This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32322d3232203d3e203532333238.roa
File:                     3139302e3231312e36382e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          MSOqRMvlbJWO2eUd4loa770B1rP7jPfCzwwS/NrcAcs=
Subject key identifier:   B3:E1:AD:6E:D3:0F:39:76:E2:F8:BC:42:EB:43:3F:07:ED:CF:2A:80
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       08E0FC523D8F0A7ED404BB2CBF9638B484D6429C
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:50 +0000
ROA not before:           Tue 06 Jan 2026 19:07:50 +0000
ROA not after:            Tue 05 Jan 2027 19:12:50 +0000
asID:                     52328
IP address blocks:        190.211.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e0:fc:52:3d:8f:0a:7e:d4:04:bb:2c:bf:96:38:b4:84:d6:42:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:50 2026 GMT
            Not After : Jan  5 19:12:50 2027 GMT
        Subject: CN=B3E1AD6ED30F3976E2F8BC42EB433F07EDCF2A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:62:7a:73:63:b8:46:e9:87:87:52:72:a9:
                    fb:3d:69:e7:0c:ca:20:04:80:9a:85:83:e8:e5:01:
                    fe:8d:db:78:95:46:68:53:26:49:c9:3b:24:b9:c8:
                    8e:9d:1d:bb:21:4c:1c:ce:cf:d9:8b:8a:cc:b7:ad:
                    6c:c2:bd:5c:db:85:c7:37:10:1f:4b:71:4f:df:8d:
                    fd:d4:4e:10:ab:0b:d9:69:4f:00:e1:02:2f:fb:10:
                    62:f4:04:1e:f4:22:33:a8:74:b4:83:eb:d5:a1:52:
                    6a:5b:6e:32:33:a9:00:91:42:33:d6:3d:4b:81:3d:
                    e2:b4:ad:3c:bc:80:1f:d6:c3:15:b6:a9:7c:7b:2b:
                    cd:16:9a:9c:77:51:50:cb:b6:0a:05:8b:6e:16:62:
                    a8:03:7f:a9:02:c4:95:db:b8:e1:d1:f8:dc:ee:0b:
                    9d:4a:54:3c:44:cb:c2:6b:55:13:d0:6a:e8:1b:eb:
                    14:f9:5c:9a:cc:5e:74:52:a9:e8:71:64:8a:51:ae:
                    40:d4:8c:f1:5d:03:b0:1d:4a:0e:48:a9:a8:cb:47:
                    74:9d:68:52:55:44:e5:85:0f:1a:df:4b:77:b3:da:
                    58:52:9d:65:89:e4:f4:c3:7a:a7:65:36:34:a6:44:
                    85:37:f3:ee:b9:dd:c9:58:a4:c3:4e:6a:82:79:f7:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E1:AD:6E:D3:0F:39:76:E2:F8:BC:42:EB:43:3F:07:ED:CF:2A:80
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:3f:aa:33:85:44:dc:09:84:66:cb:4a:b0:cb:fb:2f:47:
         07:50:82:e4:6c:9c:ae:15:84:44:9b:35:c9:ea:cd:40:59:b5:
         62:2f:74:08:02:b9:c7:95:ca:e7:0f:eb:e2:a1:7c:f2:7b:a1:
         c3:a4:4b:5d:62:ed:21:b6:98:6b:92:38:e3:b8:b4:ef:c6:91:
         34:59:6a:7f:f4:f3:ab:90:0b:95:4e:05:03:70:4d:17:fc:c8:
         e7:df:ef:8c:8d:84:fd:f6:f9:2b:cf:75:cb:e7:69:7d:98:72:
         d9:59:39:b8:e4:4c:67:34:d5:3f:f9:a2:58:d7:ab:28:d1:e4:
         5d:5e:37:a6:d9:3b:a5:7e:9d:6e:c9:99:c2:5b:f8:8d:42:42:
         cb:c6:bb:c9:28:fb:59:57:2f:1c:07:9d:9e:a0:16:f2:40:42:
         09:15:85:c5:70:57:48:76:04:7e:a5:08:f0:e6:8e:60:ba:49:
         47:0b:e8:8e:67:5d:7f:5b:b4:36:35:2e:92:ba:56:9a:7d:89:
         24:b2:24:07:c9:90:64:0a:8c:3b:aa:24:1b:fb:78:bb:0d:a7:
         a7:f7:7b:e2:90:18:a0:b1:73:31:95:bc:12:85:bb:3f:98:1b:
         b1:e4:b1:48:37:45:a9:ff:a4:f9:7e:e7:82:36:ab:e0:28:f9:
         10:97:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:52 2026 by rpki-client