This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37332e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          BeRyj1Q+Im3bzpELuWjDN+gQaKsedBvWGe8PgLaqSZQ=
Subject key identifier:   02:8E:07:BC:80:FC:69:56:34:42:52:DB:A8:73:5E:3D:E5:E3:A0:53
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       209E5F2530F4FC6909491DB87D7E864059E9407A
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 06 Jan 2026 19:10:27 +0000
ROA not before:           Tue 06 Jan 2026 19:05:27 +0000
ROA not after:            Tue 05 Jan 2027 19:10:27 +0000
asID:                     52493
IP address blocks:        168.90.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9e:5f:25:30:f4:fc:69:09:49:1d:b8:7d:7e:86:40:59:e9:40:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Jan  6 19:05:27 2026 GMT
            Not After : Jan  5 19:10:27 2027 GMT
        Subject: CN=028E07BC80FC6956344252DBA8735E3DE5E3A053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:6b:ef:1a:22:82:08:45:35:06:1f:74:00:
                    41:a3:9a:e3:e0:6d:64:d1:06:3c:18:a8:25:95:e8:
                    1a:27:30:4b:84:3c:03:33:39:e0:36:ae:5a:57:55:
                    2c:31:5b:e5:dd:31:3b:89:4d:fb:6d:e0:11:f9:e0:
                    d3:e9:22:ad:2c:ae:31:f2:68:3d:8f:1b:6f:dc:da:
                    d7:60:93:ab:41:d6:19:cd:74:9e:94:9a:8a:7d:d2:
                    64:df:79:05:83:ef:2a:23:8b:4e:b8:ba:aa:b2:c3:
                    d4:22:6d:80:7e:8a:15:cc:b0:da:29:c5:b1:a2:53:
                    fd:2a:18:91:70:e9:5b:df:21:49:a5:6a:a1:44:72:
                    7d:09:ff:a5:a6:e4:6a:46:38:0e:8f:37:3c:3a:d6:
                    62:de:f7:d4:9a:82:80:c5:9f:6f:8d:27:54:41:71:
                    3e:69:4e:cb:e2:ae:14:dc:eb:84:36:76:54:a9:b8:
                    7e:d4:e5:5c:38:e4:3f:76:9d:0d:eb:71:f9:b6:44:
                    89:c6:2f:b8:d7:5f:d0:8e:1f:b0:5f:d1:ee:64:ca:
                    fb:ce:38:d1:7d:57:fb:2d:6a:39:df:9a:84:68:f1:
                    cf:48:59:b6:6f:96:61:36:6a:14:34:3f:8a:ae:e1:
                    cb:c7:3d:21:df:93:48:eb:11:0e:d9:11:cf:02:0d:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:07:BC:80:FC:69:56:34:42:52:DB:A8:73:5E:3D:E5:E3:A0:53
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:95:a5:e6:64:ff:af:01:27:f1:da:a0:41:f5:75:1e:bc:
         76:83:1d:f4:8c:cf:5c:29:c8:99:12:d9:5d:fb:7e:91:27:04:
         1d:87:8e:73:5e:9f:3a:61:a8:62:5b:df:6d:82:4b:4e:56:f4:
         cd:71:17:c0:58:a8:9a:28:02:73:33:37:1b:02:6b:83:39:7c:
         29:d9:4b:8a:da:f0:79:98:82:70:62:7f:c5:6a:40:18:3a:da:
         b3:39:b6:63:3a:15:1a:1f:b9:56:a3:8b:30:95:8c:b0:2b:89:
         72:22:4b:f3:73:99:e6:e3:dc:bc:4e:15:cc:7a:d7:5a:df:c9:
         1e:76:c6:1a:2b:e4:fe:28:da:fe:98:34:67:a0:8e:79:ad:d2:
         90:10:5a:59:f1:ad:12:cb:c9:0a:10:8f:4c:bb:8e:95:f4:fc:
         b0:4c:87:6e:63:58:15:bb:2f:d0:7c:8a:92:10:d0:a7:95:8d:
         f6:cb:ec:49:67:3f:95:f0:34:c3:ae:b9:ba:eb:ef:5c:cf:a9:
         51:f2:97:e5:39:1b:74:b8:c4:b7:c9:46:50:38:b7:43:71:85:
         d8:80:52:e4:3b:43:fe:ea:a0:c7:3b:99:73:3b:f5:d8:c2:c7:
         72:97:10:19:2d:b7:b5:a8:0f:77:29:cc:8d:ce:e4:ca:cc:b2:
         4e:e7:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:48 2026 by rpki-client