This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa
File:                     3139302e39322e3130382e302f32332d3234203d3e203532343235.roa (raw, json)
Hash identifier:          irl9Jf5uH9Im4K10C4jWhl5rhGivVmoltBStnTHcxJI=
Subject key identifier:   79:8C:CD:23:59:65:5C:30:77:A2:1F:CE:35:12:98:AA:BC:1A:4D:F3
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       14997D405EBF728B6DDF366865E4CA170385BEB2
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa
Signing time:             Tue 06 Jan 2026 19:03:43 +0000
ROA not before:           Tue 06 Jan 2026 18:58:43 +0000
ROA not after:            Tue 05 Jan 2027 19:03:43 +0000
asID:                     52425
IP address blocks:        190.92.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:99:7d:40:5e:bf:72:8b:6d:df:36:68:65:e4:ca:17:03:85:be:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Jan  6 18:58:43 2026 GMT
            Not After : Jan  5 19:03:43 2027 GMT
        Subject: CN=798CCD2359655C3077A21FCE351298AABC1A4DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:fe:35:33:30:10:df:7f:b9:dd:de:1f:ee:
                    98:66:46:48:20:59:20:c3:d6:0d:e7:4a:e4:7b:04:
                    1c:5b:41:f6:6d:52:a9:92:4f:5b:aa:12:5d:3c:f2:
                    f3:07:a0:10:2e:1b:4b:ab:65:d8:b0:ed:4f:45:d9:
                    94:b4:25:b3:78:56:c7:d7:87:4c:3f:5c:76:08:f1:
                    83:47:b5:14:dd:6d:88:e4:46:ab:cc:b6:dd:59:ef:
                    70:7d:3e:12:92:69:38:da:f2:96:3f:2e:f9:93:26:
                    e4:a2:9a:0e:4d:15:19:21:99:e8:62:35:bb:2d:45:
                    c1:7b:9a:09:ff:d7:d6:cd:f9:a7:1e:36:f6:96:e0:
                    9e:20:48:94:0a:37:ca:ec:c3:a7:b7:f4:f4:3c:96:
                    91:eb:1e:90:d8:1f:72:c3:dc:4f:4f:f9:9d:ab:76:
                    33:12:92:b9:57:2f:9b:04:51:03:8a:86:90:8d:0f:
                    a9:7e:fc:75:c3:e5:75:33:51:0b:50:fc:e6:4f:6e:
                    39:c6:70:f8:e9:be:eb:93:91:ed:48:41:96:7f:68:
                    99:8f:bc:43:6e:88:8f:f6:f2:c1:d0:6f:9a:20:3e:
                    fc:e9:00:91:ac:94:63:5f:9b:b3:09:9a:0a:d4:e8:
                    2f:74:b9:ba:56:42:2b:47:96:84:74:94:64:f6:78:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:CD:23:59:65:5C:30:77:A2:1F:CE:35:12:98:AA:BC:1A:4D:F3
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130382e302f32332d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:c8:31:95:ae:a3:6a:11:17:26:d6:90:07:bf:f3:69:4a:
         c4:41:79:26:19:63:9d:3c:a1:c2:2f:41:3b:3e:6e:1e:fe:e1:
         19:f3:3c:49:56:df:b4:34:43:3b:2b:4a:81:e4:0c:c8:2e:30:
         94:07:d9:c7:0a:f3:a0:c2:29:91:4a:a2:c3:56:67:0d:d8:7e:
         8f:87:01:d8:03:d7:26:29:c5:4a:cb:62:ef:de:0d:27:10:d8:
         2f:f9:b5:69:0a:05:2d:e6:a8:78:bc:a9:3a:c2:fb:1b:2c:ce:
         af:8e:ce:95:2e:fe:94:b9:f4:45:48:f2:35:8a:9c:32:36:ce:
         7a:ee:46:a6:9e:78:64:a7:57:68:65:d8:58:e5:94:40:ed:3b:
         0c:75:f5:87:5c:51:51:0a:2e:f7:ce:73:cf:20:af:c7:9d:83:
         90:f8:87:fc:7e:36:23:aa:8c:f7:c9:f0:b4:b8:2e:e1:bc:52:
         9d:c0:ec:37:d3:92:b9:fa:f5:4a:4f:73:35:86:d3:f7:4d:3f:
         ac:01:0f:52:5c:89:6e:be:0e:ee:7f:6f:2a:ca:70:5a:3e:3f:
         7f:e0:5f:40:a2:a1:fd:c0:78:d0:e6:05:e4:a0:a7:f2:c0:c6:
         46:86:6f:74:87:9d:24:8d:ca:ac:72:c0:6a:ab:c2:70:7a:26:
         f7:a3:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:04 2026 by rpki-client