This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa
File:                     3139302e32332e302e302f31362d3234203d3e203237373638.roa (raw, json)
Hash identifier:          gKpuOiNJXA3hBI9uAobwZ+8Ao1fGBp9xAR7xBl9hpFU=
Subject key identifier:   8E:C2:57:F2:D7:05:72:5E:24:0D:35:A8:06:1E:A0:2B:D3:60:E2:3B
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       0A33F104CE8E7EB0F18621F4CF4AA78875BEC25D
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa
Signing time:             Tue 06 Jan 2026 19:25:58 +0000
ROA not before:           Tue 06 Jan 2026 19:20:58 +0000
ROA not after:            Tue 05 Jan 2027 19:25:58 +0000
asID:                     27768
IP address blocks:        190.23.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:f1:04:ce:8e:7e:b0:f1:86:21:f4:cf:4a:a7:88:75:be:c2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Jan  6 19:20:58 2026 GMT
            Not After : Jan  5 19:25:58 2027 GMT
        Subject: CN=8EC257F2D705725E240D35A8061EA02BD360E23B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:8a:52:ef:3e:dd:4a:28:e4:46:ef:0c:41:
                    cc:8d:ce:d5:f5:a2:54:bd:cd:a6:f8:d5:80:e1:90:
                    ec:ef:bd:7b:0d:7e:fb:e7:f9:27:be:b7:e0:10:4b:
                    61:9b:e8:04:e4:44:51:5e:dc:b0:ea:af:86:c0:cd:
                    06:db:64:26:0d:32:5e:c2:8c:9f:13:fa:13:03:a6:
                    76:4b:b2:c5:c8:f5:c5:d9:06:73:c6:29:b8:a7:87:
                    6f:51:c2:aa:58:73:f6:c3:e4:93:ec:43:b9:12:33:
                    ae:0e:52:0b:68:39:e4:c4:c0:fb:66:6c:44:cd:db:
                    86:52:6b:6a:38:c6:fa:d9:4a:b0:13:3e:f3:6c:7f:
                    80:4d:67:0d:52:62:85:83:b3:a6:77:89:e9:fc:db:
                    4d:d9:93:58:0c:98:9e:15:d9:31:41:19:65:2c:46:
                    92:b1:84:d1:55:21:0c:b4:62:09:65:63:3b:f8:91:
                    f7:d6:b2:7c:b8:3e:63:b2:47:4b:27:35:64:72:83:
                    fa:d1:d9:b8:9b:e2:34:70:01:95:cb:40:b7:4d:37:
                    d2:9a:5b:f1:56:cc:79:97:d0:53:db:02:83:9f:22:
                    a7:0b:07:92:7f:6f:d4:25:87:2b:3e:23:a1:ef:04:
                    f7:d7:14:5c:ac:4e:b9:d3:32:b8:72:29:c1:3a:15:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C2:57:F2:D7:05:72:5E:24:0D:35:A8:06:1E:A0:2B:D3:60:E2:3B
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3139302e32332e302e302f31362d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:28:8a:5f:7e:ec:19:45:7d:44:94:8c:f1:3b:ec:c8:4c:00:
         9b:69:94:af:0e:39:10:f5:3e:d6:f7:1b:38:93:f1:54:23:67:
         bc:16:f4:d3:cc:80:f8:4e:cf:a3:a0:0a:3a:64:3c:e1:6b:da:
         1d:fb:5f:9c:21:ba:d2:8f:a6:5d:78:2a:0e:0f:21:26:8b:88:
         21:d2:b7:a8:d6:c6:89:b3:5c:d2:0f:be:f8:b6:50:d9:cb:3c:
         a1:07:ed:35:c0:46:d4:1a:3f:b3:6d:0a:5c:0c:9f:2e:4b:1e:
         38:e2:13:91:11:b8:dc:81:95:45:48:65:c3:a8:5d:ff:53:f1:
         d5:59:05:ee:21:86:a9:ed:44:53:ba:d7:2a:66:cb:d8:3f:4c:
         5f:95:fa:51:7a:9e:9a:df:8e:99:2f:44:82:9d:20:22:e1:a7:
         14:a0:9d:d6:33:e3:b6:bd:1e:4e:50:18:12:5a:64:f3:7b:55:
         d0:b2:72:9e:ee:f8:a1:56:99:0c:43:b7:84:a2:bf:91:9d:14:
         9d:51:b1:41:26:cc:62:a5:d0:dd:7e:44:17:c4:3c:34:55:08:
         3a:8b:f9:a9:9d:15:bc:72:59:d1:8e:61:8f:0c:07:c9:fb:d8:
         a2:9b:b4:da:ab:94:5c:3c:23:7b:58:3f:44:d9:08:d2:fa:91:
         88:5b:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:28 2026 by rpki-client