This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e203138363738.roa
File:                     3139302e3130382e39312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          +t4nWMDBVFiqF6jJUqNqXwi01tpwYvrsvYNs9gJVcqE=
Subject key identifier:   65:8F:46:BC:E1:F7:1F:6F:20:29:E2:53:AC:01:35:C2:68:67:93:20
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       198401556C0CD76639CF54B7A17DCAE1EA871B23
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 02 Dec 2025 20:10:00 +0000
ROA not before:           Tue 02 Dec 2025 20:05:00 +0000
ROA not after:            Tue 01 Dec 2026 20:10:00 +0000
asID:                     18678
IP address blocks:        190.108.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:84:01:55:6c:0c:d7:66:39:cf:54:b7:a1:7d:ca:e1:ea:87:1b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Dec  2 20:05:00 2025 GMT
            Not After : Dec  1 20:10:00 2026 GMT
        Subject: CN=658F46BCE1F71F6F2029E253AC0135C268679320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:3a:84:72:11:15:58:4e:0f:34:35:5b:11:
                    77:8f:0e:8f:61:c3:0f:79:98:fd:23:53:e6:98:47:
                    53:90:d7:d8:7c:4a:ed:a2:9f:ba:93:91:7f:ad:fe:
                    85:56:cf:d5:24:da:c2:c1:3d:e9:9b:16:55:c1:0b:
                    f9:6f:b6:ba:75:14:aa:3f:b0:d9:c5:8e:18:45:17:
                    35:8d:98:89:70:36:f5:8c:d8:cd:b8:58:ab:7a:f3:
                    81:51:29:6c:63:a2:50:53:6a:85:f5:68:3d:29:5a:
                    4f:7f:54:a0:4c:04:9f:24:fa:d3:33:79:c6:0f:41:
                    32:65:5b:3b:e6:4b:86:94:f1:6c:b0:4d:ec:4a:4c:
                    16:a1:ee:79:64:b7:7e:54:00:43:86:3f:ee:f5:96:
                    c7:32:60:59:76:84:d2:42:80:41:95:5f:84:96:93:
                    e1:4c:a4:ee:eb:3a:6e:39:9a:89:41:41:2d:94:b6:
                    87:0f:31:42:27:4e:95:a9:b8:97:92:28:57:59:36:
                    33:d7:d8:42:29:21:ed:3f:28:37:7a:d9:c7:2e:db:
                    2f:64:f1:5c:d6:ae:c4:85:3c:bb:6f:58:bb:d5:18:
                    cc:fd:c1:8f:2c:8d:fa:69:7f:88:83:c2:f1:49:ca:
                    18:93:7e:d0:d1:02:b4:f7:5f:ae:4e:61:7f:b2:5c:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:46:BC:E1:F7:1F:6F:20:29:E2:53:AC:01:35:C2:68:67:93:20
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/3139302e3130382e39312e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:19:4c:2e:6b:f0:f4:7b:01:ea:82:0f:53:18:7b:54:de:38:
         ec:35:51:32:f7:8a:10:6a:74:25:0e:30:49:27:81:b7:91:aa:
         00:7a:5a:55:79:eb:66:7d:0b:00:bc:11:5c:a8:7b:81:d5:18:
         d9:ee:28:2d:8e:78:97:b6:40:b9:27:2f:41:8d:32:c3:63:0a:
         3b:82:8c:6c:e9:94:70:77:f6:98:76:76:0b:6a:7a:f3:ed:8c:
         03:ad:56:0b:bf:b2:8d:19:87:ba:a0:c3:78:e3:7f:83:65:77:
         f3:d2:a8:9a:4a:ee:64:e0:e6:3b:1a:e5:e3:6c:d9:67:76:d3:
         fd:f1:32:6a:5d:84:fd:fc:9a:ae:72:92:75:b5:30:b1:bf:44:
         4b:e6:ae:43:de:12:a6:e6:34:0a:a6:0f:01:ed:44:ca:ea:96:
         c2:3b:45:1b:ef:0a:06:dc:eb:8b:80:b5:bd:96:d7:2a:05:80:
         a9:d6:c6:99:01:69:1c:95:28:5b:11:49:48:9b:9d:c1:a8:d7:
         f9:2f:76:aa:3c:20:e2:83:1c:b0:bd:2a:93:17:9a:ff:2c:13:
         ee:64:27:0a:8d:98:5d:ea:84:d2:95:fb:fb:21:e0:4d:eb:a2:
         07:c8:d1:a3:d2:4a:4d:b9:ae:27:72:0d:8e:52:9a:38:2a:fb:
         8b:a3:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:27:54 2025 by rpki-client