This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
File:                     3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier:          mewTTnTIcWU7TowgoUTSRzj7d5CzP9OWctx1KHgS4K0=
Subject key identifier:   A8:C1:79:9F:DA:8D:4D:9D:77:72:86:01:A8:C4:52:B6:BD:DD:65:41
Certificate issuer:       /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial:       18F4B88ECE85A7B14CD1B1CA118B8A9F7541F5A0
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa
Signing time:             Tue 06 Jan 2026 18:58:54 +0000
ROA not before:           Tue 06 Jan 2026 18:53:54 +0000
ROA not after:            Tue 05 Jan 2027 18:58:54 +0000
asID:                     263246
IP address blocks:        190.108.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f4:b8:8e:ce:85:a7:b1:4c:d1:b1:ca:11:8b:8a:9f:75:41:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
        Validity
            Not Before: Jan  6 18:53:54 2026 GMT
            Not After : Jan  5 18:58:54 2027 GMT
        Subject: CN=A8C1799FDA8D4D9D77728601A8C452B6BDDD6541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:5a:dd:72:01:bf:dd:c9:e0:05:c0:6c:be:
                    bf:72:84:a1:23:74:05:98:d9:73:05:be:8f:d9:b6:
                    7f:24:9f:ab:43:78:74:0b:4a:de:f2:58:a1:bd:cb:
                    29:7d:a0:49:6d:a5:0b:e5:31:51:96:bb:b9:e0:46:
                    68:5e:e4:46:6c:ba:ae:52:68:f4:23:6c:0c:48:72:
                    56:14:62:05:9a:c1:c4:1f:cc:27:84:9a:68:d9:8c:
                    e4:b7:0c:37:94:00:19:ab:5c:96:0a:5e:17:c9:7b:
                    35:1a:b4:63:89:d7:df:c2:8a:3f:3e:94:62:ad:70:
                    22:bd:b7:fb:09:8f:3a:0c:93:cf:82:97:e8:6c:d2:
                    96:8b:ef:90:1c:0e:24:f4:f1:26:c4:6d:38:29:df:
                    79:63:67:6b:ef:10:82:10:9b:8f:53:d4:42:49:fa:
                    42:6d:e3:82:e1:a6:c4:21:c1:2a:be:db:71:69:31:
                    05:6e:2d:21:fd:cf:89:e5:04:60:8b:02:6e:05:79:
                    32:97:d2:d4:94:c8:38:36:c5:aa:f3:02:80:70:5f:
                    f1:45:be:1e:59:15:f2:c5:74:2b:53:df:89:39:85:
                    58:c6:3e:b6:87:87:31:00:95:9a:ec:f3:24:22:ca:
                    3f:2f:4e:7c:6c:94:64:c3:ef:c6:75:31:37:35:7b:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:79:9F:DA:8D:4D:9D:77:72:86:01:A8:C4:52:B6:BD:DD:65:41
            X509v3 Authority Key Identifier:
                keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37322e302f32342d3234203d3e20323633323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:72:52:ab:af:c2:50:90:7d:4c:f6:b7:c4:e8:25:94:ee:a0:
         02:97:a4:a5:24:f9:71:39:bb:06:ad:a8:5b:0f:d7:f3:06:d6:
