b:7f:cb:52:90:43:f9:db:10:ef:f0:19:9a:
                    74:21:8b:35:79:66:f6:86:39:17:61:12:7d:74:f5:
                    70:21:7e:33:bd:43:7e:8f:89:af:d7:c4:d8:bb:a2:
                    22:74:85:10:0f:39:8a:fe:ec:0d:0b:57:ee:3b:2b:
                    67:67:74:9f:4d:b6:cb:4d:2e:2b:94:4a:08:86:f6:
                    bb:64:35:d2:78:14:91:b0:ee:c1:31:16:ac:95:cc:
                    77:c9:7d:b8:bf:2d:cb:df:4e:5d:74:f7:0f:bc:54:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D6:75:C9:2F:33:5B:97:06:3D:91:C8:9B:13:48:02:2C:58:BA:FF
            X509v3 Authority Key Identifier:
                keyid:59:7B:42:2C:63:F4:E9:01:AB:52:26:55:E1:ED:FD:64:C3:5B:D1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/597B422C63F4E901AB522655E1EDFD64C35BD133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/597B422C63F4E901AB522655E1EDFD64C35BD133.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE88E1895A1AA42D5A10A7ED389A0BACFD7B4874CBAB86A7B790A78C1457EFC/0/3139302e382e3136342e302f32322d3232203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:58:29:ce:88:57:b0:c9:49:bb:82:5a:5f:26:0d:20:e3:
         cb:7e:9a:eb:59:75:08:3b:57:01:89:38:38:ee:e4:ad:19:b6:
         b4:c8:6e:b8:9b:98:a3:47:87:01:3c:90:bd:dd:6c:f2:2e:fa:
         cf:f2:ad:62:08:83:6b:c3:1c:fc:8d:cc:8b:f3:75:b6:e5:5d:
         51:69:82:cd:41:1d:5e:20:87:a3:8e:0a:b2:57:b4:d6:34:a8:
         ab:b1:91:78:f3:12:4e:ca:c7:a9:0b:84:52:3e:6e:8c:54:0f:
         62:b4:67:c3:ac:a1:cf:70:19:67:f5:34:f8:5d:61:c3:0d:5b:
         fa:6f:09:0e:98:45:26:ef:6b:64:13:85:ef:01:2d:f6:12:50:
         6c:a7:18:17:5a:a9:43:a7:bd:5c:1b:66:ea:52:ca:d4:e4:2e:
         d6:31:57:f9:02:11:a4:fc:23:ff:7c:6b:76:fc:31:80:07:25:
         cf:6b:a0:00:69:0e:37:61:d0:a9:8a:ce:2c:8e:59:03:1a:e6:
         ba:c6:ad:be:32:34:ef:a6:ae:28:6c:98:9b:87:9c:b0:6d:b8:
         6e:ac:13:d2:ff:28:b6:c9:14:42:4f:97:44:d1:4c:62:f6:de:
         90:f8:c5:b3:19:0c:65:4d:25:62:39:c5:15:cb:a9:c6:e1:8e:
         a5:28:fd:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHK+js7P/Z5tPg4G+gbov4MAzrDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3QjQyMkM2M0Y0RTkwMUFCNTIyNjU1RTFFREZENjRD
MzVCRDEzMzAeFw0yNjAxMDkxMzE1MDZaFw0yNzAxMDgxMzIwMDZaMDMxMTAvBgNV
BAMTKEY0RDY3NUM5MkYzMzVCOTcwNjNEOTFDODlCMTM0ODAyMkM1OEJBRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT4fUbGHBNYLDC/h56SsK2FE5
qsuoFU3AOmLRfXVMx5LjRGLGNi15QKPq6ufv+qgD52QJLF487K0Ao8HxZiTSI7m9
+MV1Txb0eRZs291Z9q3BPX/Nspytu51jUxQdt8P8+SE2XErPhZ4tx8Fy7MvqVhDp
y30WsP6M6JmA4mRv0yuclDYACu0xn3VXbn+yngbHy5BjLDb4G3/LUpBD+dsQ7/AZ
mnQhizV5ZvaGORdhEn109XAhfjO9Q36Pia/XxNi7oiJ0hRAPOYr+7A0LV+47K2dn
dJ9NtstNLiuUSgiG9rtkNdJ4FJGw7sExFqyVzHfJfbi/LcvfTl109w+8VIDRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9NZ1yS8zW5cGPZHImxNIAixYuv8wHwYDVR0j
BBgwFoAUWXtCLGP06QGrUiZV4e39ZMNb0TMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUU4OEUxODk1QTFBQTQyRDVBMTBBN0VEMzg5QTBCQUNG
RDdCNDg3NENCQUI4NkE3Qjc5MEE3OEMxNDU3RUZDLzAvNTk3QjQyMkM2M0Y0RTkw
MUFCNTIyNjU1RTFFREZENjRDMzVCRDEzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTdCNDIyQzYzRjRFOTAxQUI1
MjI2NTVFMUVERkQ2NEMzNUJEMTMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFFODhFMTg5NUExQUE0MkQ1QTEwQTdFRDM4OUEwQkFDRkQ3QjQ4NzRD
QkFCODZBN0I3OTBBNzhDMTQ1N0VGQy8wLzMxMzkzMDJlMzgyZTMxMzYzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDM2MzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr4IpDAN
BgkqhkiG9w0BAQsFAAOCAQEAA0tYKc6IV7DJSbuCWl8mDSDjy36a61l1CDtXAYk4
OO7krRm2tMhuuJuYo0eHATyQvd1s8i76z/KtYgiDa8Mc/I3Mi/N1tuVdUWmCzUEd
XiCHo44Ksle01jSoq7GRePMSTsrHqQuEUj5ujFQPYrRnw6yhz3AZZ/U0+F1hww1b
+m8JDphFJu9rZBOF7wEt9hJQbKcYF1qpQ6e9XBtm6lLK1OQu1jFX+QIRpPwj/3xr
dvwxgAclz2ugAGkON2HQqYrOLI5ZAxrmusatvjI076auKGyYm4ecsG24bqwT0v8o
tskUQk+XRNFMYvbekPjFsxkMZU0lYjnFFcupxuGOpSj9vg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:31 2026 by rpki-client