This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
File:                     3139302e3130372e36342e302f32302d3232203d3e203237393032.roa (raw, json)
Hash identifier:          X5VPliPZhNIHyd7qlPA8cACj3cprJPxFbOgX63TOkAY=
Subject key identifier:   70:DF:E0:82:E7:DC:B7:D4:3D:C4:64:F7:A3:E3:1D:7C:51:4A:46:17
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       1798851CBE5AA4C80A31B74B8DCC64B3A88F441C
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
Signing time:             Tue 06 Jan 2026 19:35:44 +0000
ROA not before:           Tue 06 Jan 2026 19:30:44 +0000
ROA not after:            Tue 05 Jan 2027 19:35:44 +0000
asID:                     27902
IP address blocks:        190.107.64.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:98:85:1c:be:5a:a4:c8:0a:31:b7:4b:8d:cc:64:b3:a8:8f:44:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Jan  6 19:30:44 2026 GMT
            Not After : Jan  5 19:35:44 2027 GMT
        Subject: CN=70DFE082E7DCB7D43DC464F7A3E31D7C514A4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:44:73:77:e8:35:ee:c6:c8:ac:92:32:49:
                    64:e2:15:ad:ac:77:56:b6:bb:17:57:97:7d:f2:9c:
                    96:46:2f:59:73:c2:40:f5:ae:54:a2:4e:ff:f0:f7:
                    71:c5:ed:e5:90:a0:fb:ca:36:c7:11:46:ae:8b:06:
                    a8:f7:62:21:f3:50:4b:51:85:b8:00:df:e1:9f:b8:
                    2f:34:fe:ce:f2:37:c2:3a:6e:0a:e8:0a:38:88:a6:
                    cb:28:20:61:43:62:dd:30:46:a4:33:14:9c:71:b8:
                    ad:8a:f4:17:27:9e:55:29:80:6e:6c:20:f9:4d:ac:
                    3f:3f:54:c3:43:5b:a9:fb:c8:06:68:9e:37:c2:1d:
                    89:cc:3a:8b:86:18:da:d4:08:92:b3:c9:99:9c:cb:
                    b5:f5:08:3d:4e:58:ba:7f:04:dc:28:9f:c5:8b:30:
                    e2:b2:25:b6:35:41:76:a4:6d:52:ab:3a:4e:24:94:
                    ef:d5:d6:3f:ce:1a:f9:73:16:68:30:2a:ef:9a:7b:
                    43:28:fb:61:b1:63:b5:d6:29:94:5d:02:3b:06:a8:
                    4d:54:68:83:94:18:bd:4b:1c:2f:c2:0f:76:9f:3d:
                    db:0d:cd:1c:2c:bc:e8:4c:a7:25:07:1b:d9:d4:53:
                    fe:d1:4c:99:24:86:14:10:8a:3d:af:6f:40:6b:f1:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:E0:82:E7:DC:B7:D4:3D:C4:64:F7:A3:E3:1D:7C:51:4A:46:17
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:c6:22:00:15:b1:c4:49:bb:c5:f4:01:c1:ca:89:a6:d3:
         50:68:55:21:3f:9d:d3:bd:36:86:3e:b8:53:8f:5d:4a:00:1a:
         fa:7f:6b:d0:c5:f3:1d:b0:d9:c2:27:4c:bc:38:c5:59:03:0d:
         63:55:d5:ac:60:df:4b:23:f3:8f:25:7d:9e:4a:6c:50:50:23:
