This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e38372e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          5RX/ICcUVhWyjygPXmyg4msK0YOICWcbIkI7t52Uk44=
Subject key identifier:   74:81:7E:3D:F8:F2:ED:34:4D:31:D7:30:34:F3:0C:6D:3D:7B:9A:0A
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       5D929925BD46B2393999A242DCA2D53A8BC9C3D3
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 06 Jan 2026 19:13:35 +0000
ROA not before:           Tue 06 Jan 2026 19:08:35 +0000
ROA not after:            Tue 05 Jan 2027 19:13:35 +0000
asID:                     27837
IP address blocks:        190.90.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:92:99:25:bd:46:b2:39:39:99:a2:42:dc:a2:d5:3a:8b:c9:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Jan  6 19:08:35 2026 GMT
            Not After : Jan  5 19:13:35 2027 GMT
        Subject: CN=74817E3DF8F2ED344D31D73034F30C6D3D7B9A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:f0:c8:6e:74:23:75:1c:79:d4:6a:db:00:
                    74:d9:fd:c1:80:bd:84:18:01:b1:75:43:ed:0f:02:
                    1c:cb:5b:8f:5a:21:7d:bf:69:52:c7:c3:8f:4f:f2:
                    d9:8b:d6:5a:53:4c:c2:ac:e4:88:d5:df:44:92:1e:
                    5b:86:11:6d:d5:8f:f9:cc:bd:8e:7b:68:40:f2:33:
                    4f:7b:66:fa:79:08:63:70:4c:03:01:b4:e1:61:71:
                    ee:bc:d0:25:1a:c2:c2:19:65:bd:b0:de:5a:b2:29:
                    d6:7d:9f:c8:59:52:da:f0:74:b3:b6:f7:5d:4d:9f:
                    1f:d2:8e:b0:09:e9:f9:e2:5a:62:b7:28:f2:73:f3:
                    06:1b:56:a3:9b:ec:e4:19:d2:7b:ee:6e:2d:62:f5:
                    6b:9c:c1:c2:a3:e9:7b:e2:fb:db:1a:5a:d2:86:08:
                    f7:64:7d:ec:4c:b0:84:96:81:74:7f:8d:65:71:33:
                    49:bd:d2:03:e7:b6:4f:b0:83:36:6a:22:c6:b2:84:
                    56:13:01:ed:0d:7f:f8:e5:20:fd:c5:65:1b:75:6d:
                    94:b2:59:6e:e8:f9:42:e7:89:67:85:dd:00:12:d3:
                    00:3a:9a:ab:e4:e9:7d:29:50:b7:52:f2:26:c4:07:
                    f6:73:6f:7f:3f:2c:ea:e1:13:49:0b:c3:33:59:bb:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:81:7E:3D:F8:F2:ED:34:4D:31:D7:30:34:F3:0C:6D:3D:7B:9A:0A
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e38372e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:63:7f:df:dc:08:6e:0d:51:1b:14:ac:f6:30:2f:97:7c:
         6b:93:bf:8f:1f:ef:4e:fd:e7:71:d4:80:92:a2:99:3f:7b:3a:
         c2:33:c7:e1:78:a2:05:53:7a:f6:fe:f8:bd:24:a3:a2:85:f5:
         5a:d4:c7:32:3e:63:56:7a:bb:fd:a6:a8:1f:45:14:58:6a:ff:
         1e:68:d4:4f:9a:0c:9a:33:c7:0c:3a:89:15:ec:5b:93:a1:6c:
         56:a4:e6:c0:51:d9:03:0d:cd:14:ba:fd:8f:6d:4a:68:db:21:
         5c:2f:53:f4:26:6c:3d:ae:a1:fb:4b:1a:3b:32:67:ad:76:7c:
         22:e1:c1:b4:be:88:2b:a3:76:cf:93:0a:20:a7:84:2d:06:c2:
         a0:16:91:3a:fa:47:22:93:96:d3:5e:a0:38:c3:2b:b6:ba:25:
         fd:59:8e:39:3f:6f:5a:08:c3:0f:cf:2a:07:c8:4e:1b:1f:a6:
         17:41:98:e3:81:8f:8e:d2:6a:a6:05:e8:82:49:7a:bc:1d:93:
         9d:28:fc:3d:0c:3f:5d:42:a3:fa:c3:10:35:75:c9:0f:7d:cb:
         f6:41:52:5a:fe:5e:7f:6b:67:6f:8e:db:12:52:0e:c4:95:69:
         8d:75:2f:4b:7b:2f:c3:9f:c3:d5:09:b5:fa:af:3e:3b:50:8b:
         a2:1d:cf:44
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXZKZJb1Gsjk5maJC3KLVOovJw9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNjAxMDYxOTA4MzVaFw0yNzAxMDUxOTEzMzVaMDMxMTAvBgNV
BAMTKDc0ODE3RTNERjhGMkVEMzQ0RDMxRDczMDM0RjMwQzZEM0Q3QjlBMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SfDIbnQjdRx51GrbAHTZ/cGA
vYQYAbF1Q+0PAhzLW49aIX2/aVLHw49P8tmL1lpTTMKs5IjV30SSHluGEW3Vj/nM
vY57aEDyM097Zvp5CGNwTAMBtOFhce680CUawsIZZb2w3lqyKdZ9n8hZUtrwdLO2
911Nnx/SjrAJ6fniWmK3KPJz8wYbVqOb7OQZ0nvubi1i9WucwcKj6Xvi+9saWtKG
CPdkfexMsISWgXR/jWVxM0m90gPntk+wgzZqIsayhFYTAe0Nf/jlIP3FZRt1bZSy
WW7o+ULniWeF3QAS0wA6mqvk6X0pULdS8ibEB/Zzb38/LOrhE0kLwzNZu3w7AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUdIF+Pfjy7TRNMdcwNPMMbT17mgowHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzgzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+WlcwDQYJ
KoZIhvcNAQELBQADggEBAG9NY3/f3AhuDVEbFKz2MC+XfGuTv48f707953HUgJKi
mT97OsIzx+F4ogVTevb++L0ko6KF9VrUxzI+Y1Z6u/2mqB9FFFhq/x5o1E+aDJoz
xww6iRXsW5OhbFak5sBR2QMNzRS6/Y9tSmjbIVwvU/QmbD2uoftLGjsyZ612fCLh
wbS+iCujds+TCiCnhC0GwqAWkTr6RyKTltNeoDjDK7a6Jf1Zjjk/b1oIww/PKgfI
ThsfphdBmOOBj47SaqYF6IJJerwdk50o/D0MP11Co/rDEDV1yQ99y/ZBUlr+Xn9r
Z2+O2xJSDsSVaY11L0t7L8Ofw9UJtfqvPjtQi6Idz0Q=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:30 2026 by rpki-client