This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
File:                     3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa (raw, json)
Hash identifier:          PxK3+FhAteBBQKONoqfbr164Ts/2irqsUsq1pRYse8o=
Subject key identifier:   FB:8C:FA:87:FC:0D:6D:12:88:D0:86:44:B0:94:E8:69:EF:FE:43:4B
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       6D87CD0065A84E68BF1ABF7C8B65DEF3A488894E
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
Signing time:             Tue 06 Jan 2026 19:21:29 +0000
ROA not before:           Tue 06 Jan 2026 19:16:29 +0000
ROA not after:            Tue 05 Jan 2027 19:21:29 +0000
asID:                     263769
IP address blocks:        168.90.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:87:cd:00:65:a8:4e:68:bf:1a:bf:7c:8b:65:de:f3:a4:88:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Jan  6 19:16:29 2026 GMT
            Not After : Jan  5 19:21:29 2027 GMT
        Subject: CN=FB8CFA87FC0D6D1288D08644B094E869EFFE434B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:dd:76:83:d6:7c:10:30:6f:cd:54:fd:7f:
                    b4:d9:89:d6:06:e2:47:07:fe:c3:44:ae:09:e2:06:
                    49:a8:6d:26:12:2b:02:5e:e3:1d:17:ce:6a:74:01:
                    3d:3b:f8:36:bc:40:25:fa:71:76:b1:6d:c4:00:7c:
                    08:f4:ba:51:ae:fc:54:09:a6:02:42:da:b9:ee:3c:
                    18:93:5e:18:3e:18:d5:43:3f:b5:32:3f:28:74:bc:
                    13:58:dd:f4:f8:8b:bb:e2:6b:23:70:93:7d:42:df:
                    fd:3e:96:a7:53:5b:75:24:62:8b:30:e1:1e:5e:74:
                    9e:fd:88:e8:3d:b0:d8:9a:20:cc:d9:e5:19:b8:ff:
                    7d:18:98:95:5c:65:5a:12:53:87:c5:86:f4:2b:f5:
                    73:80:38:31:7d:de:55:06:a8:49:98:1a:c8:85:91:
                    51:20:db:24:42:a1:0e:01:60:54:e7:f2:68:21:22:
                    a4:89:84:99:cc:aa:f5:e0:9e:cf:49:ab:43:91:d2:
                    82:62:36:d8:54:c2:d5:97:f9:39:2c:85:e6:2e:dd:
                    0b:3a:8b:32:da:74:7f:ed:fe:58:11:82:7e:73:0b:
                    a3:50:0d:d7:66:8a:25:df:82:3d:50:b9:77:22:0e:
                    f3:d6:e2:39:48:9e:eb:c4:2f:e7:65:87:3b:c5:99:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:FA:87:FC:0D:6D:12:88:D0:86:44:B0:94:E8:69:EF:FE:43:4B
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:03:97:20:9b:a2:12:74:4c:1f:e4:c6:2a:6b:21:5e:ef:
         93:b2:10:97:88:30:07:08:c2:a4:58:a1:d9:ae:d5:c5:41:42:
         80:02:a6:15:6e:fe:96:dd:9b:f8:89:d5:69:c1:f3:17:ae:45:
         51:5b:4a:e0:c0:fe:bd:0b:bb:2d:9b:d8:a8:ad:2d:a8:76:69:
         ed:78:91:5e:57:b4:de:99:ba:2b:75:3b:8b:15:6d:6d:36:76:
         a1:e0:25:5c:91:26:53:40:47:4b:b3:35:fb:49:fd:ce:d9:ef:
         26:26:6c:96:91:0b:59:4f:ec:12:25:cb:2e:87:6e:a9:2b:32:
         47:36:61:85:b3:a1:8e:77:f9:09:60:0c:07:eb:7f:f2:d1:a0:
         f5:a3:b7:ea:36:dc:8d:c9:14:3a:d4:b2:90:f4:18:ad:29:5c:
         99:9b:81:57:da:e0:01:2f:32:74:cc:0c:c3:3b:df:71:52:bc:
         93:a2:c0:92:2e:40:61:9d:2a:2b:81:19:89:ca:3a:ab:fd:f6:
         3f:8b:1f:69:e7:8a:42:e9:c7:f2:3c:cc:53:f7:89:9d:fe:fe:
         2f:b6:e4:ee:69:83:d4:0b:2f:fa:c8:85:61:7e:ed:15:aa:c4:
         cb:16:34:67:a3:74:53:39:82:a5:97:cf:32:c1:82:e6:99:52:
         ce:10:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:00 2026 by rpki-client