This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
File:                     3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          Md41Qo13yJMKASPGsawxO6+QFGJCGn8Q6iX2/kqtd3E=
Subject key identifier:   67:5C:92:43:7A:2C:53:04:9E:63:35:F5:C3:E9:97:F4:12:48:C6:80
Certificate issuer:       /CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
Certificate serial:       4226AF56D0B98286679C609A73589EBF07645900
Authority key identifier: 66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
Signing time:             Tue 06 Jan 2026 20:56:53 +0000
ROA not before:           Tue 06 Jan 2026 20:51:53 +0000
ROA not after:            Tue 05 Jan 2027 20:56:53 +0000
asID:                     201341
IP address blocks:        168.90.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:af:56:d0:b9:82:86:67:9c:60:9a:73:58:9e:bf:07:64:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
        Validity
            Not Before: Jan  6 20:51:53 2026 GMT
            Not After : Jan  5 20:56:53 2027 GMT
        Subject: CN=675C92437A2C53049E6335F5C3E997F41248C680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:19:cf:2f:7a:93:d5:11:51:21:61:d6:9b:
                    1e:8a:1d:1d:d6:c5:f9:4a:0b:2d:61:4e:3a:96:cb:
                    b9:e4:51:c3:5f:c9:a1:49:78:fc:90:0a:70:a9:f8:
                    c3:63:7c:90:64:58:45:26:a9:81:e4:99:b6:b5:92:
                    d2:dd:02:53:d3:a8:4b:28:bc:48:b6:e2:16:74:30:
                    0e:1d:ad:fa:c8:73:fc:04:e4:b0:f2:77:11:38:d8:
                    29:e7:c7:09:59:60:cd:7d:0c:6f:4d:75:55:c3:bf:
                    41:2b:03:39:e2:f0:f1:27:80:92:4e:29:e3:88:19:
                    c4:16:2b:ae:5d:3f:51:6c:1c:a9:99:94:85:b4:05:
                    81:49:a4:f0:f8:b2:0c:9f:c7:63:95:02:10:37:5c:
                    76:f3:43:79:23:94:26:bc:05:97:3d:6a:e7:3d:6d:
                    88:ec:02:63:37:dc:b2:d0:bc:de:c3:af:74:73:4a:
                    bb:6b:8d:fe:78:e1:78:4c:d4:81:c9:82:37:f1:9b:
                    73:0b:6b:f1:3c:55:bb:85:48:8d:32:88:72:8b:9c:
                    38:4f:e7:de:d8:c7:5c:44:bf:16:e2:fd:01:1c:7b:
                    79:59:29:4c:f2:69:59:a3:d3:07:76:12:f0:73:a0:
                    f1:78:ce:d1:9d:0e:12:19:ba:0c:4f:c7:43:b0:4e:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:92:43:7A:2C:53:04:9E:63:35:F5:C3:E9:97:F4:12:48:C6:80
            X509v3 Authority Key Identifier:
                keyid:66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:e7:43:2d:12:4c:44:5d:49:27:a5:24:ce:da:1a:63:dc:
         0c:6a:9d:b2:1d:e5:8b:21:20:dc:63:1f:73:4c:5d:ff:1a:df:
         b4:c3:9e:69:c5:6e:af:aa:42:54:91:2d:ce:58:f8:52:55:51:
         69:38:49:66:18:34:f4:97:7f:15:b1:f8:b5:00:ec:31:e7:51:
         e3:45:5c:88:d0:fc:c1:da:0f:da:ad:cd:d7:0a:85:2c:45:f4:
         bd:f1:b8:39:d0:2a:de:73:87:49:c2:14:c6:b9:34:fe:49:91:
         40:b8:48:7b:d1:26:08:ab:87:0e:a1:39:8e:3c:62:aa:2a:4d:
         bb:cb:73:65:b8:6b:a0:51:a6:c7:06:d0:06:69:3b:93:f6:ae:
         4f:84:f2:be:f2:e9:92:34:ad:30:06:d3:e8:49:fa:21:99:55:
         ce:e0:0c:44:6f:a8:82:59:8b:72:e7:08:de:51:ee:45:43:7b:
         09:6b:ee:ac:b2:00:22:23:b7:b1:e7:01:b8:2a:30:de:64:d9:
         1d:98:80:ee:34:65:de:2b:a1:79:de:d2:03:f4:6a:e4:a4:bc:
         a8:63:b3:bc:c5:5d:5b:8f:6d:99:0d:de:de:b4:27:cb:a0:08:
         0d:28:c8:ee:4d:2d:ad:78:e6:5c:4f:bb:ca:1a:a5:66:25:b0:
         cd:d0:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:30 2026 by rpki-client