This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e37302e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          E2G3uLvmpL/Vy0o8v4s92sCBYLBx1VKPLt2bnNfO8Xk=
Subject key identifier:   BF:E6:E1:8D:BF:2C:2D:9C:D1:52:22:B8:EB:FF:82:20:D2:00:C9:74
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       599377446A07BEC241C07914C2517958418566BC
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:06 +0000
ROA not before:           Tue 06 Jan 2026 19:39:06 +0000
ROA not after:            Tue 05 Jan 2027 19:44:06 +0000
asID:                     27845
IP address blocks:        190.97.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:93:77:44:6a:07:be:c2:41:c0:79:14:c2:51:79:58:41:85:66:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:06 2026 GMT
            Not After : Jan  5 19:44:06 2027 GMT
        Subject: CN=BFE6E18DBF2C2D9CD15222B8EBFF8220D200C974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:0e:70:66:aa:91:23:90:be:e0:a3:e2:6a:
                    4b:ca:be:cb:ce:d4:18:d1:cb:4e:fb:97:90:de:60:
                    dc:91:22:78:c7:1b:2e:59:2f:0c:2d:b5:84:c9:db:
                    84:a5:6f:86:a4:fa:11:ae:8f:af:35:a5:61:d7:29:
                    26:e2:3d:a9:81:c4:2b:d2:37:1e:88:22:ec:82:ab:
                    de:ba:aa:2c:d6:82:3b:2f:f3:83:a0:65:d7:59:ab:
                    ed:57:4e:cd:c0:1c:fb:9c:5c:19:38:30:7f:53:e0:
                    18:59:3f:6b:72:a5:09:bb:e7:61:be:d8:65:f6:0f:
                    4f:7e:51:80:b1:96:18:80:74:3f:68:6c:18:98:11:
                    85:b3:f2:8e:c6:e9:47:a3:62:d2:af:99:aa:0d:39:
                    ca:1b:32:2f:ef:e2:3f:fd:48:d8:2c:62:30:49:08:
                    5c:a5:e2:91:7c:59:78:00:01:25:a7:01:d9:2c:bf:
                    ec:05:00:09:2a:00:54:e5:f1:5b:8d:f4:3b:c7:c8:
                    36:c2:94:b7:68:01:a7:b9:e8:ab:1f:0b:d9:77:1d:
                    d5:a7:27:b0:d1:2d:a9:29:9c:dd:d8:0a:d3:a2:b5:
                    30:ad:0a:e4:9f:8f:cd:97:2c:ef:63:ae:f4:ad:fa:
                    6e:7a:c1:0b:02:51:6e:ce:ba:ac:87:4a:75:46:26:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E6:E1:8D:BF:2C:2D:9C:D1:52:22:B8:EB:FF:82:20:D2:00:C9:74
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37302e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:60:e0:d4:04:ef:5c:c2:c6:5c:14:8f:e2:c7:54:41:3c:f6:
         86:ce:b4:91:02:3a:47:f6:e3:4c:ed:e3:9d:bd:73:e9:69:27:
         66:a7:77:01:e8:8b:7a:b1:3d:6c:ae:24:24:42:36:3d:a2:76:
         cf:ae:6d:3a:83:93:d2:66:ab:89:f9:d3:5a:d3:01:31:89:54:
         0a:13:f3:d3:c2:0c:b7:aa:78:f2:b2:c4:d9:d8:2e:89:1d:8f:
         50:47:cf:cb:5f:be:c1:02:dc:45:65:28:04:2a:ce:8f:57:40:
         5b:59:28:21:81:ac:a4:57:a4:1b:6f:50:34:ed:fb:c4:f5:93:
         87:6f:29:c4:84:2b:2a:af:e0:80:d9:61:5d:11:14:f9:9a:81:
         29:d0:a4:99:fc:73:3f:e1:cb:6b:a5:e3:af:b1:34:aa:0c:25:
         29:7f:f6:f7:3f:2a:b7:41:5d:a6:ce:0e:5e:b9:d3:57:cb:d7:
         b5:f1:86:6d:fb:7d:cb:d9:d8:ac:f0:02:1f:5f:e4:b3:36:15:
         df:d9:1b:97:65:e0:cf:2c:07:04:34:7f:ac:72:39:6e:5d:93:
         9c:58:39:b1:5c:e6:f7:0f:20:9b:8b:9e:4b:f2:c9:07:2a:ec:
         51:91:a3:58:d2:a8:f7:89:84:d5:eb:dd:11:28:44:d6:d9:5f:
         57:15:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:25:59 2026 by rpki-client