This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa
File:                     3139302e38382e34302e302f32312d3234203d3e203532323333.roa (raw, json)
Hash identifier:          uUh0zGTh5ZqaQRmeP/lKSi/lRreBhEgeb23SvB8nj0E=
Subject key identifier:   D5:B9:6B:6F:D7:FA:D5:20:DA:AC:80:C2:B6:A9:64:09:B2:66:A4:BD
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       280E90128BD6CFA783418E8AC9AD99AF892BBE9E
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:18 +0000
ROA not before:           Tue 06 Jan 2026 19:38:18 +0000
ROA not after:            Tue 05 Jan 2027 19:43:18 +0000
asID:                     52233
IP address blocks:        190.88.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0e:90:12:8b:d6:cf:a7:83:41:8e:8a:c9:ad:99:af:89:2b:be:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:18 2026 GMT
            Not After : Jan  5 19:43:18 2027 GMT
        Subject: CN=D5B96B6FD7FAD520DAAC80C2B6A96409B266A4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:0d:c2:dd:2a:1d:a0:a8:6a:1b:2a:70:ef:
                    ad:c1:75:29:e5:c5:45:9f:1a:80:80:b0:76:b3:81:
                    30:34:3a:57:b4:f6:65:56:7f:b2:fe:1d:b8:a4:53:
                    5f:5d:5e:f4:bd:58:0c:d8:b4:29:34:61:d3:fb:3e:
                    08:8e:99:81:34:9c:ba:e5:8e:7a:67:87:9b:cf:3e:
                    ad:b7:84:49:66:42:a7:bb:44:c7:f5:70:b7:14:14:
                    65:e7:ab:2a:2f:fd:b6:8d:6f:6d:68:87:31:77:b5:
                    3c:0e:be:71:5a:dd:05:09:22:e3:79:48:51:f1:fc:
                    a7:06:f1:54:d7:38:8f:c9:6b:3e:88:4c:6f:75:7d:
                    e0:93:93:a5:05:69:5e:5f:7e:cf:22:b5:db:26:0a:
                    8f:88:7e:4e:cd:30:7f:e5:f0:16:1f:4c:f6:20:55:
                    94:b9:7c:4b:bb:75:12:f6:dd:04:4b:9b:ae:ce:51:
                    d1:d4:f4:9a:a1:d7:3d:9e:21:b1:c1:ce:66:41:b9:
                    38:b4:af:46:65:b8:c8:42:3f:99:09:8c:71:d6:f7:
                    25:c3:92:cc:1f:89:eb:56:bd:e2:11:f5:c6:5f:7d:
                    c0:3f:46:12:34:a7:c4:0c:2d:78:b4:94:64:96:2c:
                    f0:53:46:b0:a6:2e:e8:f2:cb:fb:32:c4:28:84:7d:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:6B:6F:D7:FA:D5:20:DA:AC:80:C2:B6:A9:64:09:B2:66:A4:BD
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:0c:97:3c:63:e3:56:76:33:12:32:99:53:4d:a4:d8:cc:
         80:3d:80:65:b6:a0:b2:15:42:ec:81:7e:25:e0:d4:71:68:84:
         bd:f2:10:12:42:14:44:53:17:5a:b4:13:e1:6a:ce:98:f2:0f:
         09:2e:71:a8:0b:26:23:7e:36:a7:be:c0:2b:8d:5e:6c:ff:d0:
         1c:24:b3:fb:bb:70:b8:48:c3:52:4e:89:18:cf:98:4c:f3:f3:
         34:30:1f:b2:41:17:f9:47:86:31:74:32:d3:c6:a0:6f:f3:cf:
         c0:5d:d0:eb:35:8a:63:73:9e:d7:d7:34:49:a1:85:09:c7:2c:
         0b:3b:18:04:15:35:6e:c4:3e:9f:5a:3c:03:91:6d:7f:c1:36:
         89:75:32:2d:6d:26:bd:3f:5e:39:72:19:b0:b8:7d:b6:7f:72:
         3a:c2:34:c9:22:23:9b:a0:f7:9b:81:4f:99:3b:16:6f:bf:98:
         fa:e6:f3:60:ff:06:e3:bc:1d:5b:57:a5:b7:3f:92:44:f9:04:
         ad:61:6f:68:b1:e9:98:91:9e:9b:ff:10:0a:02:9e:6a:d8:52:
         13:be:e0:bf:00:d2:9c:ea:d4:40:df:0b:bf:87:0e:8d:81:84:
         ba:c4:73:14:85:72:c3:71:eb:55:8a:a2:ff:84:13:c1:3e:eb:
         09:eb:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:55 2026 by rpki-client