This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e3139352e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          PL3pGh9MoOhf7EB4hzndCd2aclzhTbGaWmVXE1iQdM0=
Subject key identifier:   23:34:D2:FF:60:1E:32:2F:D3:94:E2:5D:78:8C:AD:CD:15:27:34:DC
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       56EC86B80ABDA588B70710C350BF768E4AAC7285
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 06 Jan 2026 19:13:35 +0000
ROA not before:           Tue 06 Jan 2026 19:08:35 +0000
ROA not after:            Tue 05 Jan 2027 19:13:35 +0000
asID:                     27837
IP address blocks:        190.90.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ec:86:b8:0a:bd:a5:88:b7:07:10:c3:50:bf:76:8e:4a:ac:72:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:35 2026 GMT
            Not After : Jan  5 19:13:35 2027 GMT
        Subject: CN=2334D2FF601E322FD394E25D788CADCD152734DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:43:77:33:f2:eb:2c:c9:f7:55:59:55:ab:
                    f0:5f:b5:80:08:42:26:f5:a8:d6:11:d1:c8:95:90:
                    72:9c:03:03:ff:f0:5e:ce:f7:60:4c:b0:5d:0b:ce:
                    39:a3:e0:24:79:fe:5c:f3:7f:90:30:97:f4:59:0a:
                    2f:9f:b1:0b:b7:4e:2d:6e:bd:65:1f:7b:16:1c:ce:
                    b6:9e:5a:74:10:c3:2f:db:bd:34:f3:2e:a7:05:26:
                    58:1b:7f:fd:a9:6a:87:ad:fa:de:21:8d:88:b3:36:
                    ee:71:59:c3:88:85:8c:8f:55:da:1e:6b:e4:e3:22:
                    fb:ab:62:a2:7e:91:77:1e:97:59:52:5d:6a:92:59:
                    fc:ea:af:af:e7:a0:07:ad:5b:7f:de:96:c6:67:15:
                    f0:81:7c:92:d2:83:a0:e9:24:dc:59:c7:fe:c4:2c:
                    1d:fa:b9:4d:94:4d:6f:24:7b:46:ec:10:c6:54:9f:
                    65:01:dc:37:92:41:a3:3a:4f:aa:99:85:d7:b5:57:
                    88:f2:05:09:33:b0:6d:22:ba:83:91:6a:c8:0a:a0:
                    1e:04:07:7f:4f:59:92:ef:d3:60:97:54:1b:6d:92:
                    ad:ac:d4:04:c6:4c:e9:71:c2:eb:ae:a6:74:6f:e9:
                    0f:b5:64:c0:c1:66:b0:aa:e9:d5:16:63:68:a7:a7:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:34:D2:FF:60:1E:32:2F:D3:94:E2:5D:78:8C:AD:CD:15:27:34:DC
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139352e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:d1:5f:35:3d:61:5b:96:4c:b6:f4:b1:b7:91:2f:2b:b1:
         a4:c9:93:99:12:f5:2d:30:16:25:33:cd:c1:4a:bf:3c:7e:05:
         49:39:98:d1:53:56:ee:4f:f1:1a:c2:ff:80:57:01:58:ab:13:
         05:2a:b0:bd:91:03:54:72:7e:86:e2:82:e4:90:30:5f:e4:ad:
         82:61:48:cc:53:15:ed:21:bc:9e:50:94:1c:2a:f0:aa:ae:9b:
         af:7d:2c:54:df:2d:17:e9:e7:32:5f:53:09:25:7f:c3:a8:da:
         8d:28:02:ed:3e:9e:07:1a:f2:e8:35:f2:a2:db:5c:df:1f:7d:
         95:3e:68:6d:8d:1f:06:c5:b6:63:61:93:7e:33:ce:bf:65:3d:
         d6:5e:37:1d:9d:2a:c8:3d:c9:ac:86:50:de:b2:02:99:da:96:
         1c:a6:c4:cd:50:f0:59:75:88:e2:ec:49:52:e0:3c:2d:d7:51:
         cd:38:65:59:0f:06:c0:fa:e7:5b:74:16:31:7d:8c:2a:a8:6b:
         57:94:25:47:bc:72:82:34:cf:51:b4:29:d3:f0:95:d6:f0:28:
         54:31:76:01:d4:9b:ee:f1:e8:e9:ff:48:27:8c:ea:65:f9:05:
         eb:97:c9:99:39:ae:c2:34:8d:56:11:0b:7c:6b:34:91:a1:a5:
         6c:08:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:48 2026 by rpki-client