         f9:fe:62:b3:d9:97:15:57:7e:b8:dc:0a:3f:d6:e4:8f:52:1b:
         d7:aa:79:78:87:c5:81:c9:49:1e:e0:6b:e0:4e:6d:38:13:f5:
         97:67:da:92:7f:50:92:a5:79:bc:de:c6:e2:85:b4:f2:17:1f:
         b3:d3:80:1b:b0:23:ae:af:b7:c4:6f:1c:97:d6:0c:e7:99:0e:
         75:bf:c7:fd:be:53:7d:18:b7:80:4a:5e:66:2a:bb:11:9c:c0:
         68:2f:7b:e7:2d:95:2f:fa:e3:58:f4:9a:17:de:ff:24:f3:ef:
         e3:77:03:2f:75:23:87:5c:c8:e7:81:29:77:a5:96:09:6e:8d:
         04:99:4d:85:25:ef:b4:84:f3:fb:93:55:0b:9b:16:08:54:04:
         d5:16:7d:54:c2:5e:9e:6f:b4:62:44:65:fa:a2:eb:83:f4:a1:
         4e:0f:bd:f9:ac:39:0c:21:d7:49:b7:bb:e9:8d:a7:7d:00:1c:
         56:af:9b:31:bd:52:a2:4a:8c:8b:cb:18:e8:51:69:2a:7f:e7:
         f7:f5:ee:e8:40:df:71:99:84:7e:8f:61:e9:c2:0f:05:3c:fb:
         9c:fa:4e:05
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGPS4js6Fp7FM0bHKEYuKn3VB9aAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUwRjNGRjBFODQzMEExQ0I0NUFEMzI2MDk4M0E5RDM0
OTcyMjYyNDAeFw0yNjAxMDYxODUzNTRaFw0yNzAxMDUxODU4NTRaMDMxMTAvBgNV
BAMTKEE4QzE3OTlGREE4RDREOUQ3NzcyODYwMUE4QzQ1MkI2QkRERDY1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/51rdcgG/3cngBcBsvr9yhKEj
dAWY2XMFvo/Ztn8kn6tDeHQLSt7yWKG9yyl9oEltpQvlMVGWu7ngRmhe5EZsuq5S
aPQjbAxIclYUYgWawcQfzCeEmmjZjOS3DDeUABmrXJYKXhfJezUatGOJ19/Cij8+
lGKtcCK9t/sJjzoMk8+Cl+hs0paL75AcDiT08SbEbTgp33ljZ2vvEIIQm49T1EJJ
+kJt44LhpsQhwSq+23FpMQVuLSH9z4nlBGCLAm4FeTKX0tSUyDg2xarzAoBwX/FF
vh5ZFfLFdCtT34k5hVjGPraHhzEAlZrs8yQiyj8vTnxslGTD78Z1MTc1exJjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqMF5n9qNTZ13coYBqMRStr3dZUEwHwYDVR0j
BBgwFoAU7g8/8OhDChy0WtMmCYOp00lyJiQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjcxREU3Q0QxNjBGQjQ3MUJFNEZBOEVCNzcyMTk3QUY4
QkQ4Q0UzNjM3NDU4RDIxOEZGRTMwM0RFNDhBQjk4LzAvRUUwRjNGRjBFODQzMEEx
Q0I0NUFEMzI2MDk4M0E5RDM0OTcyMjYyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRTBGM0ZGMEU4NDMwQTFDQjQ1
QUQzMjYwOTgzQTlEMzQ5NzIyNjI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEI3MURFN0NEMTYwRkI0NzFCRTRGQThFQjc3MjE5N0FGOEJEOENFMzYz
NzQ1OEQyMThGRkUzMDNERTQ4QUI5OC8wLzMxMzkzMDJlMzEzMDM4MmUzNzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmxI
MA0GCSqGSIb3DQEBCwUAA4IBAQCEclKrr8JQkH1M9rfE6CWU7qACl6SlJPlxObsG
rahbD9fzBtb5/mKz2ZcVV3643Ao/1uSPUhvXqnl4h8WByUke4GvgTm04E/WXZ9qS
f1CSpXm83sbihbTyFx+z04AbsCOur7fEbxyX1gznmQ51v8f9vlN9GLeASl5mKrsR
nMBoL3vnLZUv+uNY9JoX3v8k8+/jdwMvdSOHXMjngSl3pZYJbo0EmU2FJe+0hPP7
k1ULmxYIVATVFn1Uwl6eb7RiRGX6ouuD9KFOD735rDkMIddJt7vpjad9ABxWr5sx
vVKiSoyLyxjoUWkqf+f39e7oQN9xmYR+j2Hpwg8FPPuc+k4F
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:34 2026 by rpki-client