This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa
File:                     3139302e39302e35322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          1uMx+u2xPybB+ZgZvlWrOtiHZVD3DgjS5B0qPFBmpJQ=
Subject key identifier:   61:E8:15:2F:D2:58:2E:22:5A:21:A9:C0:29:64:7A:3E:18:25:C8:99
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7FF1D8D25C43956F2A2EAFBB6A79A7F02200C602
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa
Signing time:             Thu 15 Jan 2026 16:00:44 +0000
ROA not before:           Thu 15 Jan 2026 15:55:44 +0000
ROA not after:            Thu 14 Jan 2027 16:00:44 +0000
asID:                     18678
IP address blocks:        190.90.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f1:d8:d2:5c:43:95:6f:2a:2e:af:bb:6a:79:a7:f0:22:00:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 15 15:55:44 2026 GMT
            Not After : Jan 14 16:00:44 2027 GMT
        Subject: CN=61E8152FD2582E225A21A9C029647A3E1825C899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:35:e6:c7:56:e0:15:c4:3c:c9:08:59:25:
                    94:bc:f5:88:07:8f:43:10:95:0e:84:e3:fd:42:33:
                    cc:6c:64:ff:0e:3a:7b:6f:f9:92:6c:76:ad:d4:4b:
                    fc:8f:e7:b0:71:74:04:65:9a:36:94:4e:cc:13:65:
                    75:6c:7c:f5:64:17:66:6c:01:f8:d3:40:0f:54:8c:
                    ef:0f:c0:3b:86:45:b0:fb:6f:b8:8f:ef:c9:d3:c2:
                    d8:0b:3b:bc:ad:c4:b5:01:24:32:e5:5d:f5:9b:37:
                    30:a3:6e:b7:b0:0f:fb:47:8e:52:6e:db:83:0e:de:
                    6e:7f:19:ad:f3:2b:40:1e:e9:13:ca:91:71:89:e1:
                    13:a7:cb:3c:82:eb:3c:1b:03:2f:86:da:dc:0e:5a:
                    0b:6d:9c:fb:de:ae:df:1f:94:1f:cf:bc:11:a0:16:
                    fd:ce:01:50:29:04:44:56:ea:1d:87:f2:11:89:13:
                    cd:b8:8a:ef:0c:55:29:41:49:47:78:f9:29:50:07:
                    b6:9a:80:42:91:91:08:3c:88:9f:3d:12:13:d0:5f:
                    f7:12:a2:57:e1:24:f5:41:3e:0f:89:f8:32:c8:af:
                    99:c6:0c:63:95:e9:64:83:b9:9d:c9:55:a9:88:c1:
                    5e:85:71:76:53:8d:6c:1b:78:b7:fd:74:2a:94:40:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:15:2F:D2:58:2E:22:5A:21:A9:C0:29:64:7A:3E:18:25:C8:99
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:44:f9:3f:93:1a:35:e7:c5:9d:e2:7a:26:2e:d7:8b:78:85:
         f4:3e:3a:8b:04:42:8e:24:ee:ab:6c:c4:d9:82:3f:fb:b1:f8:
         f1:43:3d:79:11:5c:35:eb:39:1e:18:b3:d1:ea:75:4f:f7:2f:
         d7:d2:39:7b:04:5c:32:b3:53:34:23:0d:2e:4c:7a:5c:17:8a:
         a9:83:e6:8e:ad:f2:64:d8:eb:09:7f:94:f7:bb:35:74:25:5b:
         1a:af:b2:b1:d1:db:98:3c:62:51:3b:a7:ea:d5:79:1a:4f:92:
         a5:85:2d:ae:dd:2e:da:20:33:2f:5f:55:a0:ee:c9:6a:07:f4:
         74:30:de:33:01:a9:c8:57:c4:26:55:83:db:cd:dd:6a:92:db:
         84:49:c1:35:6a:37:19:40:0f:55:6d:e6:64:f0:62:dc:a9:df:
         54:7f:af:d6:ed:66:e2:44:64:33:1b:2c:1a:3f:76:f5:5f:20:
         9e:9e:27:cf:24:75:d1:5f:6c:b8:87:c9:03:96:dd:8d:ef:5e:
         7e:cb:39:c6:7f:a8:b1:0d:15:fb:0c:2e:3e:ec:41:0a:59:35:
         93:07:e5:02:90:3f:0c:dd:b9:27:7d:be:39:c3:50:8a:49:b9:
         61:27:41:05:cc:e6:3a:5a:b3:03:a3:34:84:fb:df:19:ec:20:
         85:c3:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:28 2026 by rpki-client