This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa
File:                     3139302e322e3230382e302f32312d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          pL+YL3tNZnyR4SuiYC8iKR5Edc4BMY+SEATLr2N5ioI=
Subject key identifier:   20:8E:A6:FE:F4:4E:79:23:65:7F:E0:54:B9:C3:BB:A2:93:5E:40:1C
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       39C1A1311269BA9DD1BFF1568E6EE3E7A6B2CF67
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa
Signing time:             Tue 06 Jan 2026 20:51:36 +0000
ROA not before:           Tue 06 Jan 2026 20:46:36 +0000
ROA not after:            Tue 05 Jan 2027 20:51:36 +0000
asID:                     262186
IP address blocks:        190.2.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c1:a1:31:12:69:ba:9d:d1:bf:f1:56:8e:6e:e3:e7:a6:b2:cf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Jan  6 20:46:36 2026 GMT
            Not After : Jan  5 20:51:36 2027 GMT
        Subject: CN=208EA6FEF44E7923657FE054B9C3BBA2935E401C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:d3:ca:17:6e:1d:67:f3:15:65:68:4c:9f:
                    8c:93:73:94:8d:03:e6:7e:44:cc:ea:f6:2e:dc:ac:
                    aa:1c:99:a3:14:d2:c4:66:bd:ba:78:a2:22:8c:17:
                    28:c8:23:fd:b0:9f:7b:3e:8c:4a:fd:07:84:1b:41:
                    38:f3:d8:76:52:fd:09:9d:f8:eb:1a:37:57:72:bd:
                    bf:0e:8e:1f:1b:62:ec:cc:8c:da:b9:3e:89:d1:9f:
                    ca:cd:ed:82:77:24:6a:a2:e9:20:ec:f6:72:3a:58:
                    5f:51:b5:fc:ea:f1:2d:ad:0c:2c:90:b7:b8:ca:77:
                    5d:59:07:eb:4c:db:7e:ce:d0:7f:2e:ee:03:4f:f8:
                    c1:b6:ef:10:e7:0f:ca:c1:7e:92:cb:b4:e4:e8:c2:
                    be:ea:88:22:c4:cf:44:b6:8b:6a:74:ff:e2:dd:3d:
                    c2:d1:dd:b1:38:e4:63:20:c9:4b:dd:c7:bd:3f:3e:
                    73:2f:12:03:f8:8e:9b:61:20:95:51:0e:60:6d:d5:
                    13:ce:e7:0b:15:70:2e:49:c6:b2:d9:a9:47:c5:92:
                    c3:ec:e3:d5:d2:8d:e0:1a:a9:23:b9:a9:ae:04:a8:
                    ab:49:d0:d0:f8:84:db:96:0e:dc:af:b7:69:d8:6e:
                    82:37:f6:38:f8:c5:4f:c7:df:b5:f7:06:00:7c:e5:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8E:A6:FE:F4:4E:79:23:65:7F:E0:54:B9:C3:BB:A2:93:5E:40:1C
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e322e3230382e302f32312d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:4c:76:d9:28:b3:a4:60:e3:32:81:76:5a:05:c3:09:e3:
         23:02:c7:32:de:b6:83:f4:e4:21:2a:fd:01:ea:dc:48:94:67:
         a6:8b:64:35:96:1d:be:0f:70:32:80:02:47:94:c1:f6:0b:20:
         f3:88:4c:aa:9f:26:53:ca:4b:4a:fa:53:83:99:d2:62:5d:d4:
         c3:22:09:a2:ce:51:5e:9f:d8:6e:0e:1d:67:89:ff:be:08:ee:
         a7:24:da:07:2c:a4:0b:88:7f:26:a8:8d:7a:58:8d:ca:fb:00:
         04:28:61:b9:50:9f:fd:8e:b6:36:20:04:ca:cc:f7:3a:7f:b3:
         65:b8:b7:01:5f:84:e6:e2:1c:e0:d4:d7:07:b0:a0:e6:ec:b0:
         17:4b:e6:55:8a:b0:e1:9d:8e:bc:a9:86:dc:0a:b5:d6:6f:cc:
         3b:e8:68:cc:35:dc:f0:41:d2:a1:d5:82:14:63:4d:73:9d:4b:
         c2:e5:88:b6:d7:06:c2:14:5c:35:85:71:cd:8d:a7:ad:e5:f6:
         19:91:b9:94:5b:ce:12:8c:7f:eb:45:1e:ed:06:17:38:23:b1:
         a1:c4:8b:cb:cf:72:cd:f3:a7:34:4a:15:c5:ad:14:fb:f5:8c:
         d5:24:2a:d5:62:05:4c:57:4c:d2:c1:fb:80:36:3c:76:58:7e:
         cd:29:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:07 2026 by rpki-client