This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          Dip4PUaUAyqv65URjHqWn5tYKFMoZppNM7IvyY6mKR0=
Subject key identifier:   DF:9A:C1:FB:D3:7E:9A:CD:CA:63:CC:48:C3:CF:35:7A:47:4F:75:7B
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       441BCB84C20CCEB7B1A8782A0C71B64B3FF890CD
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 06 Jan 2026 19:43:32 +0000
ROA not before:           Tue 06 Jan 2026 19:38:32 +0000
ROA not after:            Tue 05 Jan 2027 19:43:32 +0000
asID:                     263245
IP address blocks:        190.107.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1b:cb:84:c2:0c:ce:b7:b1:a8:78:2a:0c:71:b6:4b:3f:f8:90:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Jan  6 19:38:32 2026 GMT
            Not After : Jan  5 19:43:32 2027 GMT
        Subject: CN=DF9AC1FBD37E9ACDCA63CC48C3CF357A474F757B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:41:fa:6d:dc:fa:e0:f9:57:a6:8f:32:c8:
                    9d:56:91:17:14:ef:56:80:f1:cc:b9:31:00:4f:81:
                    2d:2a:6f:f0:44:77:fd:9f:4b:15:4d:90:b8:12:6c:
                    78:4f:cb:04:12:55:86:7b:d7:4f:71:10:98:08:11:
                    83:54:81:73:6e:37:08:2e:e0:b0:f0:09:39:ac:7d:
                    bd:e6:6d:8c:7d:37:0b:af:38:ef:55:d2:10:40:07:
                    61:0e:37:2f:8a:0c:58:fa:95:6b:d0:a7:4f:4c:ae:
                    62:5f:ea:11:a0:2f:14:33:ed:99:07:a5:e1:3c:d4:
                    22:e0:74:4f:8c:bc:ce:bf:29:a0:97:61:7c:5f:9f:
                    4f:1a:73:a7:d1:3b:c9:2c:08:20:8e:98:ae:08:0b:
                    61:8e:e9:f9:a7:da:78:db:70:13:94:de:4b:3a:9a:
                    36:8c:86:ae:6a:65:a9:0a:09:9b:7d:8b:18:9c:4a:
                    0f:75:f1:f8:f8:f0:ee:eb:cf:93:55:a8:2f:ca:be:
                    40:35:ef:51:11:c2:65:b4:cf:2e:bb:9c:ff:ff:72:
                    e6:b1:51:3f:6f:c9:aa:ea:e1:bd:5f:de:5b:a9:2a:
                    f6:0f:31:17:52:12:f6:47:55:d3:82:5c:40:69:e4:
                    d4:3b:2d:ee:72:46:3c:a5:f5:ab:c4:12:e7:8b:e7:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9A:C1:FB:D3:7E:9A:CD:CA:63:CC:48:C3:CF:35:7A:47:4F:75:7B
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233362e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:db:96:93:74:49:2e:c3:7f:73:ee:7a:b5:3c:61:73:58:88:
         9e:35:64:ce:90:cb:48:fb:ce:f2:fb:59:54:a9:88:8f:06:ef:
         b2:f3:14:e0:71:4d:6e:fa:30:9b:aa:81:3f:de:30:3e:35:32:
         3a:21:30:fd:82:4a:d8:cc:13:54:d6:e2:84:96:bc:ba:ea:a8:
