This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3234203d3e20323635383136.roa
File:                     3139302e3131352e3230342e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          IEX6w9xIbC4x9iKoX+S8y/bac3BuwII8dQzGeeKbUfw=
Subject key identifier:   7A:39:62:14:70:97:3E:FD:12:FD:39:46:F3:58:C5:5F:7F:4A:19:4B
Certificate issuer:       /CN=EC27C662D29EC132420DF1988BEEFB42A76E37D2
Certificate serial:       0906D515AAA9AB3147C192FCFB658D111496E9F2
Authority key identifier: EC:27:C6:62:D2:9E:C1:32:42:0D:F1:98:8B:EE:FB:42:A7:6E:37:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 06 Jan 2026 18:57:25 +0000
ROA not before:           Tue 06 Jan 2026 18:52:25 +0000
ROA not after:            Tue 05 Jan 2027 18:57:25 +0000
asID:                     265816
IP address blocks:        190.115.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:d5:15:aa:a9:ab:31:47:c1:92:fc:fb:65:8d:11:14:96:e9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC27C662D29EC132420DF1988BEEFB42A76E37D2
        Validity
            Not Before: Jan  6 18:52:25 2026 GMT
            Not After : Jan  5 18:57:25 2027 GMT
        Subject: CN=7A39621470973EFD12FD3946F358C55F7F4A194B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:5b:0a:ed:68:6d:7b:30:b2:4a:d2:41:61:
                    b6:3c:e2:34:d5:9f:5c:c3:da:c9:47:56:fb:f8:a9:
                    6f:5d:57:2c:b2:73:3f:35:2c:84:83:7d:76:68:3a:
                    1c:17:e8:72:a9:c0:e9:20:6c:2c:eb:09:bc:4d:1e:
                    d2:4d:b9:9b:38:52:a1:95:f5:ed:75:6c:a1:72:26:
                    91:f1:9a:c9:fa:67:23:0f:a3:46:95:f6:05:19:2e:
                    69:ca:94:2a:ec:78:fd:f4:07:47:bc:d7:6d:18:0b:
                    71:b1:68:aa:0a:8b:54:64:46:fe:f8:bc:bd:d0:87:
                    e0:b4:fa:3d:17:4f:c8:56:9c:70:af:27:3b:8b:30:
                    65:d6:7b:e7:4e:60:1d:6e:84:32:84:11:f5:01:bf:
                    b4:3a:44:d7:e9:64:c1:f0:20:50:80:32:32:3e:06:
                    00:6c:ba:46:49:a9:71:e9:94:65:a8:b5:bb:48:c5:
                    eb:2b:e0:a6:ca:f5:05:46:89:5d:e8:ef:15:7d:36:
                    c1:8b:fd:3d:37:ec:67:2d:dc:b0:64:68:b9:26:c6:
                    0b:3e:60:e6:bc:68:4b:ab:b3:84:15:fb:46:20:d0:
                    e5:98:eb:b7:72:f2:30:44:c4:af:03:23:b8:43:d6:
                    1f:7e:67:63:70:3e:75:fb:5b:3a:ef:fd:f9:9f:4e:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:39:62:14:70:97:3E:FD:12:FD:39:46:F3:58:C5:5F:7F:4A:19:4B
            X509v3 Authority Key Identifier:
                keyid:EC:27:C6:62:D2:9E:C1:32:42:0D:F1:98:8B:EE:FB:42:A7:6E:37:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC27C662D29EC132420DF1988BEEFB42A76E37D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8625B12B6FFC4BC6CAF0D6073C6BC97FEA3D854DEF3239801904BB5B0AFC73DA/0/3139302e3131352e3230342e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:64:64:13:4e:b2:4e:20:02:5e:d3:cb:2f:fb:88:51:e8:
         67:b2:d4:1d:e6:e3:5c:f6:9b:3b:5a:9a:d0:4a:04:ca:05:f0:
         7f:c9:a2:05:4f:a6:1c:28:53:76:1a:d2:cc:34:97:6a:e6:0c:
         a2:9c:b9:f3:28:79:c0:7b:6a:21:5e:6f:5b:ba:75:7d:e2:da:
         9f:76:28:a9:2b:55:2a:10:6e:1b:73:01:07:0f:11:f7:9b:88:
         9b:c0:70:d0:bf:6d:b4:75:f3:e5:3a:8c:f1:b8:ea:e9:a5:7a:
         f3:24:5a:9b:6b:8e:16:6a:4b:e4:b4:22:92:79:ec:ff:69:a4:
         2e:06:fd:cc:65:67:43:fa:47:15:4a:6b:21:ac:cc:de:bf:79:
         c1:e0:b9:d8:0e:da:75:51:db:d0:7d:00:85:7a:31:e0:64:d4:
         73:a3:58:3d:d9:32:05:61:ec:f3:9b:c1:d1:dc:f1:57:e5:96:
         47:4e:81:7c:80:47:f4:56:6b:73:f4:40:88:ba:97:60:52:2c:
         ba:af:81:01:a1:42:03:f3:03:9d:fe:d2:f4:68:d8:24:f9:ec:
         3b:32:27:dc:bc:e9:59:7d:01:55:c8:09:40:e0:c2:90:cf:8b:
         f0:74:89:26:1b:29:52:12:59:6c:45:2c:55:5d:c6:75:ba:72:
         04:4f:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:20 2026 by rpki-client