This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e38362e302e302f31352d3234203d3e203134373534.roa
File:                     3139302e38362e302e302f31352d3234203d3e203134373534.roa (raw, json)
Hash identifier:          at8qv17G0kJ18Pd+yL/9CdixqmzqMi/gZcYE7SL9iTM=
Subject key identifier:   44:A5:F4:7A:0B:90:8A:0B:0A:82:63:2D:BA:25:00:E9:86:44:EA:E3
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       35BF6566B8AB748A27057E86BE8530C8606A20B4
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e38362e302e302f31352d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 18:59:24 +0000
ROA not before:           Tue 06 Jan 2026 18:54:24 +0000
ROA not after:            Tue 05 Jan 2027 18:59:24 +0000
asID:                     14754
IP address blocks:        190.86.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:65:66:b8:ab:74:8a:27:05:7e:86:be:85:30:c8:60:6a:20:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Jan  6 18:54:24 2026 GMT
            Not After : Jan  5 18:59:24 2027 GMT
        Subject: CN=44A5F47A0B908A0B0A82632DBA2500E98644EAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:67:15:49:99:e0:24:00:77:68:db:7f:6f:
                    09:4b:07:a6:e7:b0:99:cc:ab:ea:8a:7a:7a:5b:e6:
                    35:2e:ad:9e:d1:ca:9d:0d:99:5f:79:c3:06:19:58:
                    20:c3:33:c8:55:9c:f4:d8:48:b2:85:ff:ea:a4:d5:
                    72:dc:b3:82:41:0c:0d:60:8f:a7:7e:a0:93:86:86:
                    bf:d1:d4:6a:07:dd:8d:e3:64:de:68:b9:8c:61:fe:
                    36:fc:cc:94:ac:e1:98:85:10:c8:48:0a:53:37:43:
                    9d:11:55:58:34:db:e7:4d:e1:99:f0:67:98:8b:8c:
                    02:8b:bc:3c:13:1a:72:cb:51:69:da:13:9a:e5:5b:
                    77:eb:fb:96:c8:11:35:e2:2b:0d:8b:1d:7e:cb:a0:
                    1c:f4:35:3f:91:4d:ff:3a:e1:a5:20:c7:d4:92:c7:
                    de:a4:89:42:09:ad:06:f7:28:60:c3:e1:36:26:d3:
                    5c:2d:f9:87:bb:e8:19:69:43:70:45:7a:f7:99:32:
                    a7:02:93:49:ca:5e:04:05:fe:84:2b:ce:15:88:c7:
                    26:27:25:0b:80:00:06:4e:0c:6e:30:93:cc:9a:f4:
                    ff:15:6d:e9:f6:a6:7c:91:fa:77:05:2b:27:90:b9:
                    84:67:47:a2:0c:8b:41:b7:e3:46:ef:63:53:f3:0e:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A5:F4:7A:0B:90:8A:0B:0A:82:63:2D:BA:25:00:E9:86:44:EA:E3
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3139302e38362e302e302f31352d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         32:07:57:e6:20:31:01:d4:24:59:36:bc:11:fc:36:a9:75:98:
         f8:b5:cf:63:16:3c:46:03:51:64:95:3d:00:86:86:2d:52:2d:
