This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa
File:                     3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          SX2UTcGcvhDBdEmjRMU0kok2GrWcfnMy5D9QxqcPNes=
Subject key identifier:   75:BD:E1:C8:16:70:31:1B:8B:21:D2:86:C0:43:9B:96:C3:CF:DD:DE
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       05648B9E82A077481F623AED2F8EA284036BEC66
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:20:54 +0000
ROA not before:           Tue 06 Jan 2026 19:15:54 +0000
ROA not after:            Tue 05 Jan 2027 19:20:54 +0000
asID:                     23243
IP address blocks:        190.106.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:64:8b:9e:82:a0:77:48:1f:62:3a:ed:2f:8e:a2:84:03:6b:ec:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:54 2026 GMT
            Not After : Jan  5 19:20:54 2027 GMT
        Subject: CN=75BDE1C81670311B8B21D286C0439B96C3CFDDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:f2:82:2e:98:86:12:6f:ea:e1:7b:55:f9:
                    d2:6d:4f:7e:37:a9:8e:4b:b3:4d:f2:e5:78:05:89:
                    a8:d9:b8:64:6a:b2:d4:6b:f8:a8:80:34:06:a8:ee:
                    2f:29:d0:c9:a7:0b:8f:68:25:f0:34:6f:b5:3a:5c:
                    a3:f0:7e:9d:00:3b:f2:8f:99:52:6e:f8:25:57:a4:
                    53:d9:9f:53:98:df:69:f2:d7:e2:47:6a:b0:c8:16:
                    30:cd:8c:df:d0:50:4c:1b:b8:e8:11:a0:7d:48:8d:
                    ba:78:46:2d:97:fa:23:f5:24:2c:1e:93:81:68:5d:
                    29:1d:00:6a:86:09:e1:9b:7c:c9:9d:d2:3e:10:6d:
                    e0:32:21:43:c0:78:eb:97:03:71:56:4a:f1:63:ad:
                    f4:5b:8d:56:42:42:68:c5:da:44:7a:da:82:3d:2f:
                    8b:00:4a:b3:5b:8c:84:fb:8d:5f:92:ad:64:bb:8b:
                    ec:eb:99:67:18:0b:69:52:da:f6:80:e4:c0:62:c2:
                    1a:37:fe:88:3d:e8:8a:82:85:c6:2b:58:da:6e:61:
                    4f:3b:37:da:18:27:b7:f7:08:50:25:96:db:2d:5f:
                    13:ee:e0:7e:1e:50:93:14:ce:aa:1d:be:8e:ea:50:
                    b2:da:ca:62:cd:8a:66:ca:7e:26:3b:96:9a:68:59:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BD:E1:C8:16:70:31:1B:8B:21:D2:86:C0:43:9B:96:C3:CF:DD:DE
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139342e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:2f:e5:d4:26:70:cf:f6:6a:6a:f1:9c:a1:a1:30:18:b5:
         ae:90:18:fd:cd:9d:fe:6a:0f:20:53:f0:95:ed:41:45:a4:82:
         2a:68:76:1c:b3:e7:af:5d:41:cd:7c:24:52:8c:82:84:7d:23:
         b3:a3:2b:d3:23:97:cd:64:d0:d9:75:61:60:51:98:d0:c2:fe:
         e4:63:70:50:43:1e:e4:2c:65:4f:95:d5:55:fe:35:2f:67:7b:
         9d:9b:f1:73:57:ed:c5:fd:e9:7a:d4:70:03:72:1e:4c:61:84:
         1b:b1:10:77:ae:13:1b:03:03:7f:bb:42:b3:df:f9:93:c2:af:
         ba:82:a2:0d:ed:ee:60:91:cb:b1:81:6a:47:96:7d:09:60:cf:
         0b:96:08:8a:b5:8b:3c:89:e2:44:23:58:63:da:4f:db:2b:60:
         ff:c5:ea:8e:77:d0:3e:a5:0e:d3:e0:59:f6:c3:27:6a:56:8b:
         0c:d6:fd:d5:da:83:29:c8:bb:53:ec:4a:6b:fa:b4:3e:68:a6:
         98:80:86:c3:aa:90:97:1d:ea:f2:c5:d8:ee:77:4a:69:de:59:
         57:cd:31:f2:42:d4:fc:22:6b:89:93:61:61:2b:f5:76:85:cf:
         17:ae:f7:03:ec:02:17:90:68:f1:26:9e:d6:a9:66:b7:2a:b0:
         37:9e:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:56:51 2026 by rpki-client