This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
File:                     3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa (raw, json)
Hash identifier:          TAFYVmo/SvTMOtsJEGeVDBYA9YbIqL6g+frHDLIkvTk=
Subject key identifier:   F6:2F:4C:AA:97:F4:09:C4:E3:15:AE:CD:BB:5F:89:E8:16:AA:13:0E
Certificate issuer:       /CN=98B8039082392EEC18A02E434A8730B491087BE7
Certificate serial:       74A4B2AEB7110FBF6FE0EC3D8DD94C739494BAE3
Authority key identifier: 98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa
Signing time:             Tue 06 Jan 2026 19:39:33 +0000
ROA not before:           Tue 06 Jan 2026 19:34:33 +0000
ROA not after:            Tue 05 Jan 2027 19:39:33 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a4:b2:ae:b7:11:0f:bf:6f:e0:ec:3d:8d:d9:4c:73:94:94:ba:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B8039082392EEC18A02E434A8730B491087BE7
        Validity
            Not Before: Jan  6 19:34:33 2026 GMT
            Not After : Jan  5 19:39:33 2027 GMT
        Subject: CN=F62F4CAA97F409C4E315AECDBB5F89E816AA130E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:09:41:4a:40:bd:6a:24:cd:11:09:fb:0d:
                    51:d6:3a:3a:65:f0:1c:b3:79:76:1c:91:1a:0e:e4:
                    ed:9b:b6:80:85:ef:b1:e6:c1:a6:fd:e4:45:51:18:
                    15:73:69:a4:dd:bf:50:d4:87:50:b7:03:a0:54:6f:
                    c6:1f:b9:aa:a3:93:f9:97:44:ea:e0:72:32:1f:51:
                    cf:94:9e:17:94:1c:e7:e5:0a:16:98:60:15:cf:f9:
                    62:73:4f:36:83:4e:f4:64:47:85:19:72:78:c2:28:
                    b1:07:ff:36:ce:69:bc:93:5e:98:96:76:1d:ea:24:
                    d3:91:02:93:99:95:5c:0a:7a:58:33:02:e0:7a:a3:
                    62:4d:43:c4:54:ed:81:55:45:ce:06:8b:56:2e:e9:
                    4b:1d:c7:86:7e:9c:d2:eb:e2:21:90:fa:11:a0:49:
                    50:ec:fc:f9:4f:4f:86:3c:be:c7:14:dd:fd:84:65:
                    c9:8c:43:ba:26:5b:2b:2d:f2:7c:b3:dc:05:03:c6:
                    e2:97:fa:c7:63:a3:15:86:68:15:39:46:e5:8a:e3:
                    ce:33:ce:3e:80:ea:f5:5b:f6:2a:38:94:09:e4:b8:
                    fc:c0:1d:23:b8:5b:59:cb:04:18:79:70:3b:e4:b0:
                    b6:20:b8:d8:51:85:1c:10:05:f8:01:e2:39:45:02:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:4C:AA:97:F4:09:C4:E3:15:AE:CD:BB:5F:89:E8:16:AA:13:0E
            X509v3 Authority Key Identifier:
                keyid:98:B8:03:90:82:39:2E:EC:18:A0:2E:43:4A:87:30:B4:91:08:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/98B8039082392EEC18A02E434A8730B491087BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B8039082392EEC18A02E434A8730B491087BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D89ADC1C97EF5C2B0FD6B4BFD13C103598935BE547A9250DFE8EBC37AC869063/0/3139302e38332e3130342e302f32322d3234203d3e20323639393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:8a:d1:94:e4:62:14:48:9e:0e:c6:6e:84:d7:00:4d:6a:ea:
         6f:60:88:02:11:71:2d:c9:b4:01:c1:0d:8c:58:93:1d:c3:58:
         c7:b5:ec:a1:8f:a6:49:80:c5:df:73:b6:6d:55:57:85:59:94:
         d0:dd:0d:e8:68:dd:49:9a:8b:60:81:e8:c9:cc:61:bf:b5:bb:
         26:17:58:f5:c4:93:d6:63:d5:95:17:c8:cd:2b:58:aa:eb:61:
         0e:69:1a:34:b6:03:95:42:33:f9:4b:eb:0a:ae:34:98:59:8e:
         01:ac:c2:90:73:67:4b:10:a6:3c:ff:49:fd:ed:63:20:05:a5:
         d7:40:be:cd:f9:41:47:3c:e2:40:91:10:f9:6b:94:01:21:e8:
         40:04:5a:32:47:da:e6:51:81:c2:20:4e:1a:40:77:65:26:ff:
         ad:ae:0b:60:3e:f5:d4:4c:58:37:02:71:78:8f:4c:04:45:5e:
         0b:30:d6:5b:0f:fc:19:e6:5e:81:1b:f3:1c:d1:69:0f:2b:9f:
         0a:b3:89:0f:2e:8e:88:00:18:fd:e9:a2:bb:be:ef:22:77:1d:
         97:9c:52:3b:bd:85:53:c7:45:ab:cf:3f:af:a0:37:0b:9d:55:
         97:66:ec:f3:b2:fc:46:93:20:20:6a:2e:df:3e:ce:44:0f:75:
         d0:4b:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:55 2026 by rpki-client