This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
File:                     3139302e39372e3139362e302f32322d3232203d3e203237383435.roa (raw, json)
Hash identifier:          FJXfE4LjHD6qVyW5dxTQL3QreNh6z1kqjJ2cow0v9io=
Subject key identifier:   1C:06:27:D3:26:3B:CE:33:18:66:0C:F4:CC:92:66:F6:E7:EB:5D:94
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       69DFCD5AE07AA7EA7A422D2F4E421DAA24B7F939
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:05 +0000
ROA not before:           Tue 06 Jan 2026 19:39:05 +0000
ROA not after:            Tue 05 Jan 2027 19:44:05 +0000
asID:                     27845
IP address blocks:        190.97.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:df:cd:5a:e0:7a:a7:ea:7a:42:2d:2f:4e:42:1d:aa:24:b7:f9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:05 2026 GMT
            Not After : Jan  5 19:44:05 2027 GMT
        Subject: CN=1C0627D3263BCE3318660CF4CC9266F6E7EB5D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:e4:96:16:8d:6e:83:c0:4a:4a:45:bb:17:
                    79:5d:1f:c6:42:4a:a9:56:9e:28:86:d2:af:77:8e:
                    68:9f:37:30:7d:a9:70:73:47:48:c7:82:69:8e:b0:
                    a8:6a:c3:e6:5f:69:fa:41:de:c1:d5:88:8e:72:ad:
                    cf:3a:f5:80:b4:cb:75:cb:64:b8:3c:b2:00:cc:e4:
                    7c:45:6b:d2:37:5c:5e:c5:c2:e7:8b:10:41:e9:88:
                    86:9a:89:71:3b:5b:e7:30:d5:37:14:d9:ed:68:3f:
                    a5:fc:f5:46:dd:14:7e:e5:e6:50:44:9b:07:27:17:
                    2a:82:63:9c:8e:94:9e:3b:b9:f6:fc:a0:c1:74:a7:
                    33:d3:a9:1d:02:ad:00:ce:ed:79:6a:ee:08:6d:84:
                    33:aa:25:f7:12:4b:69:77:80:af:6d:70:6e:ef:4a:
                    b5:54:76:e1:87:91:3c:89:f8:b5:58:d6:8f:6c:37:
                    54:f4:b7:61:84:c4:b6:d4:57:99:f6:6e:c8:36:2e:
                    b9:eb:1e:b3:61:4c:a7:8c:26:a8:04:a0:0d:06:4a:
                    10:04:2d:e7:34:0a:99:be:94:f6:d1:19:10:ab:73:
                    67:04:91:d9:11:7e:bc:6e:e6:62:76:19:5c:e8:9d:
                    17:fc:20:8f:69:53:a0:91:8e:a8:33:d2:1c:e4:92:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:06:27:D3:26:3B:CE:33:18:66:0C:F4:CC:92:66:F6:E7:EB:5D:94
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3139362e302f32322d3232203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e4:3b:3b:54:f7:a7:6c:34:e9:53:73:73:3b:60:12:bb:2e:55:
         f9:5b:07:71:e6:11:00:b7:3b:4a:77:af:6c:ba:d7:61:48:fc:
         74:8d:ca:b7:c3:19:d9:ac:e1:b9:6d:86:f5:0e:46:66:b2:33:
