This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/3139302e3130332e3138342e302f32322d3234203d3e203230303830.roa
File:                     3139302e3130332e3138342e302f32322d3234203d3e203230303830.roa (raw, json)
Hash identifier:          KzuacBjl5pnKHkhgmIox7gzF7ZVAJg+v8QzPCF7OC9k=
Subject key identifier:   41:29:2A:68:AC:A2:EA:62:3D:9F:BD:3C:BB:94:7E:6E:6A:B5:14:F7
Certificate issuer:       /CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
Certificate serial:       6E892CFA9BE0F10FB1216AB2060C6389CE72FE10
Authority key identifier: 6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/3139302e3130332e3138342e302f32322d3234203d3e203230303830.roa
Signing time:             Tue 06 Jan 2026 19:19:16 +0000
ROA not before:           Tue 06 Jan 2026 19:14:16 +0000
ROA not after:            Tue 05 Jan 2027 19:19:16 +0000
asID:                     20080
IP address blocks:        190.103.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:2c:fa:9b:e0:f1:0f:b1:21:6a:b2:06:0c:63:89:ce:72:fe:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A595D7CA88F85E87BEC621A6A251A58F6E89C5B
        Validity
            Not Before: Jan  6 19:14:16 2026 GMT
            Not After : Jan  5 19:19:16 2027 GMT
        Subject: CN=41292A68ACA2EA623D9FBD3CBB947E6E6AB514F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:df:26:fa:9d:8f:27:35:50:8d:70:0d:01:
                    92:bb:9b:f1:f2:68:37:3b:68:29:7f:53:bf:64:bc:
                    52:9f:48:8a:84:80:ac:ec:c9:e7:9d:be:78:fd:43:
                    0d:38:d9:44:57:5c:3a:0e:55:9f:38:79:27:f8:8e:
                    ca:bf:c6:c5:d8:08:00:fd:0e:27:eb:03:58:df:a9:
                    b4:5b:29:03:3d:ef:4d:69:7a:fe:bf:40:f7:9a:a3:
                    63:e6:cf:68:03:81:53:cb:30:72:76:ff:f0:c9:88:
                    d0:31:1d:9f:37:da:68:fe:91:22:c8:ba:4f:cd:16:
                    b2:9f:0e:ac:ad:be:58:ac:cb:0d:c0:e2:92:7e:a3:
                    1e:43:d6:28:9b:14:2d:ad:07:cb:56:ae:ab:0d:af:
                    2f:06:dd:77:40:76:32:d3:8c:3d:30:20:3f:23:74:
                    4a:1e:40:46:57:72:d2:e1:8a:87:2f:78:69:06:45:
                    4d:49:f3:0b:b1:d4:fd:7d:56:db:c7:9c:fa:d4:24:
                    e9:14:5b:b6:9b:bc:ce:5c:70:9c:c3:1b:97:ad:fb:
                    f9:e0:a2:07:ad:ba:31:35:da:c4:b1:5c:a7:9f:9a:
                    26:11:57:d5:0b:07:37:4e:70:17:f3:83:a8:4b:53:
                    b2:6c:85:f1:38:04:19:97:f3:72:eb:1d:71:90:da:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:29:2A:68:AC:A2:EA:62:3D:9F:BD:3C:BB:94:7E:6E:6A:B5:14:F7
            X509v3 Authority Key Identifier:
                keyid:6A:59:5D:7C:A8:8F:85:E8:7B:EC:62:1A:6A:25:1A:58:F6:E8:9C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A595D7CA88F85E87BEC621A6A251A58F6E89C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EC95A041742B0CD8452FCDCEDC4414C068DACCCB743C751F6D783B67CFBC85E/0/3139302e3130332e3138342e302f32322d3234203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:db:03:da:17:8b:ec:55:1c:b1:5e:e5:fa:6f:fc:4b:b3:
         cb:b7:8a:a8:b3:4d:91:c7:92:eb:38:73:84:17:d3:cf:02:1b:
         98:3e:9c:ad:3c:0c:91:c6:f7:bb:e4:da:38:b7:98:87:0b:e4:
         37:5f:92:ac:1d:c7:a2:5b:e2:db:36:0a:63:78:49:af:c4:c4:
         fd:69:da:5e:f9:23:e3:35:68:8f:c3:e5:24:02:7b:d6:47:fb:
         64:23:ad:2c:bc:ce:db:a0:7b:3c:d0:75:93:4a:85:f8:b1:99:
         f4:f7:50:27:17:b3:5f:9d:9a:66:a2:30:e4:e3:fa:8b:8f:68:
         5f:25:f2:d2:09:7b:4d:50:b7:10:08:f5:92:95:a5:de:9a:71:
         e6:8d:af:41:db:b8:21:cc:60:10:03:dd:0d:67:a1:c7:aa:30:
         30:db:43:d0:a2:5a:c1:8e:51:e0:b1:ff:b0:5e:cc:31:ba:9c:
         be:6f:98:15:0b:9b:e7:c6:54:f1:71:f8:da:1c:2e:71:b7:0c:
         f0:4c:da:db:79:a1:0d:5b:f5:06:bf:82:42:f9:10:6f:d6:e2:
         1f:e2:30:52:f6:da:72:16:3f:2b:e9:84:2c:16:77:6a:f9:19:
         ef:f3:c7:09:df:2e:48:e5:af:79:d5:c3:8f:67:0d:44:b2:66:
         c4:04:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:19 2026 by rpki-client