This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
File:                     3139302e39382e3133362e302f32322d3234203d3e203238303336.roa (raw, json)
Hash identifier:          5bA0ihS5ZFYF5CEj01r/9NZdXvooMUfGkEkd4ezXw5E=
Subject key identifier:   51:22:82:F9:83:EF:E2:3B:87:67:D7:5F:52:52:F1:A0:DA:14:81:CA
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       7D00DDEB5F8B251B45F37D3B5B81E1ED319EF8C5
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
Signing time:             Tue 06 Jan 2026 19:20:35 +0000
ROA not before:           Tue 06 Jan 2026 19:15:35 +0000
ROA not after:            Tue 05 Jan 2027 19:20:35 +0000
asID:                     28036
IP address blocks:        190.98.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:00:dd:eb:5f:8b:25:1b:45:f3:7d:3b:5b:81:e1:ed:31:9e:f8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Jan  6 19:15:35 2026 GMT
            Not After : Jan  5 19:20:35 2027 GMT
        Subject: CN=512282F983EFE23B8767D75F5252F1A0DA1481CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:48:f1:48:df:3f:4b:e0:1a:63:d1:39:5c:
                    24:d6:2b:81:c9:b1:39:43:2a:3d:d4:f4:86:c9:cb:
                    05:83:a5:c0:82:e9:32:3d:3f:4e:37:a0:86:be:f3:
                    80:d9:8e:88:db:ab:42:f7:8d:32:1c:c0:a0:e3:83:
                    0e:17:a5:fa:c0:be:2a:3f:fb:5a:05:af:d7:9b:03:
                    0c:db:b5:c2:2b:74:ce:7d:44:ad:07:57:ed:c8:35:
                    bb:0c:e4:69:a2:fb:35:32:58:21:8b:fc:ed:9a:ed:
                    ef:16:f7:d8:45:3a:85:66:51:23:d6:f9:29:fd:8f:
                    ce:3b:49:79:dc:6e:39:f1:27:03:16:2f:95:be:43:
                    66:d6:ba:4d:eb:82:76:c5:7f:26:d8:f9:3c:4e:db:
                    2c:30:cc:f0:22:94:58:8d:ca:45:12:d8:07:68:93:
                    fb:51:c2:ec:16:8d:2e:82:1f:6f:74:6e:a0:83:f6:
                    bb:30:78:8c:5c:14:53:4b:c4:89:23:e4:63:d5:15:
                    63:cb:37:07:be:22:23:df:ea:8a:19:f4:41:3f:2a:
                    5f:07:8f:dd:55:f6:91:7e:66:6e:b7:34:99:7a:1b:
                    55:47:0c:54:bd:71:02:cd:20:cf:9c:c7:21:61:cb:
                    0b:e6:73:d3:75:c5:21:ae:54:d7:d2:da:cf:a3:c2:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:82:F9:83:EF:E2:3B:87:67:D7:5F:52:52:F1:A0:DA:14:81:CA
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:a9:39:1b:7b:54:74:53:ae:f8:c0:4d:b3:5f:af:91:81:
         aa:ff:3c:22:b3:17:42:e7:8b:e8:f4:52:c8:d0:f0:aa:0b:1c:
         ab:a3:a9:45:a1:9c:d5:99:83:16:ad:84:0b:66:82:f4:aa:dd:
         af:e1:97:45:07:f0:95:28:40:4e:2d:49:54:9b:78:7b:7e:81:
         63:5c:71:5c:a2:55:68:5a:cd:8d:d1:af:46:8f:dd:ed:88:6b:
         14:14:7e:f7:b1:db:9c:6b:0e:f5:4e:a8:a0:90:cb:d7:5c:54:
         4a:a3:4e:31:5e:93:f4:93:ae:08:e7:91:03:07:84:1e:00:b2:
         28:a4:6d:8a:83:6f:c4:f4:cd:4c:63:9a:d5:1e:53:d2:cf:1b:
         c6:56:a1:1d:bf:62:69:4c:a3:ad:29:66:c6:03:27:c9:55:c8:
         44:6e:8f:4c:70:34:d3:08:69:1d:05:e1:4e:87:10:83:e4:55:
         07:4b:60:60:18:b7:e2:00:da:e3:8f:fd:d2:e6:13:f4:08:df:
         ee:bb:ec:1e:ad:6b:6c:05:fa:1b:34:c4:e2:be:f7:4d:8b:dc:
         84:d9:30:38:d0:b5:89:cf:25:e9:a7:50:f1:b6:fd:6c:29:aa:
         1b:19:c2:05:83:fb:75:47:da:d4:d1:7e:5f:ff:46:09:4e:6e:
         77:c6:42:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:15 2026 by rpki-client