This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa
File:                     3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa (raw, json)
Hash identifier:          i8FahzRYdxkIVOncTk3EothIGdV2VStFO09JZTjOlVI=
Subject key identifier:   37:6A:19:98:01:2C:29:DA:53:76:4F:E1:E5:9D:B4:4E:C7:01:26:40
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       03F4ABBC0149E8ABF0E4003A19F3BDD8F3E72EC5
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa
Signing time:             Tue 06 Jan 2026 19:13:06 +0000
ROA not before:           Tue 06 Jan 2026 19:08:06 +0000
ROA not after:            Tue 05 Jan 2027 19:13:06 +0000
asID:                     27839
IP address blocks:        190.106.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:ab:bc:01:49:e8:ab:f0:e4:00:3a:19:f3:bd:d8:f3:e7:2e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Jan  6 19:08:06 2026 GMT
            Not After : Jan  5 19:13:06 2027 GMT
        Subject: CN=376A1998012C29DA53764FE1E59DB44EC7012640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e4:3b:1f:84:4a:cb:04:61:39:93:ad:7b:08:
                    b7:fe:ec:3c:7f:05:1b:61:a0:89:00:b8:e2:9b:40:
                    c0:8d:95:dc:f2:f8:36:c5:22:ab:a3:ed:db:40:fb:
                    00:2d:ef:b4:4a:29:a7:f1:7a:fd:10:4d:93:5b:df:
                    a5:cf:4b:f9:7d:0d:54:86:e9:ba:70:c1:21:a7:53:
                    65:bc:b4:a3:ad:76:34:ee:3f:8f:20:d6:be:b3:f4:
                    b1:34:05:48:01:02:01:e4:79:fb:7a:1a:77:4f:e4:
                    1d:46:46:66:a1:f0:68:5f:c0:20:c9:36:6e:08:93:
                    2c:ee:81:f6:e5:10:46:ae:c4:60:ad:88:dc:ba:2c:
                    08:b2:57:ff:3e:7e:46:82:7f:49:71:dd:a7:5b:23:
                    76:ca:30:75:05:12:b5:c1:27:dc:90:55:0f:df:c2:
                    1e:22:0f:c5:74:8d:fa:22:43:19:69:d9:d7:a8:d9:
                    59:5f:28:5f:f1:12:fb:b3:3e:f9:bb:e9:79:ce:f3:
                    22:54:84:ce:22:71:d6:a2:d4:92:b0:13:be:34:06:
                    0c:cf:6f:0f:05:da:e8:0f:c6:f9:95:ae:a1:13:63:
                    f9:d4:cf:d8:de:61:36:de:fc:e0:56:19:b3:11:3e:
                    9d:39:45:65:2c:2f:19:82:2e:7a:ce:6b:a4:78:30:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6A:19:98:01:2C:29:DA:53:76:4F:E1:E5:9D:B4:4E:C7:01:26:40
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130362e3234302e302f32302d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:c1:d1:00:62:a8:d4:4f:d5:1c:98:8f:7a:44:06:ea:2d:0c:
         a4:9f:53:0b:0f:c0:8a:50:56:52:42:4b:09:0c:8f:c6:82:01:
         97:4f:31:49:64:38:e3:9a:07:34:43:9a:65:7a:8b:78:c3:3f:
         fd:cf:f9:fa:65:29:61:9a:92:f5:16:a6:82:b7:fc:5d:d2:45:
         70:50:69:66:68:b1:cc:b6:71:cc:30:69:94:92:79:1b:8a:e1:
         c9:3d:65:4b:79:14:8b:72:50:e3:27:47:f8:4f:8e:f2:9d:15:
         1f:ad:f7:c7:48:b3:66:b3:55:5d:b8:ff:84:09:91:7d:17:75:
         9b:3c:0f:d0:57:c3:17:bc:1f:b4:16:00:b9:cb:24:78:e8:fb:
         e4:18:84:58:a4:51:44:e9:4c:7a:c6:30:5c:01:5d:63:3e:b7:
         d0:b6:ba:f1:78:af:2e:30:7c:8f:bb:e0:c6:c0:4d:ef:c7:29:
         e5:02:9e:49:f6:f8:0b:ab:09:4e:4e:95:33:4e:b8:e3:60:d9:
         a9:b4:6d:52:6d:ea:b9:23:05:08:b0:f7:af:49:b7:35:0b:49:
         54:7d:ba:19:39:26:97:29:d5:be:87:ed:7d:af:57:dd:6a:1c:
         73:1c:bc:d1:2d:61:13:bb:06:c1:25:b8:17:3f:5e:17:d3:fa:
         3c:dd:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:23 2026 by rpki-client