This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa
File:                     3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier:          nLo28g1oEYH9L+3K6gnvYdD7i+rR2xwkbW94QQCVo48=
Subject key identifier:   E8:AE:59:70:D9:68:55:20:3E:F7:8C:2A:91:0B:41:A8:D6:0D:69:13
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       28C134B5F7FA21C1C41969711394F91CF514F217
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa
Signing time:             Tue 06 Jan 2026 19:42:02 +0000
ROA not before:           Tue 06 Jan 2026 19:37:02 +0000
ROA not after:            Tue 05 Jan 2027 19:42:02 +0000
asID:                     52268
IP address blocks:        190.113.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c1:34:b5:f7:fa:21:c1:c4:19:69:71:13:94:f9:1c:f5:14:f2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Jan  6 19:37:02 2026 GMT
            Not After : Jan  5 19:42:02 2027 GMT
        Subject: CN=E8AE5970D96855203EF78C2A910B41A8D60D6913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:51:ab:ed:50:3a:f0:42:a6:8c:cb:b0:4d:
                    1e:07:6e:a8:2b:73:bb:e3:96:90:f5:21:5f:8d:29:
                    2f:28:3d:83:4f:38:33:a3:e1:ed:88:93:6f:7c:30:
                    b0:00:b0:4f:b7:39:db:c0:36:a7:8b:2f:88:96:50:
                    ad:73:b4:c3:90:4d:11:2f:66:35:85:b2:2a:82:94:
                    f0:cb:4c:8e:ec:b8:f0:cc:ad:e5:dc:6c:b6:54:5c:
                    4d:87:73:57:94:83:9a:d3:de:ad:ec:11:f0:f2:d9:
                    4d:b8:72:7a:54:60:76:bc:c9:ef:0d:13:4e:69:4c:
                    50:55:3d:f6:60:de:45:38:e0:30:cf:d8:7d:e8:ea:
                    87:e2:f8:9d:d1:85:c5:df:96:f3:f1:ec:45:19:90:
                    e5:93:c8:86:4b:b4:00:8c:f8:d6:c1:5f:bd:ea:ab:
                    c2:ba:84:e3:d7:e8:b0:0e:da:44:90:33:4d:55:b5:
                    01:49:0a:f5:ff:fe:98:94:51:c2:74:38:7c:ac:6c:
                    b1:3d:fc:52:d2:e7:6e:15:b0:ac:5d:bf:15:50:11:
                    32:5d:62:a8:92:17:49:fe:2d:d9:87:22:bd:34:e6:
                    98:dd:c5:03:db:61:d0:ad:a3:0f:37:91:09:a6:f8:
                    ee:10:15:fb:83:65:21:62:e9:92:b4:24:27:3c:73:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:59:70:D9:68:55:20:3E:F7:8C:2A:91:0B:41:A8:D6:0D:69:13
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131332e3233362e302f32322d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:95:4a:1b:5a:fe:43:e6:a2:e9:61:5e:fa:a1:07:ae:c6:ed:
         fe:d8:2c:f9:53:69:84:09:70:6b:a9:6b:9b:a7:00:84:64:69:
         6f:d7:06:0c:f6:cf:f9:72:19:5d:b2:96:9c:0e:9d:ea:a4:82:
         a3:15:8f:79:a8:b3:a4:28:2b:19:23:53:be:4b:5f:d0:80:6a:
         ab:c0:7c:41:8a:b0:54:96:49:0b:fb:3b:d2:96:a6:b3:20:99:
         48:9c:07:ee:51:4b:5d:db:c4:db:92:26:7e:3f:73:1e:3c:4a:
         12:e0:29:35:85:0c:27:dd:3c:15:72:86:c4:fe:e3:48:a1:79:
         ac:b0:b7:01:a1:13:55:18:2c:7c:4f:cc:b2:fe:3f:2b:f0:b4:
         e3:b9:2f:ee:6f:7d:d0:78:24:b4:c6:84:7c:93:70:2e:09:dd:
         63:24:63:39:e1:2a:82:a6:4d:33:4f:f6:6e:e9:2a:d1:00:2f:
         53:8b:5a:be:aa:b6:e4:fa:3e:03:fb:4c:1f:c1:37:01:37:be:
         85:3e:33:98:ca:0b:1c:ef:35:3d:83:e2:48:1c:03:c1:4a:89:
         17:57:c5:82:5a:43:26:14:68:38:b1:55:b1:c8:1f:c0:07:95:
         f9:8f:3f:c1:b4:7b:a8:49:9d:07:6e:a1:8d:74:13:d0:cd:2c:
         05:ba:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:55 2026 by rpki-client