         50:0b:51:3b:8d:b1:63:61:85:2c:3a:36:74:50:92:91:d1:85:
         9f:e7:89:39:22:13:ea:26:22:10:08:47:bf:59:0f:30:38:9f:
         03:31:75:d4:55:1c:3d:ff:15:36:26:95:cb:78:a1:12:7e:18:
         8f:64:73:31:68:4d:31:28:ec:d1:0d:1c:c0:c1:cb:2c:e7:5d:
         be:87:5d:66:7b:ed:e1:ce:8a:1c:da:ab:62:2d:8e:67:8e:b6:
         14:92:41:30:f4:cc:fa:8d:f9:00:d1:da:c3:12:14:87:2c:51:
         f2:47:44:9b:90:aa:5c:0c:17:8c:43:2a:f6:cf:b8:88:b6:fd:
         ad:e3:16:e7:7c:da:2c:de:82:d9:12:c5:96:c2:6c:a3:aa:53:
         d2:a5:a5:73:87:01:c1:c0:fd:a6:70:b5:78:a3:07:ca:20:82:
         5c:b1:6c:de:b0:ba:e5:da:a8:29:dd:9d:19:73:6a:fb:56:94:
         00:b9:cc:39:da:a6:27:29:78:a4:5e:8e:d2:e0:74:94:d2:77:
         12:50:31:d1:ad:ab:76:31:17:67:7d:bd:19:bf:5e:43:79:7b:
         a4:0f:61:99
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNb9lZrirdIonBX6GvoUwyGBqILQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAxNTc4OUUwQTlCMTJFRTFBODJDQjg1QTU5NDVERDlC
MzE4NTcyNTAeFw0yNjAxMDYxODU0MjRaFw0yNzAxMDUxODU5MjRaMDMxMTAvBgNV
BAMTKDQ0QTVGNDdBMEI5MDhBMEIwQTgyNjMyREJBMjUwMEU5ODY0NEVBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiGcVSZngJAB3aNt/bwlLB6bn
sJnMq+qKenpb5jUurZ7Ryp0NmV95wwYZWCDDM8hVnPTYSLKF/+qk1XLcs4JBDA1g
j6d+oJOGhr/R1GoH3Y3jZN5ouYxh/jb8zJSs4ZiFEMhIClM3Q50RVVg02+dN4Znw
Z5iLjAKLvDwTGnLLUWnaE5rlW3fr+5bIETXiKw2LHX7LoBz0NT+RTf864aUgx9SS
x96kiUIJrQb3KGDD4TYm01wt+Ye76BlpQ3BFeveZMqcCk0nKXgQF/oQrzhWIxyYn
JQuAAAZODG4wk8ya9P8Vben2pnyR+ncFKyeQuYRnR6IMi0G340bvY1PzDtwbAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQURKX0eguQigsKgmMtuiUA6YZE6uMwHwYDVR0j
BBgwFoAUIBV4ngqbEu4agsuFpZRd2bMYVyUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MjEwNThEMTc5Q0E1QzFDMDU2QzFCRjdCODJDOTI3QTVB
RkNCMUIxOTA5MUFENUNDN0RFMDFBNEQyQkEzM0I1LzAvMjAxNTc4OUUwQTlCMTJF
RTFBODJDQjg1QTU5NDVERDlCMzE4NTcyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMDE1Nzg5RTBBOUIxMkVFMUE4
MkNCODVBNTk0NUREOUIzMTg1NzI1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjIxMDU4RDE3OUNBNUMxQzA1NkMxQkY3QjgyQzkyN0E1QUZDQjFCMTkw
OTFBRDVDQzdERTAxQTREMkJBMzNCNS8wLzMxMzkzMDJlMzgzNjJlMzAyZTMwMmYz
MTM1MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBvlYwDQYJKoZI
hvcNAQELBQADggEBADIHV+YgMQHUJFk2vBH8Nql1mPi1z2MWPEYDUWSVPQCGhi1S
LVALUTuNsWNhhSw6NnRQkpHRhZ/niTkiE+omIhAIR79ZDzA4nwMxddRVHD3/FTYm
lct4oRJ+GI9kczFoTTEo7NENHMDByyznXb6HXWZ77eHOihzaq2ItjmeOthSSQTD0
zPqN+QDR2sMSFIcsUfJHRJuQqlwMF4xDKvbPuIi2/a3jFud82izegtkSxZbCbKOq
U9KlpXOHAcHA/aZwtXijB8ogglyxbN6wuuXaqCndnRlzavtWlAC5zDnapicpeKRe
jtLgdJTSdxJQMdGtq3YxF2d9vRm/XkN5e6QPYZk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:49 2026 by rpki-client