This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139322e302f32322d3234203d3e203532323333.roa
File:                     3139302e38382e3139322e302f32322d3234203d3e203532323333.roa (raw, json)
Hash identifier:          02kpPlc6rBNWaBTMaaywOTbaeNougdeDFV/kgA1e84A=
Subject key identifier:   1F:75:FC:CE:D2:62:C9:14:4A:98:9F:89:29:A4:13:06:0A:AE:DF:9B
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       668453D64704DCD200E5ADA51CD8CCECD3F9AFE9
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139322e302f32322d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:15 +0000
ROA not before:           Tue 06 Jan 2026 19:38:15 +0000
ROA not after:            Tue 05 Jan 2027 19:43:15 +0000
asID:                     52233
IP address blocks:        190.88.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:53:d6:47:04:dc:d2:00:e5:ad:a5:1c:d8:cc:ec:d3:f9:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:15 2026 GMT
            Not After : Jan  5 19:43:15 2027 GMT
        Subject: CN=1F75FCCED262C9144A989F8929A413060AAEDF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:f5:c5:09:08:32:2b:4b:77:81:b7:93:9b:
                    f4:d9:dc:3c:13:c5:e4:f7:7d:de:0b:7d:a9:44:dc:
                    ba:7c:6a:e5:29:0c:61:d1:f3:4f:b8:19:ce:6b:67:
                    c7:90:57:42:5c:cb:37:8e:28:a4:a1:d1:51:40:44:
                    f9:d5:f5:4f:c7:5c:86:b2:2a:58:5b:10:2c:50:2e:
                    fa:f6:01:91:8b:09:0f:60:f0:3e:9b:d4:95:2d:8a:
                    e1:d9:be:20:5b:1c:4c:49:a0:bb:56:6c:3c:41:8e:
                    16:6e:44:ec:52:0d:27:ff:1e:33:7a:7d:98:f5:12:
                    88:89:6c:72:1c:19:34:6f:08:d3:63:04:88:fb:0f:
                    10:c5:f0:3e:c9:99:66:e4:7d:64:01:33:3e:3f:a9:
                    87:25:b8:5a:9b:19:8f:88:b1:86:e4:fd:24:8e:bd:
                    24:d5:8d:b9:ff:cb:60:af:ef:b6:a8:51:6d:6f:8a:
                    84:c1:20:43:58:d0:8b:48:45:8c:ad:f5:67:44:b5:
                    98:b7:48:9b:a2:06:fa:fd:41:4c:a3:35:24:23:0e:
                    7e:d6:fa:f8:34:59:14:bd:60:ce:ae:d1:c2:1c:81:
                    e3:fc:c5:ff:09:80:06:19:24:b5:f0:9a:f0:9b:15:
                    40:62:a4:95:8f:d4:0e:40:5b:be:c4:4c:98:75:2b:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:75:FC:CE:D2:62:C9:14:4A:98:9F:89:29:A4:13:06:0A:AE:DF:9B
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3139322e302f32322d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:01:20:bd:f0:94:c5:5c:e7:2c:60:dc:a1:0c:d2:1d:d2:5e:
         ea:df:05:e6:e5:95:cc:06:c8:0e:d8:45:c1:21:2e:ed:ec:82:
         e8:fb:bd:a4:19:d3:3f:ab:38:22:ab:66:fa:c8:8e:70:22:ab:
         fa:79:8d:d3:58:6e:82:4d:bc:c8:10:f9:81:90:d2:a7:b4:ed:
         1c:c3:52:76:50:cf:ee:44:20:2e:2b:da:54:7d:4c:ef:6d:88:
         0c:f9:08:00:74:43:2d:1f:31:5a:3a:96:e2:2b:06:79:36:a5:
         7a:4d:f8:77:cc:79:38:e4:78:20:7f:b5:ae:57:e4:4e:94:57:
         e0:56:82:61:12:4d:3b:20:5e:30:1f:e0:99:74:a8:34:5d:44:
         bd:6a:d1:ad:c7:71:6d:11:dd:98:2e:fa:c6:0f:e9:f3:da:bb:
         a2:db:bd:d6:09:10:49:8f:2f:d9:d5:39:13:4c:51:a8:cf:fc:
         bc:63:39:24:ea:87:a8:b1:73:47:fc:95:16:95:df:e1:ab:46:
         83:cd:f5:5c:6c:aa:3b:7f:0d:3a:15:3a:2b:77:64:d5:27:3b:
         ba:65:6b:c4:81:45:9b:4b:a4:92:d7:c5:9d:87:be:05:9d:d4:
         fa:b9:4e:70:38:ec:86:b4:7d:15:a3:f1:28:18:e1:91:05:78:
         1e:30:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:31 2026 by rpki-client