This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
File:                     3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa (raw, json)
Hash identifier:          QrS5NemFJCWDg0f/elW7JEyKnDcBVrgDZqUjO2TA86E=
Subject key identifier:   E6:D2:72:88:5E:0B:BA:2A:3F:90:FB:4A:27:71:F5:1E:E0:95:D1:08
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       48B2DB72C1EBB9AC24D8881EA0A63D79B3C098D9
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa
Signing time:             Tue 06 Jan 2026 20:55:03 +0000
ROA not before:           Tue 06 Jan 2026 20:50:03 +0000
ROA not after:            Tue 05 Jan 2027 20:55:03 +0000
asID:                     23456
IP address blocks:        190.210.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:db:72:c1:eb:b9:ac:24:d8:88:1e:a0:a6:3d:79:b3:c0:98:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:03 2026 GMT
            Not After : Jan  5 20:55:03 2027 GMT
        Subject: CN=E6D272885E0BBA2A3F90FB4A2771F51EE095D108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:2a:0e:ce:b0:4e:36:27:11:ac:c1:ee:90:
                    8e:95:6b:29:0b:e5:02:10:94:fa:c1:ca:cc:4e:e4:
                    47:37:ff:90:ae:a2:6e:82:b9:43:0d:ed:89:21:43:
                    7d:66:ef:a3:9a:ea:66:f7:21:71:75:76:8d:99:fd:
                    9d:32:4e:b8:93:f9:97:b4:e3:f6:f2:a6:fc:c1:39:
                    0c:26:69:85:76:48:3b:ba:6a:25:70:1f:04:6a:01:
                    ff:2f:6c:1f:17:97:d7:51:27:4a:15:11:ed:75:d8:
                    89:80:60:b0:09:81:05:ca:fb:b5:e0:fe:4e:75:d7:
                    02:b7:b1:76:f0:f3:24:13:88:cb:36:db:11:59:10:
                    c2:8e:8d:c5:aa:c5:69:9c:ae:fc:da:a9:a6:26:43:
                    3a:c8:99:ee:dc:a7:f0:4b:37:81:9c:ae:44:d7:ad:
                    cd:f2:6c:82:d9:a2:18:14:8c:10:ce:fc:45:7f:0a:
                    f6:32:20:47:3f:be:c2:ea:8c:d1:db:9e:81:a3:94:
                    92:b7:31:99:04:06:d9:50:5f:d8:2a:8a:ce:55:d3:
                    0a:cd:08:4e:b7:e7:51:40:38:53:49:13:84:12:f7:
                    8e:17:ea:31:04:d4:26:fa:dd:10:b2:43:a0:9e:5f:
                    b6:67:a2:3a:5b:93:ed:90:12:ab:81:dd:47:f8:12:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:72:88:5E:0B:BA:2A:3F:90:FB:4A:27:71:F5:1E:E0:95:D1:08
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3230362e302f32342d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:01:b1:f5:f8:0c:1c:6e:3a:2c:6f:1b:43:68:e0:86:77:
         06:5c:0f:5b:51:39:c5:23:ed:e1:de:d2:17:f7:0e:80:02:2d:
         2b:dd:a5:ca:12:34:3b:bf:02:12:08:db:82:52:84:62:5f:2e:
         17:06:76:de:87:06:c9:ad:30:b3:13:d7:5c:c9:7f:98:b0:13:
         a2:31:61:96:04:d1:2c:63:ae:df:64:b5:01:d2:7f:25:3a:2f:
         b8:b4:5a:7b:56:57:f0:02:c0:d8:1b:e4:00:58:52:19:3a:3c:
         3a:f5:c9:13:c7:e1:0a:11:72:7b:55:1f:b7:b5:4d:cb:7e:d2:
         4d:e9:6e:ca:33:f6:cb:25:da:2d:b5:e8:db:2f:91:2f:aa:ec:
         48:b1:ff:d8:6d:e5:f7:0d:64:85:c0:95:09:9c:4e:48:26:08:
         43:52:fb:07:a4:59:7b:72:82:60:6c:71:a9:9d:60:7c:dd:db:
         70:20:f3:48:15:ff:f0:f6:5d:1c:f3:a7:ea:e5:1f:2a:55:30:
         ff:8f:51:95:f4:de:f9:5c:91:02:a7:dc:f6:7e:20:06:49:38:
         60:9e:68:30:9b:b0:f5:3d:dc:14:b4:69:9c:16:ee:45:47:ca:
         a0:e5:bb:cc:89:47:2a:d6:15:7b:6e:36:56:fc:3c:b5:0a:0c:
         73:93:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:50 2026 by rpki-client