This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
File:                     3139302e382e3136382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          wgRZCzsw6Z3rhWh2FQvapqIDFTbLw/ck50mgFyHlZN0=
Subject key identifier:   B3:82:B7:54:95:F5:55:F3:35:CD:75:A9:A3:31:30:28:71:92:AB:24
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       01A8EBDC0EFAC533F6BD4BD31A9F26690929F7CF
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 06 Jan 2026 19:41:53 +0000
ROA not before:           Tue 06 Jan 2026 19:36:53 +0000
ROA not after:            Tue 05 Jan 2027 19:41:53 +0000
asID:                     269750
IP address blocks:        190.8.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:eb:dc:0e:fa:c5:33:f6:bd:4b:d3:1a:9f:26:69:09:29:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Jan  6 19:36:53 2026 GMT
            Not After : Jan  5 19:41:53 2027 GMT
        Subject: CN=B382B75495F555F335CD75A9A33130287192AB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:81:fd:cf:b9:a5:60:a0:08:b8:01:9e:bf:
                    05:4c:3e:68:50:71:14:fa:68:ef:40:f9:61:81:0f:
                    ca:5b:c4:55:36:9b:7f:e3:a5:af:a1:ae:03:f5:58:
                    8f:dd:4f:4d:39:5f:a0:0f:a4:f3:b3:41:44:a2:3a:
                    7a:a9:ee:e7:04:96:20:c5:c2:d2:44:9b:5a:e3:60:
                    5c:51:c6:95:9d:bf:64:81:18:d5:11:3a:67:6c:5c:
                    c9:78:fc:a5:63:78:fa:c9:76:69:91:7f:c2:60:bc:
                    9c:18:91:d0:d7:cd:5f:d1:72:f5:14:77:73:67:4f:
                    6a:f4:0b:53:2e:4f:5e:46:75:e5:01:20:76:92:96:
                    59:42:a8:96:44:51:87:03:1f:89:c8:50:f1:8a:1c:
                    e6:95:24:a8:ea:26:ce:f3:82:aa:23:b0:28:2a:61:
                    e3:9b:f8:d3:ab:95:14:a5:39:9b:d4:d0:95:f9:ce:
                    20:7d:33:de:f5:2a:f4:6a:8a:0a:63:e5:ce:1a:b4:
                    33:cd:5c:ff:cb:f3:ae:4c:16:99:0e:38:db:4f:dc:
                    6a:9f:99:c9:8d:2b:ea:42:30:72:d4:ed:fc:45:51:
                    f8:c7:6c:6a:5b:b5:2b:43:86:6a:85:70:0a:db:c9:
                    98:e1:e7:19:97:6e:82:8d:a5:06:7f:eb:e4:ad:bc:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:82:B7:54:95:F5:55:F3:35:CD:75:A9:A3:31:30:28:71:92:AB:24
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3139302e382e3136382e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:16:a4:2f:71:bf:e9:38:49:8b:b6:d5:a7:cb:36:6e:93:28:
         c5:84:6f:fc:bf:be:67:52:cc:da:3f:bf:cd:f8:c3:b4:c0:f8:
         b5:a8:03:5a:23:28:36:8a:a9:26:0c:16:3d:ad:6f:c3:3b:c9:
         36:c8:49:6b:a4:33:92:96:3e:ce:51:96:00:84:27:81:39:c2:
         2f:92:dc:10:ac:3d:bc:c7:79:e9:6c:f6:76:4c:6a:1c:7f:02:
         4f:04:b5:af:ca:84:18:a9:3f:d7:03:93:b4:74:b4:8c:10:cc:
         35:2d:9b:4a:0a:3b:08:6c:a5:ce:5c:4d:27:73:8b:ae:4f:3f:
         36:eb:da:60:3e:4e:66:bc:43:1f:d6:47:ba:e2:1d:55:cf:37:
         4b:92:f8:86:5d:e9:42:3e:e3:e3:86:01:c5:29:85:eb:2b:69:
         a2:37:5e:14:86:a8:54:f9:69:a3:d9:88:52:e0:78:57:7f:1a:
         aa:e4:4b:5d:8b:cf:60:6d:a9:e0:e0:8b:2a:80:16:fa:4a:c4:
         5a:49:de:f0:6e:87:50:1d:8c:d1:9c:00:29:b6:64:45:56:cd:
         8e:7f:68:6a:2f:03:1d:70:b8:63:4b:f0:8e:88:0a:45:e2:08:
         e5:9a:25:c8:03:e5:95:51:6f:ca:5c:b1:b4:90:f8:ac:2c:ee:
         10:e8:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:04 2026 by rpki-client