         d7:15:3a:f2:55:2d:eb:42:9a:16:44:a5:bb:58:1d:f4:30:24:
         74:eb:c5:aa:6d:ee:2a:ff:71:e9:2e:40:28:69:ce:f2:f2:fd:
         ed:26:44:8b:42:9e:fa:16:69:15:c2:49:fb:79:70:73:67:fb:
         fe:49:a2:8f:32:93:68:e4:cb:9d:45:3b:2b:7c:8f:74:0e:11:
         35:9c:e2:76:4b:28:a4:bd:27:0c:66:2f:22:8e:c4:71:7d:89:
         96:f2:85:8e:13:c1:ca:e6:85:f8:83:45:e1:59:5b:ba:a2:19:
         34:20:95:43:d3:f1:95:ad:72:23:11:99:ba:9f:af:e5:9a:92:
         10:7e:a4:27:39:3a:61:a9:d8:c3:cc:d2:cc:23:1d:41:0f:45:
         66:e7:a0:83:6a:df:b4:f2:b4:f6:84:ad:cd:03:57:a5:6d:74:
         ba:c1:4f:6f:f3:a5:76:2b:ae:cf:c1:ca:7a:06:f3:d8:1e:77:
         e1:4e:dd:2d:70:f0:4a:e8:55:fd:50:6f:fd:df:3f:38:bd:42:
         cf:a9:39:8e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUad/NWuB6p+p6Qi0vTkIdqiS3+TkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEQjBEMTdCMTU3QkY2QUQwOEJBQzI1OTg4NDg5QUZE
NTVCODVCQzAeFw0yNjAxMDYxOTM5MDVaFw0yNzAxMDUxOTQ0MDVaMDMxMTAvBgNV
BAMTKDFDMDYyN0QzMjYzQkNFMzMxODY2MENGNENDOTI2NkY2RTdFQjVEOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs0+SWFo1ug8BKSkW7F3ldH8ZC
SqlWniiG0q93jmifNzB9qXBzR0jHgmmOsKhqw+ZfafpB3sHViI5yrc869YC0y3XL
ZLg8sgDM5HxFa9I3XF7FwueLEEHpiIaaiXE7W+cw1TcU2e1oP6X89UbdFH7l5lBE
mwcnFyqCY5yOlJ47ufb8oMF0pzPTqR0CrQDO7Xlq7ghthDOqJfcSS2l3gK9tcG7v
SrVUduGHkTyJ+LVY1o9sN1T0t2GExLbUV5n2bsg2LrnrHrNhTKeMJqgEoA0GShAE
Lec0Cpm+lPbRGRCrc2cEkdkRfrxu5mJ2GVzonRf8II9pU6CRjqgz0hzkkoKVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHAYn0yY7zjMYZgz0zJJm9ufrXZQwHwYDVR0j
BBgwFoAUVdsNF7FXv2rQi6wlmISJr9VbhbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTlDQjgxN0M5RTdDNTQzNTJENjRENTU0OEU2QjVBMTE5
MTkyREY3RUMyRDhEODFFMzc5QzQ5MjRCNzhBMUZDLzAvNTVEQjBEMTdCMTU3QkY2
QUQwOEJBQzI1OTg4NDg5QUZENTVCODVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NURCMEQxN0IxNTdCRjZBRDA4
QkFDMjU5ODg0ODlBRkQ1NUI4NUJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U5Q0I4MTdDOUU3QzU0MzUyRDY0RDU1NDhFNkI1QTExOTE5MkRGN0VD
MkQ4RDgxRTM3OUM0OTI0Qjc4QTFGQy8wLzMxMzkzMDJlMzkzNzJlMzEzOTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5hxDAN
BgkqhkiG9w0BAQsFAAOCAQEA5Ds7VPenbDTpU3NzO2ASuy5V+VsHceYRALc7Snev
bLrXYUj8dI3Kt8MZ2azhuW2G9Q5GZrIz1xU68lUt60KaFkSlu1gd9DAkdOvFqm3u
Kv9x6S5AKGnO8vL97SZEi0Ke+hZpFcJJ+3lwc2f7/kmijzKTaOTLnUU7K3yPdA4R
NZzidksopL0nDGYvIo7EcX2JlvKFjhPByuaF+INF4VlbuqIZNCCVQ9Pxla1yIxGZ
up+v5ZqSEH6kJzk6YanYw8zSzCMdQQ9FZuegg2rftPK09oStzQNXpW10usFPb/Ol
diuuz8HKegbz2B534U7dLXDwSuhV/VBv/d8/OL1Cz6k5jg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:26 2026 by rpki-client