         d4:44:b1:6a:8b:da:24:71:dc:86:d0:c9:f3:eb:d5:68:53:64:
         7f:9a:95:b9:4f:9b:ee:b0:49:59:a4:16:fe:5b:05:e4:bd:da:
         76:71:1d:ab:3c:2f:3e:97:a4:f6:c2:d3:cb:92:1b:11:dd:d1:
         5c:a0:60:13:b6:15:39:35:da:1e:89:0e:2d:e8:93:8c:5d:c0:
         28:f7:6a:0a:53:6b:9b:29:91:c9:d5:a0:59:2d:17:48:cd:13:
         fb:0e:d0:67:71:68:4f:ce:d0:6b:c0:fb:a4:20:74:9d:e0:c3:
         62:e2:13:95:fa:74:f7:11:dc:69:cb:f6:8e:67:36:6c:33:40:
         e2:cc:c1:66:d5:e7:8a:ad:a9:00:0f:0a:c3:28:3e:8f:ed:8c:
         29:1a:3d:55:db:a6:7e:ae:bd:62:71:ef:eb:e7:0c:a0:fb:d4:
         aa:ce:32:94:91:d6:98:7e:a0:0a:23:a8:0c:da:ff:d0:94:9b:
         52:2f:19:c9
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURBvLhMIMzrexqHgqDHG2Sz/4kM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBQjc3NzMwRDkxMjc4RDY1NkE5QjM1QjFFNTM0M0Yz
NTk4MDJBNDAeFw0yNjAxMDYxOTM4MzJaFw0yNzAxMDUxOTQzMzJaMDMxMTAvBgNV
BAMTKERGOUFDMUZCRDM3RTlBQ0RDQTYzQ0M0OEMzQ0YzNTdBNDc0Rjc1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ4UH6bdz64PlXpo8yyJ1WkRcU
71aA8cy5MQBPgS0qb/BEd/2fSxVNkLgSbHhPywQSVYZ7109xEJgIEYNUgXNuNwgu
4LDwCTmsfb3mbYx9NwuvOO9V0hBAB2EONy+KDFj6lWvQp09MrmJf6hGgLxQz7ZkH
peE81CLgdE+MvM6/KaCXYXxfn08ac6fRO8ksCCCOmK4IC2GO6fmn2njbcBOU3ks6
mjaMhq5qZakKCZt9ixicSg918fj48O7rz5NVqC/KvkA171ERwmW0zy67nP//cuax
UT9vyarq4b1f3lupKvYPMRdSEvZHVdOCXEBp5NQ7Le5yRjyl9avEEueL54k1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU35rB+9N+ms3KY8xIw881ekdPdXswHwYDVR0j
BBgwFoAUsqt3cw2RJ41laps1seU0PzWYAqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOTQ5RDBGRjY3RTlBMjUzNjMyMzgyRDRFMkNENDQzQThE
MzBBN0FEMTcyOTUzQjAxRDM1Q0YyM0FBRkM0MTI5LzAvQjJBQjc3NzMwRDkxMjc4
RDY1NkE5QjM1QjFFNTM0M0YzNTk4MDJBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkFCNzc3MzBEOTEyNzhENjU2
QTlCMzVCMUU1MzQzRjM1OTgwMkE0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTk0OUQwRkY2N0U5QTI1MzYzMjM4MkQ0RTJDRDQ0M0E4RDMwQTdBRDE3
Mjk1M0IwMUQzNUNGMjNBQUZDNDEyOS8wLzMxMzkzMDJlMzEzMDM3MmUzMjMzMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a+wwDQYJKoZIhvcNAQELBQADggEBACfblpN0SS7Df3PuerU8YXNYiJ41ZM6Qy0j7
zvL7WVSpiI8G77LzFOBxTW76MJuqgT/eMD41MjohMP2CStjME1TW4oSWvLrqqNRE
sWqL2iRx3IbQyfPr1WhTZH+alblPm+6wSVmkFv5bBeS92nZxHas8Lz6XpPbC08uS
GxHd0VygYBO2FTk12h6JDi3ok4xdwCj3agpTa5spkcnVoFktF0jNE/sO0GdxaE/O
0GvA+6QgdJ3gw2LiE5X6dPcR3GnL9o5nNmwzQOLMwWbV54qtqQAPCsMoPo/tjCka
PVXbpn6uvWJx7+vnDKD71KrOMpSR1ph+oAojqAza/9CUm1IvGck=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:36 2026 by rpki-client