This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
File:                     3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          /WKTTSLIDHKutRBox1QUvqKhzwW95ECCJgr/WZfEJDc=
Subject key identifier:   8C:CC:D1:A0:EB:54:04:4F:DC:F8:57:33:C0:F2:44:CF:D2:02:69:F0
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       5110B41477F2F3CE3E85F0AFFBB0974AAE5201AC
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 18:57:34 +0000
ROA not before:           Tue 06 Jan 2026 18:52:34 +0000
ROA not after:            Tue 05 Jan 2027 18:57:34 +0000
asID:                     262589
IP address blocks:        190.211.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:10:b4:14:77:f2:f3:ce:3e:85:f0:af:fb:b0:97:4a:ae:52:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Jan  6 18:52:34 2026 GMT
            Not After : Jan  5 18:57:34 2027 GMT
        Subject: CN=8CCCD1A0EB54044FDCF85733C0F244CFD20269F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:4d:91:c8:07:ff:a3:99:8e:f9:a4:90:b5:
                    41:64:28:27:d8:62:c3:1d:23:55:e0:1d:7e:7b:fb:
                    ed:07:93:83:a9:5f:3b:2d:bf:d7:c3:3d:57:b2:de:
                    10:0e:67:27:5a:44:10:f2:b6:43:23:73:21:fd:c0:
                    8b:37:9f:b1:94:2d:b9:b6:f5:20:c7:fe:d9:c7:7c:
                    31:3d:5a:69:8b:fa:e2:14:c6:64:c4:43:c4:f2:db:
                    da:e0:74:9f:00:d4:02:c4:d0:36:ba:36:e7:0e:d4:
                    fe:5e:4d:8e:94:4b:14:a0:65:51:b6:47:a8:25:a8:
                    ed:7f:be:f2:cb:bb:c2:68:50:61:2f:4d:da:eb:f2:
                    b1:08:de:3a:7f:23:95:b2:19:57:71:e6:77:90:b8:
                    a0:74:0c:2e:a5:84:8c:f9:af:75:8d:fc:41:f2:5c:
                    a7:bc:4e:c9:76:02:a6:d8:2a:ec:5a:35:9f:81:fa:
                    4a:61:c4:18:f0:69:b0:08:48:22:75:35:5e:b1:c5:
                    25:15:9b:50:6b:22:51:b6:04:f3:60:a5:1e:62:4d:
                    a0:36:a0:f5:f5:4d:14:ae:b5:22:a5:ce:47:a8:9e:
                    ee:08:b2:91:9e:00:ef:2a:24:da:09:13:2c:61:d2:
                    d1:ee:5f:c5:84:a8:9f:d1:38:24:be:8b:08:73:be:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CC:D1:A0:EB:54:04:4F:DC:F8:57:33:C0:F2:44:CF:D2:02:69:F0
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136382e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:32:4b:82:8d:8c:02:5a:62:f1:b6:c0:0f:ad:14:41:21:f8:
         75:22:fb:97:36:c1:ef:c5:f4:57:f4:74:a8:65:38:33:dc:8d:
         7f:4e:7a:56:70:6d:a5:9d:c5:96:ae:82:32:35:92:b7:0c:19:
         65:f4:52:8b:3f:ab:a0:36:dd:8b:c7:87:60:4d:0c:91:ef:d5:
         74:13:89:34:07:01:75:08:19:59:9a:b1:f3:c6:0a:c5:37:e2:
         6b:f3:f8:5f:42:9f:70:fd:e5:c9:bf:c1:e4:14:1a:75:4b:61:
         59:10:32:f0:34:ef:09:88:01:ba:58:3d:e6:6b:33:ef:81:43:
         22:01:47:d0:26:22:91:ff:72:a0:18:2a:15:3d:e5:b8:e8:a7:
         5b:a8:98:83:fe:78:eb:56:aa:a7:e2:18:ce:27:7a:13:0d:7d:
         41:32:01:de:f2:f2:27:b0:ba:33:65:32:97:90:12:a0:cf:27:
         b8:c7:a3:45:04:2f:39:f5:cf:e5:91:91:e5:6d:dc:d5:5e:57:
         30:ed:e2:79:a7:66:78:1b:2a:8a:7b:15:59:23:27:54:5e:c7:
         7c:e2:d6:65:b1:41:66:98:89:3e:cf:2b:68:ee:61:d9:44:e5:
         a9:6a:bb:b2:c2:20:07:6f:c9:6f:83:d3:1e:52:d3:80:65:0e:
         92:5d:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:40 2026 by rpki-client