This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34392e302f32342d3234203d3e203532323333.roa
File:                     3139302e38382e34392e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          CkX4cbmAvecr8a2DUMNV31GGikP7WsjdPMsHmy+GiPg=
Subject key identifier:   C9:2C:F0:47:E3:84:AA:0B:4D:5D:B9:23:AE:AC:BC:3C:02:20:B9:35
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       2297E33EE61D65950F591D92B33ED40FDC56BAB9
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34392e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:14 +0000
ROA not before:           Tue 06 Jan 2026 19:38:14 +0000
ROA not after:            Tue 05 Jan 2027 19:43:14 +0000
asID:                     52233
IP address blocks:        190.88.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:97:e3:3e:e6:1d:65:95:0f:59:1d:92:b3:3e:d4:0f:dc:56:ba:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:14 2026 GMT
            Not After : Jan  5 19:43:14 2027 GMT
        Subject: CN=C92CF047E384AA0B4D5DB923AEACBC3C0220B935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:0c:0a:d8:e4:c0:e1:91:99:ac:3f:a6:72:
                    0e:3c:67:65:35:4a:c2:5d:75:59:9f:96:0b:ff:75:
                    e0:78:b6:68:8c:de:4a:65:73:63:81:f7:a1:76:d4:
                    da:ec:7f:27:65:4d:29:6e:64:ff:06:e3:77:8c:6c:
                    53:0d:58:37:3c:25:ad:75:fd:2d:29:df:94:ab:df:
                    d6:c2:91:58:8e:75:4d:04:e9:3e:ad:54:bb:23:0b:
                    ca:64:20:fa:1a:9d:d7:2a:33:a2:1f:ea:bd:b5:d8:
                    1b:58:05:fc:97:10:68:3b:02:db:5c:bb:79:90:16:
                    4f:79:fb:27:33:47:1f:85:1d:4b:4c:0d:51:75:12:
                    3a:c4:25:19:77:c0:a3:72:2d:f6:10:20:62:b3:4c:
                    a7:4a:82:84:3b:d9:78:f5:94:07:4a:64:2c:d6:d0:
                    2c:00:8d:dd:db:65:af:7d:68:72:89:d3:4d:62:30:
                    57:d0:42:37:b5:46:34:c4:14:60:f4:b4:3d:4d:32:
                    72:fb:1b:c2:55:0b:6b:fc:92:c2:06:8e:eb:a6:20:
                    af:09:56:83:b1:90:e9:5b:6f:14:7b:23:07:13:c5:
                    55:35:48:a6:71:ad:8a:58:5a:92:c8:15:3e:3e:f5:
                    dd:16:d1:04:0b:b0:6b:3a:3b:44:e7:c9:02:91:f1:
                    dc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:F0:47:E3:84:AA:0B:4D:5D:B9:23:AE:AC:BC:3C:02:20:B9:35
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34392e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:f3:9e:e3:bf:e9:fa:24:f4:83:09:7f:ba:76:37:ef:98:
         c5:a2:c8:83:7b:d2:f7:3a:a1:8d:9d:cb:3b:88:69:d3:b3:f0:
         6c:38:dc:14:bd:a1:db:d9:b5:05:d9:c1:d4:2c:46:9a:95:da:
         80:ca:cd:d2:d9:75:04:6b:48:df:aa:40:02:7f:cf:e5:b8:d4:
         0f:e4:a4:7f:23:46:c7:95:3b:08:b2:a0:b2:12:be:6a:74:d0:
         59:28:91:e8:b1:aa:75:b9:66:84:29:98:6a:80:5d:e8:15:dd:
         9e:c3:86:8b:da:45:c2:74:aa:2c:29:68:61:78:2e:6f:ef:5c:
         a7:a5:7a:25:78:1b:66:08:9a:be:be:24:7a:f7:ae:47:85:9b:
         29:8e:93:aa:50:16:8e:3c:14:2d:27:29:96:af:b1:89:33:a5:
         35:d9:ec:11:12:b1:9b:19:0a:d1:f4:0a:18:02:f8:e2:c6:54:
         72:e5:19:ea:8d:97:e1:4b:83:d3:f2:67:c5:cc:99:2e:02:56:
         42:d4:3d:1d:96:38:22:5b:38:b0:3a:f1:55:f2:5b:dc:29:41:
         f4:ea:6a:46:2d:03:33:58:99:1f:95:c4:6e:e9:9a:70:f4:30:
         16:eb:1a:b5:8b:ff:87:f8:80:d7:4b:16:65:02:99:cb:d8:d2:
         b0:9a:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:41 2026 by rpki-client