This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3139302e31342e3231362e302f32312d3234203d3e203237393330.roa
File:                     3139302e31342e3231362e302f32312d3234203d3e203237393330.roa (raw, json)
Hash identifier:          yDjlzph+5FIczyhesewNb/zzE570GBGftjWX4D6aB9c=
Subject key identifier:   20:E6:22:E0:61:08:2B:97:C5:43:69:C5:D8:BC:AF:F3:CF:26:63:4E
Certificate issuer:       /CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
Certificate serial:       0CB50F97E36566C88F74D7CA5E577773A4C63163
Authority key identifier: B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3139302e31342e3231362e302f32312d3234203d3e203237393330.roa
Signing time:             Tue 06 Jan 2026 19:02:33 +0000
ROA not before:           Tue 06 Jan 2026 18:57:33 +0000
ROA not after:            Tue 05 Jan 2027 19:02:33 +0000
asID:                     27930
IP address blocks:        190.14.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b5:0f:97:e3:65:66:c8:8f:74:d7:ca:5e:57:77:73:a4:c6:31:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
        Validity
            Not Before: Jan  6 18:57:33 2026 GMT
            Not After : Jan  5 19:02:33 2027 GMT
        Subject: CN=20E622E061082B97C54369C5D8BCAFF3CF26634E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:c3:b2:d2:8f:34:f3:32:1e:87:cd:d2:e8:
                    fd:3c:b1:7d:99:3a:bc:65:01:37:15:59:92:0b:56:
                    78:78:14:4e:92:83:ad:cc:80:b8:71:76:01:33:ec:
                    86:06:72:2e:ad:9f:84:81:66:01:23:84:e0:0f:b4:
                    58:6b:2d:a5:79:d9:94:d9:5a:45:6c:a9:10:a4:ce:
                    fe:53:31:3f:0f:85:ce:45:71:5e:e2:8c:63:39:cc:
                    24:bf:48:57:eb:84:87:b2:57:1d:e2:b1:56:53:e2:
                    04:fb:b1:b3:c7:ec:d2:b0:85:4c:29:b1:14:51:1e:
                    23:53:6d:8b:61:48:53:0e:c4:74:2c:38:a6:41:a1:
                    4e:28:41:8d:d3:ec:76:f8:a4:b5:21:cc:f8:ed:09:
                    27:a0:b3:98:c6:83:da:56:80:5c:20:75:fe:3a:4a:
                    22:72:07:ee:6b:ac:0e:43:b0:d6:45:be:68:dd:32:
                    3c:73:3b:55:38:07:09:5c:4e:06:eb:31:b2:a1:8c:
                    7c:0f:c8:d8:69:24:65:1d:b9:5d:aa:8a:15:88:4d:
                    69:88:78:8a:e5:92:7b:c7:14:9c:84:f4:92:75:47:
                    61:67:93:80:35:63:c3:eb:e0:4e:ed:f4:c4:ee:e4:
                    e3:6c:df:0d:e3:38:88:49:34:47:c2:69:b5:e3:b4:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:22:E0:61:08:2B:97:C5:43:69:C5:D8:BC:AF:F3:CF:26:63:4E
            X509v3 Authority Key Identifier:
                keyid:B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3139302e31342e3231362e302f32312d3234203d3e203237393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:56:a6:c1:f5:eb:bb:38:e0:ea:a7:6c:05:3c:6f:1a:b8:
