This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa
File:                     3139302e362e3136342e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier:          FcBC6wLU1ktNrRa3c7YkC+L7pRndmQan04WsuL2dPec=
Subject key identifier:   F9:50:86:99:5C:17:12:8A:31:EF:90:71:68:71:D3:27:DD:C6:8C:EA
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       37EDE9729B99EFF0FD6AAD397A58053E7357467D
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:10 +0000
ROA not before:           Tue 06 Jan 2026 19:39:10 +0000
ROA not after:            Tue 05 Jan 2027 19:44:10 +0000
asID:                     27845
IP address blocks:        190.6.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ed:e9:72:9b:99:ef:f0:fd:6a:ad:39:7a:58:05:3e:73:57:46:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:10 2026 GMT
            Not After : Jan  5 19:44:10 2027 GMT
        Subject: CN=F95086995C17128A31EF90716871D327DDC68CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:62:17:71:5d:70:8e:74:c2:b6:b4:e9:2a:
                    d2:92:47:c6:6c:85:19:1d:0e:b7:f4:1a:75:ed:69:
                    61:e4:33:88:f9:95:ec:be:75:91:eb:20:28:0a:b6:
                    a2:5d:55:95:42:98:07:e4:ce:6c:ae:02:59:fc:fc:
                    63:40:2f:2d:44:3c:82:e2:18:22:d5:76:9a:2a:d7:
                    7c:52:ae:02:77:19:4f:16:1c:bb:5d:95:39:e7:af:
                    71:1d:48:45:03:92:80:e1:e4:88:8f:54:b9:3a:e5:
                    86:08:f5:32:d1:90:cd:98:b6:5e:24:77:b6:8a:51:
                    56:6b:9c:54:89:dd:1d:1d:1d:56:fb:af:ee:24:a2:
                    68:0b:a2:f3:d6:9a:a0:08:4d:da:00:21:5f:7c:4b:
                    3a:e7:0d:b0:2b:17:2f:9c:f0:ac:13:ec:f4:bc:d2:
                    00:16:15:d6:bb:3a:eb:71:d4:39:c8:15:3a:0e:e1:
                    32:37:02:e1:35:dd:29:9b:e5:65:c2:1a:7a:06:ac:
                    b7:03:d6:42:56:34:cc:4c:5d:75:7b:f9:51:9b:d4:
                    f2:94:49:bb:a0:a1:0a:aa:c7:82:4d:08:ba:32:c5:
                    b5:0a:33:18:41:42:8c:14:8c:01:f3:ad:22:a9:39:
                    d4:16:4c:5b:43:ba:28:b2:59:22:48:fe:5f:99:ed:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:50:86:99:5C:17:12:8A:31:EF:90:71:68:71:D3:27:DD:C6:8C:EA
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e362e3136342e302f32332d3233203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:6e:d3:48:54:5f:b7:28:7a:60:c0:80:d4:88:a2:5e:15:26:
         19:e5:82:a5:04:69:6d:b8:60:61:6f:f3:d8:9c:96:a3:29:fb:
         cd:73:8b:f1:e3:24:75:dc:cb:a1:cf:72:9f:2c:20:fb:d6:13:
         d4:ea:0d:0f:19:d7:bc:7b:22:1f:88:dc:75:25:bb:f1:7c:10:
         a1:14:60:e9:8a:23:fe:11:37:fd:db:1c:03:36:0b:74:fa:de:
         44:b5:a3:a0:0e:55:e9:89:5d:ba:8a:b1:b1:34:d5:4e:7c:b8:
         b4:c8:83:3c:3a:00:7f:29:fb:da:77:96:ad:8d:e3:43:81:cc:
         fb:b7:69:68:22:48:dd:97:5a:0c:1b:12:04:80:4f:1d:38:27:
         be:68:a1:67:46:f6:4a:28:80:b7:4a:0b:74:e0:d7:56:41:2c:
         82:23:12:f5:f2:8f:59:7a:fd:a4:a2:62:95:37:b4:0f:93:81:
         b8:50:fc:12:2d:0a:f6:fa:c3:74:46:ff:0c:b3:f8:03:c0:4f:
         1f:5f:cc:74:8c:31:61:7c:1a:31:14:1f:f9:67:a9:da:d3:b3:
         49:83:ec:0d:b5:37:44:74:1a:dc:35:44:be:7c:7a:37:a9:aa:
         9c:74:a6:65:46:19:9f:6d:b3:e5:b2:80:8a:63:37:4d:a3:3f:
         8b:5a:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:37 2026 by rpki-client