         20:28:9a:1e:ad:40:e9:b8:bf:92:66:1f:16:13:bb:33:9f:15:
         66:ce:18:e8:c5:02:06:fb:f2:38:77:97:25:a4:4a:1f:61:09:
         4c:ae:01:83:34:2a:fe:0f:5c:15:15:02:37:60:2e:6a:3b:06:
         d5:d5:73:c9:62:67:31:c9:31:94:55:b9:39:32:3d:5d:ef:d8:
         13:4b:e8:50:bb:72:ce:0b:65:8d:d4:c4:d4:83:e3:c9:e4:66:
         dc:f3:c4:99:d4:e6:ca:96:f7:96:c1:0d:7c:67:46:9a:e5:dc:
         13:27:f8:7d:46:16:07:55:8f:8a:c7:1c:db:07:38:d1:02:95:
         e2:55:ca:f5:3d:e9:f2:10:73:23:84:dc:6f:6e:84:eb:ef:bf:
         b8:3a:61:8b:2c:c3:42:df:26:fd:e5:90:64:26:bd:f3:5d:66:
         0c:15:5c:b5:61:de:0a:b8:0c:c3:23:aa:4b:f8:ff:ed:7e:0a:
         d5:53:1b:d5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUF5iFHL5apMgKMbdLjcxks6iPRBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGMzhDNkNCODNBMzMwQ0M2RDVBODczODNDNjEyMzE5
RUE2MjY3MzAeFw0yNjAxMDYxOTMwNDRaFw0yNzAxMDUxOTM1NDRaMDMxMTAvBgNV
BAMTKDcwREZFMDgyRTdEQ0I3RDQzREM0NjRGN0EzRTMxRDdDNTE0QTQ2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolERzd+g17sbIrJIySWTiFa2s
d1a2uxdXl33ynJZGL1lzwkD1rlSiTv/w93HF7eWQoPvKNscRRq6LBqj3YiHzUEtR
hbgA3+GfuC80/s7yN8I6bgroCjiIpssoIGFDYt0wRqQzFJxxuK2K9BcnnlUpgG5s
IPlNrD8/VMNDW6n7yAZonjfCHYnMOouGGNrUCJKzyZmcy7X1CD1OWLp/BNwon8WL
MOKyJbY1QXakbVKrOk4klO/V1j/OGvlzFmgwKu+ae0Mo+2GxY7XWKZRdAjsGqE1U
aIOUGL1LHC/CD3afPdsNzRwsvOhMpyUHG9nUU/7RTJkkhhQQij2vb0Br8R0JAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcN/ggufct9Q9xGT3o+MdfFFKRhcwHwYDVR0j
BBgwFoAU/vOMbLg6MwzG1ahzg8YSMZ6mJnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzM2MTc4OTI1MEJBOTlGRjYzNjRGQkNGRDlDQkZGREY4
MDBCNDlDNkQxQTFCNDJDNTFFNEE3MDE2QkUxOTAyLzAvRkVGMzhDNkNCODNBMzMw
Q0M2RDVBODczODNDNjEyMzE5RUE2MjY3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRUYzOEM2Q0I4M0EzMzBDQzZE
NUE4NzM4M0M2MTIzMTlFQTYyNjczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDczNjE3ODkyNTBCQTk5RkY2MzY0RkJDRkQ5Q0JGRkRGODAwQjQ5QzZE
MUExQjQyQzUxRTRBNzAxNkJFMTkwMi8wLzMxMzkzMDJlMzEzMDM3MmUzNjM0MmUz
MDJmMzIzMDJkMzIzMjIwM2QzZTIwMzIzNzM5MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL5rQDAN
BgkqhkiG9w0BAQsFAAOCAQEAfnLGIgAVscRJu8X0AcHKiabTUGhVIT+d0702hj64
U49dSgAa+n9r0MXzHbDZwidMvDjFWQMNY1XVrGDfSyPzjyV9nkpsUFAjICiaHq1A
6bi/kmYfFhO7M58VZs4Y6MUCBvvyOHeXJaRKH2EJTK4BgzQq/g9cFRUCN2AuajsG
1dVzyWJnMckxlFW5OTI9Xe/YE0voULtyzgtljdTE1IPjyeRm3PPEmdTmypb3lsEN
fGdGmuXcEyf4fUYWB1WPiscc2wc40QKV4lXK9T3p8hBzI4Tcb26E6++/uDphiyzD
Qt8m/eWQZCa9811mDBVctWHeCrgMwyOqS/j/7X4K1VMb1Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:47 2026 by rpki-client