This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa
File:                     3139302e3231312e37362e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          iK2/affan45HQEzBy4sQlJItVdOMYjC2qs3uRG/jmpQ=
Subject key identifier:   81:48:C2:FF:18:F7:6E:C1:6B:26:BF:67:DE:DE:5A:9A:35:4D:0A:71
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       0A49D77857DB998606E53BD46006AE07F239CA7A
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:59 +0000
ROA not before:           Tue 06 Jan 2026 19:07:59 +0000
ROA not after:            Tue 05 Jan 2027 19:12:59 +0000
asID:                     52328
IP address blocks:        190.211.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:49:d7:78:57:db:99:86:06:e5:3b:d4:60:06:ae:07:f2:39:ca:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:59 2026 GMT
            Not After : Jan  5 19:12:59 2027 GMT
        Subject: CN=8148C2FF18F76EC16B26BF67DEDE5A9A354D0A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:fe:4f:61:2a:97:d5:26:f0:df:48:f3:cd:
                    38:e3:86:86:e8:53:61:12:db:ab:3b:a7:ec:fb:70:
                    10:26:db:4f:c5:fd:23:7f:ad:73:18:00:db:32:3c:
                    9e:b8:b5:1f:96:e4:ba:c6:6f:96:85:60:d1:53:3c:
                    fb:75:b5:74:16:d7:9b:95:65:dd:ab:fc:53:68:d2:
                    27:3f:36:cd:87:9f:14:0c:08:3a:47:e6:1b:27:3a:
                    27:18:38:1b:06:8e:6d:14:81:1b:ab:d1:b0:76:33:
                    c9:8f:28:e1:ed:55:7b:b6:90:4a:93:4d:fa:f1:2d:
                    08:60:37:65:b0:8a:da:46:ab:95:1e:b3:26:be:61:
                    fc:0d:14:05:c8:16:e0:4c:9f:60:57:c7:be:01:21:
                    5f:6f:1d:d1:c9:91:42:96:0c:d4:f3:e8:03:08:12:
                    07:5e:bb:5a:ba:9a:b7:f3:ee:a3:24:9e:b2:a2:6a:
                    02:54:18:67:05:1e:1c:20:e5:a4:59:b4:87:cf:25:
                    67:b5:14:02:ca:be:83:dd:5c:9b:20:f2:ee:56:64:
                    91:36:49:2e:4c:fd:88:fb:71:7b:71:b1:41:0b:13:
                    0e:05:01:73:b2:9e:ee:c0:9b:67:f8:6b:cd:cc:ce:
                    f2:d6:e6:cb:6c:bb:f5:1b:b5:71:c7:53:c5:0d:71:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:C2:FF:18:F7:6E:C1:6B:26:BF:67:DE:DE:5A:9A:35:4D:0A:71
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:25:58:41:a7:16:a2:b0:80:23:c3:e9:48:4e:0e:53:3a:7e:
         a1:e2:ac:36:fa:80:ca:06:9d:da:7d:f3:8f:77:99:ab:0a:a8:
         cb:7c:4a:fc:91:5b:b1:4a:ee:32:71:3b:79:97:1b:af:bb:84:
         04:e3:e5:02:97:8d:4b:26:9a:4d:ea:db:eb:2a:aa:36:52:16:
         0f:71:a7:dc:2a:e3:9a:e0:f5:f3:8f:e8:29:1c:73:d6:77:43:
         fc:df:5a:90:57:73:07:b7:17:b1:7f:ba:4d:00:cb:8f:ce:da:
         47:04:5c:7c:2e:a9:a0:a8:28:65:1b:6a:4a:d0:59:fd:1a:dc:
         2e:fe:87:9a:67:49:24:3f:c1:a7:36:03:bf:fa:41:45:a2:af:
         cb:b9:e9:1a:4f:d5:18:be:0b:8d:ff:13:2a:6c:95:01:ab:de:
         40:0e:23:0a:7d:68:3c:e9:f1:f4:8b:47:3e:48:75:c3:6a:4e:
         03:a7:d1:68:05:68:6a:db:cc:ac:73:8e:c5:68:3f:5d:ab:25:
         19:ca:00:44:7f:61:1a:8e:a2:6d:74:29:2b:c3:82:8b:79:e8:
         d1:d1:37:0e:5f:89:87:bd:0f:65:fa:ce:0a:e2:bc:e8:62:8f:
         6f:c9:09:e5:92:1e:d7:7f:17:74:a1:23:85:b0:8f:44:2f:1c:
         a4:e9:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:59 2026 by rpki-client