         d5:94:d7:c8:52:db:74:96:f8:1b:95:8c:6f:71:4e:cc:9c:ed:
         b9:1f:fa:4a:58:3c:63:11:a1:1d:31:2b:f1:19:cf:18:fe:3b:
         00:75:07:d4:29:d1:6a:fc:ad:22:30:ea:d2:41:9c:07:5b:80:
         28:19:81:c8:fe:19:31:8e:bc:a3:5d:ff:ac:6b:c9:53:c4:cf:
         f3:7b:cd:ee:90:80:b6:12:8b:a4:ee:28:d1:cc:59:96:a1:88:
         9e:7d:6a:25:33:de:5e:91:63:1b:a0:3f:86:0c:6b:03:eb:ec:
         0b:70:5a:44:d0:2b:eb:3e:ad:c4:4b:ba:22:fd:5f:3d:f2:83:
         d2:59:c9:6f:ff:ea:f8:53:00:0d:94:a2:ce:12:bb:09:a8:16:
         61:fa:90:06:66:d7:78:c0:80:05:93:52:1f:f2:15:83:28:e0:
         1d:ee:4c:54:03:b1:14:ab:db:3f:b5:f0:0f:f0:1c:9d:66:7e:
         c0:86:fd:1d:bd:5b:d9:c9:7d:38:bc:27:7b:5a:c6:d1:26:ac:
         27:df:c2:3f:3a:7b:48:33:6e:51:e9:aa:5e:75:cc:56:ec:6d:
         5e:af:fe:b1:8f:d0:e9:e8:95:e8:61:08:07:a6:f8:16:81:83:
         0b:30:2f:04
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDLUPl+NlZsiPdNfKXld3c6TGMWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1MUM5Q0U3Q0UwRDRERUI2RDU5NEFDNDIzODQyRDM3
MjlBMDgwNzAeFw0yNjAxMDYxODU3MzNaFw0yNzAxMDUxOTAyMzNaMDMxMTAvBgNV
BAMTKDIwRTYyMkUwNjEwODJCOTdDNTQzNjlDNUQ4QkNBRkYzQ0YyNjYzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GcOy0o808zIeh83S6P08sX2Z
OrxlATcVWZILVnh4FE6Sg63MgLhxdgEz7IYGci6tn4SBZgEjhOAPtFhrLaV52ZTZ
WkVsqRCkzv5TMT8Phc5FcV7ijGM5zCS/SFfrhIeyVx3isVZT4gT7sbPH7NKwhUwp
sRRRHiNTbYthSFMOxHQsOKZBoU4oQY3T7Hb4pLUhzPjtCSegs5jGg9pWgFwgdf46
SiJyB+5rrA5DsNZFvmjdMjxzO1U4BwlcTgbrMbKhjHwPyNhpJGUduV2qihWITWmI
eIrlknvHFJyE9JJ1R2Fnk4A1Y8Pr4E7t9MTu5ONs3w3jOIhJNEfCabXjtI6TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIOYi4GEIK5fFQ2nF2Lyv888mY04wHwYDVR0j
BBgwFoAUs1HJznzg1N621ZSsQjhC03KaCAcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QTUzN0NFQzZDOTdGQUE1N0EyODVDMTk3ODM3MzlDQUUw
NzZBNEQ2MzIzMTQ2RDVFQjYzN0I5QUE3RUU1QzNGLzAvQjM1MUM5Q0U3Q0UwRDRE
RUI2RDU5NEFDNDIzODQyRDM3MjlBMDgwNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzUxQzlDRTdDRTBENERFQjZE
NTk0QUM0MjM4NDJEMzcyOUEwODA3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkE1MzdDRUM2Qzk3RkFBNTdBMjg1QzE5NzgzNzM5Q0FFMDc2QTRENjMy
MzE0NkQ1RUI2MzdCOUFBN0VFNUMzRi8wLzMxMzkzMDJlMzEzNDJlMzIzMTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM5MzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA74O2DAN
BgkqhkiG9w0BAQsFAAOCAQEADgtWpsH167s44OqnbAU8bxq41ZTXyFLbdJb4G5WM
b3FOzJztuR/6Slg8YxGhHTEr8RnPGP47AHUH1CnRavytIjDq0kGcB1uAKBmByP4Z
MY68o13/rGvJU8TP83vN7pCAthKLpO4o0cxZlqGInn1qJTPeXpFjG6A/hgxrA+vs
C3BaRNAr6z6txEu6Iv1fPfKD0lnJb//q+FMADZSizhK7CagWYfqQBmbXeMCABZNS
H/IVgyjgHe5MVAOxFKvbP7XwD/AcnWZ+wIb9Hb1b2cl9OLwne1rG0SasJ9/CPzp7
SDNuUemqXnXMVuxtXq/+sY/Q6eiV6GEIB6b4FoGDCzAvBA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:08 2026 by rpki-client