This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e382e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          k0CaRP6V9uuJsrvgnoAMQkl/Z0HEzsnDKH2i+y0yLcc=
Subject key identifier:   8D:D5:E6:E1:F1:3F:1E:68:CA:2A:F4:64:86:C2:2D:9A:1E:EF:F3:EB
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7B16B179506A90243D9EC3C0897A08F3AB81F3AC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa
Signing time:             Wed 14 Jan 2026 13:00:30 +0000
ROA not before:           Wed 14 Jan 2026 12:55:30 +0000
ROA not after:            Wed 13 Jan 2027 13:00:30 +0000
asID:                     18678
IP address blocks:        190.90.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:16:b1:79:50:6a:90:24:3d:9e:c3:c0:89:7a:08:f3:ab:81:f3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan 14 12:55:30 2026 GMT
            Not After : Jan 13 13:00:30 2027 GMT
        Subject: CN=8DD5E6E1F13F1E68CA2AF46486C22D9A1EEFF3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:c8:2e:91:52:d9:d5:d0:d6:b5:83:43:cb:
                    40:74:d8:df:b9:30:34:bd:65:50:8f:f9:b1:c6:da:
                    33:a2:6f:4d:83:f0:4d:77:19:c1:0e:85:4c:3d:0f:
                    31:85:8f:4d:47:24:e8:6e:b2:81:27:60:3a:2e:ef:
                    76:b9:2e:58:da:c0:48:7e:ec:0f:ca:7c:5e:c7:ef:
                    53:59:6e:bc:4c:f1:a0:36:9b:e7:c2:e7:98:45:bc:
                    c2:9b:62:88:42:e3:b2:16:35:1d:0b:ab:44:ae:98:
                    9a:64:ad:a0:14:ab:f2:ed:17:05:7d:7e:44:f9:44:
                    57:0d:0c:47:07:50:8c:93:6e:87:21:4a:25:52:59:
                    18:18:bf:d7:99:e3:a9:75:7b:ea:ba:ec:fa:ff:0a:
                    13:6c:61:06:8b:71:c8:66:79:0a:0f:4b:b3:7a:47:
                    59:00:17:49:36:17:90:dc:5b:90:7c:af:a3:e4:0c:
                    54:ba:d5:21:3c:8e:d4:33:bf:1e:b6:da:43:85:ad:
                    3c:ea:55:bb:48:79:cf:23:a7:4c:fd:c0:41:30:fa:
                    20:ac:eb:2c:10:4e:a5:0d:17:b1:57:5f:07:58:68:
                    75:77:d9:73:cf:8f:7d:f1:3f:9f:e9:68:0f:71:92:
                    0e:72:87:84:20:22:53:5a:2f:b5:e3:65:02:8b:46:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D5:E6:E1:F1:3F:1E:68:CA:2A:F4:64:86:C2:2D:9A:1E:EF:F3:EB
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e382e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:ec:76:9a:8e:83:18:d1:30:72:d1:a0:d2:2f:51:83:46:
         9b:3b:18:20:fa:03:75:b4:22:a1:ed:7b:af:b4:4f:a3:d4:ee:
         0a:20:3a:88:4e:a3:1a:68:49:ad:d6:8f:13:15:b2:42:93:aa:
         fa:4d:ee:4c:08:da:8e:10:18:a7:3c:3e:82:7c:37:85:9f:20:
         ba:1a:c4:00:f7:2a:07:f9:4e:a7:11:8d:d1:e5:9c:81:61:69:
         29:a0:c7:e2:4b:a9:9c:25:8c:8e:09:a9:0f:71:1d:0a:bf:c6:
         3e:17:99:dd:a0:9a:47:06:d4:58:36:97:47:b6:86:26:7c:52:
         cf:9a:86:0e:8b:5a:97:eb:2b:a7:82:dc:45:80:ab:41:1f:52:
         1a:df:35:1b:81:ed:e3:60:d1:40:05:c6:0b:d2:64:d4:b8:4c:
         c0:82:f6:66:20:a6:57:b5:21:d8:b9:42:f5:1f:b3:72:8c:f9:
         cc:9a:e7:3f:5e:ed:09:ce:8a:79:84:cb:c5:ed:56:e6:a2:e1:
         ca:2d:16:f7:6e:9c:23:38:7c:4a:c1:df:28:a9:3d:80:79:a2:
         49:11:e2:10:c0:16:76:f9:e9:2d:cd:d9:de:f1:bf:33:bc:77:
         48:14:3b:c3:64:50:69:45:21:88:07:a1:96:b6:9e:43:ee:e0:
         6d:1c:5a:bc
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUexaxeVBqkCQ9nsPAiXoI86uB86wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAxMTQxMjU1MzBaFw0yNzAxMTMxMzAwMzBaMDMxMTAvBgNV
BAMTKDhERDVFNkUxRjEzRjFFNjhDQTJBRjQ2NDg2QzIyRDlBMUVFRkYzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSsgukVLZ1dDWtYNDy0B02N+5
MDS9ZVCP+bHG2jOib02D8E13GcEOhUw9DzGFj01HJOhusoEnYDou73a5LljawEh+
7A/KfF7H71NZbrxM8aA2m+fC55hFvMKbYohC47IWNR0Lq0SumJpkraAUq/LtFwV9
fkT5RFcNDEcHUIyTbochSiVSWRgYv9eZ46l1e+q67Pr/ChNsYQaLcchmeQoPS7N6
R1kAF0k2F5DcW5B8r6PkDFS61SE8jtQzvx622kOFrTzqVbtIec8jp0z9wEEw+iCs
6ywQTqUNF7FXXwdYaHV32XPPj33xP5/paA9xkg5yh4QgIlNaL7XjZQKLRpuJAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUjdXm4fE/HmjKKvRkhsItmh7v8+swHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzgyZTMwMmYz
MjMxMmQzMjM0MjAzZDNlMjAzMTM4MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvloIMA0GCSqG
SIb3DQEBCwUAA4IBAQBdAOx2mo6DGNEwctGg0i9Rg0abOxgg+gN1tCKh7XuvtE+j
1O4KIDqITqMaaEmt1o8TFbJCk6r6Te5MCNqOEBinPD6CfDeFnyC6GsQA9yoH+U6n
EY3R5ZyBYWkpoMfiS6mcJYyOCakPcR0Kv8Y+F5ndoJpHBtRYNpdHtoYmfFLPmoYO
i1qX6yungtxFgKtBH1Ia3zUbge3jYNFABcYL0mTUuEzAgvZmIKZXtSHYuUL1H7Ny
jPnMmuc/Xu0Jzop5hMvF7VbmouHKLRb3bpwjOHxKwd8oqT2AeaJJEeIQwBZ2+ekt
zdne8b8zvHdIFDvDZFBpRSGIB6GWtp5D7uBtHFq8
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:09 2026 by rpki-client