This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa
File:                     3139302e39372e3230362e302f32332d3233203d3e203237383435.roa (raw, json)
Hash identifier:          wTzQzv8VxqhvjQ2c16977PWL3sHMKxlxaRkwujjy48M=
Subject key identifier:   1D:D6:93:5B:84:44:6D:FB:07:1E:A4:4E:04:DA:9C:1C:C8:86:98:52
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       76CE55B8373B03014046ED96269B57018386EE16
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:09 +0000
ROA not before:           Tue 06 Jan 2026 19:39:09 +0000
ROA not after:            Tue 05 Jan 2027 19:44:09 +0000
asID:                     27845
IP address blocks:        190.97.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ce:55:b8:37:3b:03:01:40:46:ed:96:26:9b:57:01:83:86:ee:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:09 2026 GMT
            Not After : Jan  5 19:44:09 2027 GMT
        Subject: CN=1DD6935B84446DFB071EA44E04DA9C1CC8869852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:15:4c:c9:e1:e5:47:df:75:19:22:73:7b:
                    f9:91:bc:81:85:af:e3:6d:2c:88:6f:e1:39:d2:c5:
                    8b:37:e4:86:98:48:1b:60:d3:e6:65:7a:1f:25:76:
                    a9:7f:26:90:9b:81:b4:87:63:1b:aa:b9:9a:0c:d2:
                    a2:80:c7:ba:fe:51:86:69:4b:ac:06:33:b5:44:2f:
                    c7:7c:d8:ba:fe:a3:95:16:87:4f:ee:6f:2a:32:88:
                    2b:c8:35:bc:88:64:39:2f:50:29:4f:79:29:7e:54:
                    5f:84:ec:00:a4:ab:60:15:32:74:e2:c2:bb:bf:14:
                    b8:8e:64:3c:d6:47:3a:a3:18:bd:e4:c1:04:12:13:
                    42:cf:eb:34:65:6d:32:f0:7c:fb:10:4b:89:b5:4a:
                    86:cf:0d:fb:79:a7:0f:68:8d:05:aa:21:e2:66:80:
                    70:49:ec:01:c4:a3:ca:30:2d:52:52:a6:08:dc:db:
                    34:05:9a:c5:22:c9:e8:73:40:b3:a9:6b:95:43:f3:
                    bb:2b:c9:cd:9c:54:d6:2e:d8:8c:27:33:fe:b8:9a:
                    73:92:c9:21:e5:67:bf:ae:42:5c:60:6e:a5:bc:fe:
                    4e:3b:48:1b:5c:06:9c:ef:5a:5c:58:d0:49:2f:d5:
                    16:67:53:9a:6b:60:a1:0f:d8:45:d4:dd:b2:af:21:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:93:5B:84:44:6D:FB:07:1E:A4:4E:04:DA:9C:1C:C8:86:98:52
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e3230362e302f32332d3233203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:ba:76:cf:a9:fe:42:68:05:e2:9a:91:c8:97:a3:40:b5:
         b5:91:1b:60:77:a3:c0:e4:f2:b5:86:7c:b9:8c:7d:53:16:9b:
         26:e3:d5:de:a8:c1:0c:49:b1:14:89:53:53:aa:16:ef:ca:10:
