This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa
File:                     3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa (raw, json)
Hash identifier:          zX2h2DGb9lwJ2h4m2vltJiJBQdKZGODUmsFnmnrqPgw=
Subject key identifier:   47:83:C4:41:9C:09:F2:AF:E4:EA:0E:69:03:07:0A:13:DF:80:E1:FE
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       3C4769C59317F2EB8093D49484890785A9DFC6BB
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa
Signing time:             Tue 06 Jan 2026 19:05:21 +0000
ROA not before:           Tue 06 Jan 2026 19:00:21 +0000
ROA not after:            Tue 05 Jan 2027 19:05:21 +0000
asID:                     273019
IP address blocks:        190.12.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:47:69:c5:93:17:f2:eb:80:93:d4:94:84:89:07:85:a9:df:c6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:21 2026 GMT
            Not After : Jan  5 19:05:21 2027 GMT
        Subject: CN=4783C4419C09F2AFE4EA0E6903070A13DF80E1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:04:29:c5:95:0c:f3:60:13:76:61:f5:78:
                    25:60:1b:40:a3:0d:7d:e2:8a:36:a5:2b:47:23:65:
                    8c:16:c2:36:9f:f0:d7:78:c8:8c:3c:da:1e:8b:26:
                    20:4c:3d:d9:ab:89:dd:91:78:53:ca:4f:6a:0c:43:
                    b6:04:73:74:3a:82:39:24:a6:03:11:53:cd:1e:73:
                    f1:ed:32:6f:d0:22:8f:52:71:15:f5:09:b9:f0:63:
                    1f:44:1e:82:9a:74:75:1f:2c:89:d4:ac:a2:69:a9:
                    cf:9c:8d:84:b3:c9:1d:5a:4f:a4:20:9f:ef:43:2f:
                    dc:66:9e:a7:4e:da:48:0e:60:09:dc:3c:50:06:92:
                    b4:81:03:e0:c9:16:9e:b4:c1:77:4f:e3:61:26:48:
                    9e:3d:b8:dd:8a:9f:89:ef:04:ac:90:7b:08:12:95:
                    ae:b8:44:20:c0:89:a3:3a:18:d8:35:10:45:e6:93:
                    07:b4:ca:b0:7e:86:74:25:2b:d7:6d:56:05:0d:ff:
                    bf:07:53:65:68:08:75:a6:f5:0c:22:d2:4c:b7:56:
                    28:56:8c:dc:83:76:aa:ff:a9:88:99:44:02:c6:e5:
                    05:de:8a:11:e0:24:42:0f:ba:3e:c9:ff:d5:db:61:
                    81:a0:5a:83:e4:a4:12:9f:dc:85:f0:41:4d:be:5c:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:C4:41:9C:09:F2:AF:E4:EA:0E:69:03:07:0A:13:DF:80:E1:FE
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3136382e302f32322d3234203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:69:36:7d:66:d7:d9:9b:7b:c3:b6:0e:a5:3c:a0:a2:d3:bf:
         42:82:0c:61:7a:26:4b:81:ad:9c:f5:d7:40:06:95:13:ff:4b:
         66:70:35:94:38:a5:96:2b:5c:37:b5:4e:10:17:ca:70:ec:5d:
         81:19:3e:95:44:c5:7f:d0:8a:0f:1b:03:cb:d1:1a:d1:ca:e5:
         c0:6a:6e:db:29:4b:ad:86:7c:0e:39:39:04:7c:18:32:d7:d4:
         1b:88:9e:87:3e:09:9f:00:fe:34:b3:70:0e:ce:8d:b1:02:dc:
         f3:83:c1:be:7b:c5:2f:d1:82:61:4f:92:fd:d9:87:cc:1d:c3:
         57:15:d1:48:db:c4:a6:44:93:11:f9:1c:99:2f:8b:ee:59:f7:
         7a:66:58:57:68:e5:7c:fb:9d:7f:f1:d2:53:7e:8e:5c:08:27:
         e7:92:75:ac:59:bd:9c:ca:e5:fa:ed:dd:c3:33:f0:e2:4d:c4:
         78:a9:a5:de:34:ee:8d:30:dc:77:7f:34:cb:48:3a:43:37:9d:
         25:62:dc:2d:27:b7:4d:af:bd:e7:ec:49:a1:7a:82:98:ca:ef:
         22:72:f3:a1:3f:5e:f9:6d:f0:dc:7f:6b:eb:76:9d:32:ca:0f:
         3a:0b:ee:7f:93:4c:04:cf:ee:7b:9d:61:4e:6b:98:33:e5:b6:
         19:2d:8f:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPEdpxZMX8uuAk9SUhIkHhanfxrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNjAxMDYxOTAwMjFaFw0yNzAxMDUxOTA1MjFaMDMxMTAvBgNV
BAMTKDQ3ODNDNDQxOUMwOUYyQUZFNEVBMEU2OTAzMDcwQTEzREY4MEUxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZgQpxZUM82ATdmH1eCVgG0Cj
DX3iijalK0cjZYwWwjaf8Nd4yIw82h6LJiBMPdmrid2ReFPKT2oMQ7YEc3Q6gjkk
pgMRU80ec/HtMm/QIo9ScRX1CbnwYx9EHoKadHUfLInUrKJpqc+cjYSzyR1aT6Qg
n+9DL9xmnqdO2kgOYAncPFAGkrSBA+DJFp60wXdP42EmSJ49uN2Kn4nvBKyQewgS
la64RCDAiaM6GNg1EEXmkwe0yrB+hnQlK9dtVgUN/78HU2VoCHWm9Qwi0ky3VihW
jNyDdqr/qYiZRALG5QXeihHgJEIPuj7J/9XbYYGgWoPkpBKf3IXwQU2+XAfBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUR4PEQZwJ8q/k6g5pAwcKE9+A4f4wHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzkzMDJlMzEzMjJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvgyo
MA0GCSqGSIb3DQEBCwUAA4IBAQA4aTZ9ZtfZm3vDtg6lPKCi079CggxheiZLga2c
9ddABpUT/0tmcDWUOKWWK1w3tU4QF8pw7F2BGT6VRMV/0IoPGwPL0RrRyuXAam7b
KUuthnwOOTkEfBgy19QbiJ6HPgmfAP40s3AOzo2xAtzzg8G+e8Uv0YJhT5L92YfM
HcNXFdFI28SmRJMR+RyZL4vuWfd6ZlhXaOV8+51/8dJTfo5cCCfnknWsWb2cyuX6
7d3DM/DiTcR4qaXeNO6NMNx3fzTLSDpDN50lYtwtJ7dNr73n7EmheoKYyu8icvOh
P175bfDcf2vrdp0yyg86C+5/k0wEz+57nWFOa5gz5bYZLY+c
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:15 2026 by rpki-client