This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa
File:                     3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa (raw, json)
Hash identifier:          zIxCuUsxpNIqnaKFp0/QIfmm70A4p8zIHQRELC8vUd4=
Subject key identifier:   E9:FF:35:75:31:30:B0:39:65:A8:E9:73:27:C9:DA:94:28:AB:0F:1A
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       5945CB015380504B3962607175A58E838C409BCA
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa
Signing time:             Tue 06 Jan 2026 20:53:39 +0000
ROA not before:           Tue 06 Jan 2026 20:48:39 +0000
ROA not after:            Tue 05 Jan 2027 20:53:39 +0000
asID:                     267801
IP address blocks:        190.122.86.24/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:45:cb:01:53:80:50:4b:39:62:60:71:75:a5:8e:83:8c:40:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Jan  6 20:48:39 2026 GMT
            Not After : Jan  5 20:53:39 2027 GMT
        Subject: CN=E9FF35753130B03965A8E97327C9DA9428AB0F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:aa:47:3e:b6:5a:2a:24:72:04:95:3d:9d:
                    df:3a:bd:f3:fd:d4:93:57:9d:a2:96:65:0a:6c:f3:
                    68:19:2d:8a:04:60:37:4b:91:13:52:d5:26:92:a1:
                    95:a0:3e:25:8b:ee:a1:ef:f9:a9:43:fa:57:3e:fc:
                    ff:37:a6:4d:3f:57:3b:b6:8d:00:25:94:33:66:03:
                    e7:9e:72:f2:83:7b:c0:c3:a8:2a:07:d0:9f:b2:93:
                    6a:33:17:39:73:69:87:76:67:98:98:1b:91:83:2b:
                    aa:be:82:31:62:97:f6:04:46:56:da:9f:4b:e8:71:
                    ce:04:2e:8f:55:ba:4e:25:d1:41:37:e5:e7:2f:6b:
                    8c:a1:ee:a9:54:21:d2:1e:77:e8:0e:be:d3:08:93:
                    dd:0e:bc:89:69:0f:34:5f:aa:18:80:62:bf:0d:97:
                    aa:44:a8:60:d6:03:75:1c:58:6d:8b:09:8f:3b:9b:
                    eb:39:d9:85:55:db:fa:9c:74:2c:e8:9e:cf:cb:2b:
                    ac:b7:e8:2d:e8:04:27:d6:07:df:90:4f:2f:b8:c8:
                    a6:5f:5d:be:b9:ba:1d:ca:67:a3:bd:7b:60:ed:9b:
                    a7:5b:d1:c7:68:f4:0a:72:bf:60:4c:2d:ae:a2:b5:
                    dc:bb:49:c8:c1:03:28:41:a5:a4:96:51:f2:cd:52:
                    68:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FF:35:75:31:30:B0:39:65:A8:E9:73:27:C9:DA:94:28:AB:0F:1A
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139302e3132322e38362e32342f32392d3239203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.86.24/29

    Signature Algorithm: sha256WithRSAEncryption
         31:75:34:4f:c5:e8:8f:c0:fd:4c:43:77:64:f5:79:cb:5a:d5:
         50:26:00:db:1a:18:e4:db:05:57:99:b6:b6:3f:4d:10:4f:18:
         dd:76:c8:f4:a0:df:c3:d0:03:32:ab:ef:73:c0:d0:23:e9:be:
         f2:dd:bc:35:23:83:e1:7f:79:6a:6c:40:e3:ae:02:61:d1:c0:
         3f:0e:07:95:61:d2:33:a6:75:d2:16:88:6d:c8:1b:c3:7e:34:
         33:cf:05:1f:c0:aa:f8:ea:db:ad:d2:55:9e:aa:aa:65:8e:27:
         b6:6f:e4:17:58:3c:10:4b:4e:63:68:cc:bc:fd:d1:6b:3b:fc:
         a7:0b:0c:5a:8a:25:8a:7e:ed:28:60:1d:c2:96:0a:80:ff:71:
         39:59:1d:d8:98:c2:35:a7:cb:a5:fb:b0:54:6b:8d:7a:e8:ca:
         ef:ff:44:e8:5d:13:66:7e:c1:8c:ea:f4:e7:6d:82:ec:c5:e8:
         93:6e:a5:6d:73:2d:9b:8d:33:50:5e:94:2c:06:ac:8e:58:95:
         f3:cb:f9:72:32:4d:61:2f:4b:43:39:c9:48:5e:9a:70:d6:47:
         9b:1d:f9:e5:a3:82:db:e7:5f:cb:49:a2:4f:45:b1:41:5a:bb:
         7a:a1:cb:d3:1d:f0:67:17:73:3d:dd:b4:18:71:2a:e5:95:21:
         b9:58:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:38 2026 by rpki-client