         eb:45:da:09:b0:00:ce:0b:fd:d4:2a:ea:a7:14:88:cc:4f:bd:
         63:94:c1:8f:a2:49:b9:14:88:5d:21:7b:7a:b8:b9:9b:32:65:
         f9:d0:7f:4b:e8:12:06:52:69:d6:fd:06:36:fc:11:d5:cd:75:
         83:ae:6b:5c:d4:ef:c9:7f:85:57:1f:54:d7:df:69:5c:3f:5e:
         90:78:fc:4c:9b:ec:05:03:d4:ba:04:1d:79:9b:33:fe:75:8e:
         03:95:85:4d:29:b7:e2:d9:ae:ba:18:21:9d:66:20:a4:92:da:
         86:31:5d:e9:15:60:b8:97:7a:06:85:93:86:d9:86:75:7e:d8:
         cf:8a:0b:ab:99:7d:dd:7f:d6:aa:0d:93:22:65:09:7b:c1:c3:
         11:bb:a9:bf:96:db:64:32:04:46:58:45:e2:fd:7c:ae:45:00:
         75:ed:31:61:c4:c6:c7:db:12:ad:b0:7e:bf:56:70:77:dd:3c:
         57:d4:d6:af:81:bd:f5:14:ca:3e:ef:0b:67:20:21:b1:cc:b6:
         87:13:b3:be
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUds5VuDc7AwFARu2WJptXAYOG7hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVEQjBEMTdCMTU3QkY2QUQwOEJBQzI1OTg4NDg5QUZE
NTVCODVCQzAeFw0yNjAxMDYxOTM5MDlaFw0yNzAxMDUxOTQ0MDlaMDMxMTAvBgNV
BAMTKDFERDY5MzVCODQ0NDZERkIwNzFFQTQ0RTA0REE5QzFDQzg4Njk4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3hVMyeHlR991GSJze/mRvIGF
r+NtLIhv4TnSxYs35IaYSBtg0+Zleh8ldql/JpCbgbSHYxuquZoM0qKAx7r+UYZp
S6wGM7VEL8d82Lr+o5UWh0/ubyoyiCvINbyIZDkvUClPeSl+VF+E7ACkq2AVMnTi
wru/FLiOZDzWRzqjGL3kwQQSE0LP6zRlbTLwfPsQS4m1SobPDft5pw9ojQWqIeJm
gHBJ7AHEo8owLVJSpgjc2zQFmsUiyehzQLOpa5VD87sryc2cVNYu2IwnM/64mnOS
ySHlZ7+uQlxgbqW8/k47SBtcBpzvWlxY0Ekv1RZnU5prYKEP2EXU3bKvIV/1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHdaTW4REbfsHHqROBNqcHMiGmFIwHwYDVR0j
BBgwFoAUVdsNF7FXv2rQi6wlmISJr9VbhbwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTlDQjgxN0M5RTdDNTQzNTJENjRENTU0OEU2QjVBMTE5
MTkyREY3RUMyRDhEODFFMzc5QzQ5MjRCNzhBMUZDLzAvNTVEQjBEMTdCMTU3QkY2
QUQwOEJBQzI1OTg4NDg5QUZENTVCODVCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NURCMEQxN0IxNTdCRjZBRDA4
QkFDMjU5ODg0ODlBRkQ1NUI4NUJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0U5Q0I4MTdDOUU3QzU0MzUyRDY0RDU1NDhFNkI1QTExOTE5MkRGN0VD
MkQ4RDgxRTM3OUM0OTI0Qjc4QTFGQy8wLzMxMzkzMDJlMzkzNzJlMzIzMDM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5hzjAN
BgkqhkiG9w0BAQsFAAOCAQEAmW26ds+p/kJoBeKakciXo0C1tZEbYHejwOTytYZ8
uYx9UxabJuPV3qjBDEmxFIlTU6oW78oQ60XaCbAAzgv91CrqpxSIzE+9Y5TBj6JJ
uRSIXSF7eri5mzJl+dB/S+gSBlJp1v0GNvwR1c11g65rXNTvyX+FVx9U199pXD9e
kHj8TJvsBQPUugQdeZsz/nWOA5WFTSm34tmuuhghnWYgpJLahjFd6RVguJd6BoWT
htmGdX7Yz4oLq5l93X/Wqg2TImUJe8HDEbupv5bbZDIERlhF4v18rkUAde0xYcTG
x9sSrbB+v1Zwd908V9TWr4G99RTKPu8LZyAhscy2hxOzvg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:40 2026 by rpki-client