This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e33322e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          s5DhdTWpWvAwZzgJwnSDS92pRdLxMbNgHB326qny+7U=
Subject key identifier:   23:86:2A:4D:03:4A:BD:6D:A6:C9:A7:96:4E:EE:38:1D:52:F1:7C:53
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7DF816DA051A3CE4B66A383C4A8FD46A692FC2A5
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa
Signing time:             Thu 15 Jan 2026 15:00:42 +0000
ROA not before:           Thu 15 Jan 2026 14:55:42 +0000
ROA not after:            Thu 14 Jan 2027 15:00:42 +0000
asID:                     18678
IP address blocks:        190.90.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:16:da:05:1a:3c:e4:b6:6a:38:3c:4a:8f:d4:6a:69:2f:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 15 14:55:42 2026 GMT
            Not After : Jan 14 15:00:42 2027 GMT
        Subject: CN=23862A4D034ABD6DA6C9A7964EEE381D52F17C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:c8:6c:84:72:87:15:a4:a3:b8:12:4e:4d:
                    1c:8c:4f:6d:b6:d9:80:a7:fb:be:d6:b4:e8:e2:c8:
                    fd:64:08:20:e8:68:1a:cd:86:62:f2:bf:09:3e:00:
                    3b:c5:b4:2c:ea:f3:33:cd:76:bf:5d:3e:be:3f:83:
                    73:67:45:16:52:a1:ce:96:88:06:12:ca:04:21:95:
                    80:bf:67:a1:3a:8d:9b:c9:0e:7f:7d:1a:cd:f8:24:
                    ab:5d:d9:b2:93:77:a3:c7:2a:52:fd:fc:ca:3e:63:
                    66:ad:f5:d1:de:13:0d:68:eb:f4:30:02:80:d2:22:
                    0a:36:4b:7d:d0:9d:2e:07:19:09:e6:4e:ae:1b:4c:
                    55:8b:ce:79:3e:b0:9e:a1:ca:44:aa:d4:17:c8:08:
                    34:e4:3f:15:07:11:02:f6:b2:ce:f9:17:0c:db:d4:
                    7d:dd:35:0d:3b:f9:b2:ef:36:53:d8:95:fd:a9:be:
                    4d:38:8b:8e:e9:e1:85:65:fa:31:b1:9a:77:d6:1f:
                    cb:b2:e0:51:61:df:ef:b1:4d:80:80:71:68:50:f7:
                    c6:fe:9f:de:16:20:05:0c:22:b8:7d:8d:9e:06:85:
                    4d:e9:4d:c9:06:32:ff:5b:48:f0:f3:eb:a2:da:54:
                    61:93:dd:e8:a5:68:03:6c:5b:95:a6:5e:64:7c:8a:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:86:2A:4D:03:4A:BD:6D:A6:C9:A7:96:4E:EE:38:1D:52:F1:7C:53
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e33322e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:84:13:44:e8:94:ac:24:97:75:1c:b4:07:6f:07:9c:e6:
         e4:2e:57:a0:d8:7c:06:80:44:ea:86:30:d9:82:a9:5a:2c:c2:
         38:18:94:92:56:a1:5f:4d:66:72:69:21:04:17:53:89:39:0e:
         a7:34:33:5c:c0:fb:fc:d1:d2:c4:ef:99:ad:fc:35:5e:9b:d5:
         4f:9a:07:59:58:1d:83:5b:62:d7:52:24:ad:2d:2c:bb:b5:b7:
         75:12:2a:c9:14:59:a4:df:2d:a0:24:60:4e:4c:fc:93:ef:43:
         0c:0d:c1:b0:91:cc:de:30:ef:84:f6:16:71:af:50:97:ec:43:
         95:ea:ed:7f:e2:9d:1e:d1:bd:0c:c1:cc:d3:ba:f7:ce:b6:4d:
         41:29:6f:35:85:2b:61:fb:62:a9:1d:59:29:c4:f0:b6:03:f6:
         d6:38:64:ed:02:25:57:fb:b6:66:1f:2d:51:d2:0c:03:62:86:
         2a:30:16:4a:fd:72:e2:55:55:8a:9e:7c:2c:80:bd:c8:a8:4e:
         8a:f4:0d:26:55:45:2e:90:92:e4:cf:fb:7b:ee:82:70:95:bb:
         3a:8b:56:84:91:b1:99:d3:ac:65:e9:77:44:60:90:fa:77:fe:
         20:90:fd:7b:c8:ec:0d:31:68:d1:58:b2:a8:ec:da:83:23:73:
         aa:55:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:31 2026 by rpki-client