This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e203231383539.roa
File:                     3139302e39382e3134362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          yDLsWYPYCG9cia9CjjSCzEaHTyC66vMlrwdTHLe4R1M=
Subject key identifier:   AB:FB:9B:5B:DA:DC:D8:82:94:DA:D6:0B:E3:91:A5:63:4A:92:19:21
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       1E402FFB78592D2093272B11A244E4EEAB241566
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e203231383539.roa
Signing time:             Tue 06 Jan 2026 19:20:33 +0000
ROA not before:           Tue 06 Jan 2026 19:15:33 +0000
ROA not after:            Tue 05 Jan 2027 19:20:33 +0000
asID:                     21859
IP address blocks:        190.98.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:40:2f:fb:78:59:2d:20:93:27:2b:11:a2:44:e4:ee:ab:24:15:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Jan  6 19:15:33 2026 GMT
            Not After : Jan  5 19:20:33 2027 GMT
        Subject: CN=ABFB9B5BDADCD88294DAD60BE391A5634A921921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:bc:e0:64:7a:83:cf:12:59:9f:30:fe:a5:
                    64:fc:24:ee:8a:c4:3f:6e:bc:ed:3c:fa:16:ff:d1:
                    62:03:10:aa:20:cf:4b:e9:51:57:eb:12:21:8d:a5:
                    75:5e:4e:9a:0f:06:d9:9e:c4:14:48:6b:1e:0d:80:
                    a1:88:b5:7c:4a:d0:66:77:ce:9a:83:84:11:d1:df:
                    52:45:6b:eb:fd:44:37:05:7b:70:d3:2e:76:e9:c4:
                    13:25:1b:c6:02:57:3f:98:8f:a2:95:93:70:6d:77:
                    bd:78:fa:3f:73:e2:a6:61:6c:95:c6:e3:e5:60:0b:
                    e5:bb:c5:5a:de:46:b7:80:b8:bd:e5:4f:21:e8:57:
                    02:4e:4c:00:89:96:74:aa:c0:e7:aa:32:18:51:bc:
                    27:17:43:9c:91:af:7e:3b:38:b3:f7:eb:46:bf:fc:
                    76:c9:4f:e9:a9:27:a3:7d:25:79:ab:79:3d:3d:d1:
                    66:e0:63:99:20:e4:d7:82:ac:a4:a6:03:97:1a:c5:
                    d1:c5:a2:74:05:0b:ca:17:50:de:fc:55:77:ca:3c:
                    98:60:f4:32:dd:ad:07:6d:c9:ec:a0:84:04:5f:09:
                    c3:5b:87:c3:0e:e1:6a:3c:54:81:81:59:24:12:2b:
                    54:a8:f6:79:d8:ec:c8:a3:35:b0:b9:3a:25:7f:a1:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:9B:5B:DA:DC:D8:82:94:DA:D6:0B:E3:91:A5:63:4A:92:19:21
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3134362e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:44:da:95:9d:a7:c8:3c:6d:a5:16:56:93:57:0f:a4:04:8a:
         7f:76:24:4a:78:59:19:43:34:df:b9:09:df:5e:77:ba:ce:77:
         34:2d:61:6a:ee:7b:b9:9d:3b:11:78:4c:0d:03:fd:14:59:85:
         5b:f7:34:43:f0:de:78:60:cc:1c:e3:59:ae:97:c7:49:8a:c8:
         39:36:4f:2e:54:19:25:6e:81:8f:41:2e:bc:20:0b:33:6d:d2:
         30:ec:42:95:d8:b7:c4:1b:64:f1:d8:c4:ec:69:6f:17:be:08:
         00:ea:f0:34:d3:f6:6d:f6:13:36:0b:95:71:47:96:2d:70:e8:
         46:d6:a8:1a:17:bf:20:43:3d:1f:36:28:39:b0:62:61:a0:96:
         17:62:59:f3:4d:8f:cc:ea:ce:77:91:72:b0:62:20:d6:49:07:
         67:05:45:c8:d2:33:9d:ee:7e:7b:ba:d0:fe:7a:60:90:cd:1d:
         45:02:dd:9f:6b:58:6c:21:90:9a:02:62:d0:4b:7f:36:9b:6a:
         4f:0c:79:28:e6:40:27:b9:60:7c:12:1b:06:5f:36:dc:0c:8e:
         36:ab:6d:23:c6:24:c2:89:b0:37:cd:8f:05:a0:56:c9:14:ff:
         09:b3:a0:6c:7a:e1:59:1e:e2:65:eb:91:6e:d4:60:68:f8:d1:
         84:ca:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:33 2026 by rpki-client