This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e302e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          L1JqzuCb+HZU+w65cd3cb5sT4/Z8ODDLREBPacDWTyA=
Subject key identifier:   88:BE:49:CB:C0:3D:10:9C:CD:40:24:54:5A:48:05:A8:BC:29:4A:03
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0B83B191ADF7655459B6E8A12EFFAC9BA611B362
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa
Signing time:             Wed 14 Jan 2026 13:00:29 +0000
ROA not before:           Wed 14 Jan 2026 12:55:29 +0000
ROA not after:            Wed 13 Jan 2027 13:00:29 +0000
asID:                     18678
IP address blocks:        190.90.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:83:b1:91:ad:f7:65:54:59:b6:e8:a1:2e:ff:ac:9b:a6:11:b3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 14 12:55:29 2026 GMT
            Not After : Jan 13 13:00:29 2027 GMT
        Subject: CN=88BE49CBC03D109CCD4024545A4805A8BC294A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:fc:e8:9c:1c:e9:42:24:0a:84:6f:10:6c:
                    73:fd:f3:32:42:45:39:ad:e5:7d:2a:89:79:3c:e3:
                    e7:0a:5f:46:22:55:8d:1e:39:3e:ac:3b:03:8f:45:
                    d3:03:f1:db:5d:64:62:79:3e:c8:f6:d7:f9:45:d0:
                    53:10:90:ff:bc:b5:5b:97:5e:32:e7:ae:7e:12:82:
                    eb:0b:4e:a3:13:b6:01:c1:34:fa:23:f9:d0:63:c7:
                    da:a3:54:0f:68:62:67:f9:da:f8:52:c9:0e:d5:e7:
                    14:e5:31:81:6a:8d:04:a1:83:0c:ec:19:96:53:31:
                    e3:b4:2f:27:60:bc:31:57:42:e5:12:bd:c9:60:a8:
                    49:1e:bb:76:2d:18:5f:8e:31:4e:ed:a1:5c:d5:b3:
                    76:0d:eb:34:3f:9b:74:31:a1:9b:8d:19:be:2d:0a:
                    e9:7c:ac:d2:6f:5c:f9:fc:8e:e8:84:c1:4c:70:29:
                    86:b3:6f:9d:fa:3d:5d:c4:5b:c6:26:c0:36:76:ef:
                    1d:ca:9a:c7:0a:6c:dd:bf:5e:f3:5c:b0:96:76:5a:
                    3a:a4:7f:ef:e6:7d:49:0e:ea:c0:c4:08:da:b5:95:
                    f0:df:56:c8:cf:f0:22:8f:09:d4:0d:5b:80:50:51:
                    e3:cb:88:fe:fc:0c:3e:fa:67:25:35:06:1f:e7:60:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BE:49:CB:C0:3D:10:9C:CD:40:24:54:5A:48:05:A8:BC:29:4A:03
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:38:fc:63:5e:84:ea:ad:8f:65:b9:38:18:75:a8:a3:00:f7:
         2f:36:f6:a4:43:af:36:19:15:14:cc:9b:dd:ad:f0:a7:2f:eb:
         ce:9e:60:ed:7d:ae:cd:be:4b:d1:0b:bd:a4:ce:b9:26:6c:91:
         21:6d:d1:ac:eb:0a:f3:f5:98:b5:e2:19:03:7a:21:cf:19:c2:
         d8:ef:7f:e2:70:7f:c2:57:56:fa:7c:1f:6a:e4:2c:46:75:8d:
         8b:64:8e:c4:d8:ab:b5:d0:2a:f2:0a:50:22:06:22:cf:74:87:
         57:e3:46:f0:32:78:ce:9f:ef:9b:ca:3a:f3:0a:39:0f:14:cc:
         22:ae:a0:f5:7f:7c:1f:28:db:7a:80:67:60:29:b9:d5:56:f7:
         83:74:07:88:e1:d9:f0:9b:2e:6e:2d:6d:fb:23:92:ad:23:41:
         d5:69:44:88:f0:44:4a:9a:a5:ad:69:f9:b1:a7:15:29:ce:61:
         9f:34:0f:bd:9d:5f:88:56:cf:80:3d:1a:20:87:7a:18:01:08:
         0e:50:02:f1:25:81:6d:63:ac:0c:b0:08:2f:3e:f3:cb:d7:70:
         d9:78:f7:63:13:d6:75:fb:10:70:c4:e2:76:ef:c9:aa:a5:c7:
         e9:63:94:0e:14:e6:d4:75:77:0c:d5:21:91:18:92:54:ff:45:
         c5:b9:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:47 2026 by rpki-client