This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38362e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e38362e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          eG/gAKWLQWo4X8LMHdSN3/hfUzmbVtjSR24wAc/NVUc=
Subject key identifier:   C8:8B:32:70:79:4E:41:B5:E9:F9:C7:D2:87:9D:6E:E7:E9:8A:F2:27
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       17F5BA2E49251FBE62B98B1571B7DE9BD8A2E7EA
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38362e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 02 Dec 2025 20:10:00 +0000
ROA not before:           Tue 02 Dec 2025 20:05:00 +0000
ROA not after:            Tue 01 Dec 2026 20:10:00 +0000
asID:                     18678
IP address blocks:        190.108.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f5:ba:2e:49:25:1f:be:62:b9:8b:15:71:b7:de:9b:d8:a2:e7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Dec  2 20:05:00 2025 GMT
            Not After : Dec  1 20:10:00 2026 GMT
        Subject: CN=C88B3270794E41B5E9F9C7D2879D6EE7E98AF227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:40:0a:23:42:42:97:24:d8:b0:84:7b:88:
                    9b:e6:a1:4a:92:40:89:f2:1f:4d:f8:50:14:4f:de:
                    58:d9:a9:6e:15:86:0a:6a:71:2c:5b:4d:f7:07:9d:
                    a1:2e:e8:83:df:0a:3d:0c:96:31:38:a0:c1:9f:40:
                    9b:d8:42:4d:00:0f:a4:07:9f:92:96:2d:e6:85:ee:
                    ba:21:ab:5a:81:85:50:07:73:5b:da:d9:5d:b4:64:
                    1d:f9:4a:45:f8:ce:cf:7d:0b:ce:fc:d2:2b:75:ae:
                    16:ae:15:ce:70:d4:da:51:d2:b2:9d:52:00:b6:db:
                    84:13:4f:c4:0b:cc:16:4e:0d:b1:bb:ad:ea:7c:6f:
                    c0:ef:f4:bb:37:1d:3d:54:53:41:23:3b:48:e4:33:
                    9d:c1:51:ac:0e:9f:f9:b7:0b:01:84:30:37:8d:53:
                    7a:62:7f:b1:57:cd:10:13:ab:75:23:9c:09:65:fd:
                    51:5e:09:7d:b5:26:4a:60:67:3c:91:a7:bf:5c:ff:
                    f2:76:16:05:33:96:50:3f:5a:eb:df:fa:ec:7e:18:
                    e3:41:c8:dd:42:2d:4a:aa:a2:d0:69:78:99:9e:3b:
                    9a:10:fa:29:54:1d:b0:22:a3:5c:bd:e3:4a:29:5c:
                    59:25:31:47:73:9d:31:b4:78:c2:ee:05:e0:3c:6b:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:32:70:79:4E:41:B5:E9:F9:C7:D2:87:9D:6E:E7:E9:8A:F2:27
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e38362e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:a1:23:d2:51:58:13:17:78:ca:ae:a4:1a:b7:00:84:2d:
         b2:18:cd:18:19:25:33:2d:28:cb:34:fe:b0:d6:89:fc:d4:b1:
         80:a0:6a:56:f9:7b:9a:85:f6:2d:0e:49:c4:95:cd:89:f6:26:
         06:74:e1:ff:17:6a:be:82:b1:44:17:e5:b3:d1:d3:35:93:7a:
         1e:de:95:1a:d5:fe:55:b8:b0:72:1a:8b:fe:dd:7d:a4:58:6a:
         cd:c8:38:2b:c4:2b:dc:0a:cb:97:34:7e:89:17:e3:a0:14:65:
         de:17:98:17:7e:45:05:41:d5:ea:9a:37:4c:a2:28:3f:21:2a:
         93:4f:6e:4b:7a:9c:07:15:a9:cc:94:65:eb:01:9f:43:72:d8:
         9b:55:f4:83:c6:2a:4b:8e:5e:c4:87:54:60:7c:3e:3c:42:e0:
         d2:bd:61:ce:99:b0:4f:0a:4e:aa:c8:56:2d:f6:fa:2a:f1:ed:
         f1:02:b7:81:10:0d:98:63:39:7e:5c:06:da:9b:a9:ce:6d:3b:
         de:4f:e6:0d:51:0e:cf:d0:45:85:6d:24:8c:4a:f8:f3:b1:7b:
         e7:a2:d5:bd:bb:c4:d1:b1:67:e0:9f:5c:3c:4d:01:6d:5f:e9:
         ce:18:fa:03:d0:2b:ff:50:6a:5c:eb:98:a2:68:74:f7:a3:2f:
         80:d7:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:27:56 2025 by rpki-client