This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e2037343138.roa
File:                     3139302e32322e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          BqgUd5lTi5WYBMjzy6RELhTUMH0Z7fcotjlTC89OPZg=
Subject key identifier:   6D:8B:18:BB:75:FA:98:91:48:EB:E5:4E:CD:2D:10:AA:C6:E5:39:FA
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       276D275022DABB615505587E924149F54D9DD57E
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:50 +0000
ROA not before:           Tue 06 Jan 2026 19:19:50 +0000
ROA not after:            Tue 05 Jan 2027 19:24:50 +0000
asID:                     7418
IP address blocks:        190.22.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6d:27:50:22:da:bb:61:55:05:58:7e:92:41:49:f5:4d:9d:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:50 2026 GMT
            Not After : Jan  5 19:24:50 2027 GMT
        Subject: CN=6D8B18BB75FA989148EBE54ECD2D10AAC6E539FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:8f:9d:34:d7:21:5c:19:50:17:2b:51:ae:
                    fd:a8:61:11:5a:c9:08:de:96:d5:a2:e9:36:bb:83:
                    b0:e1:3f:6a:87:9a:15:05:84:b6:a0:f8:83:cb:c7:
                    a3:ea:1c:7e:c3:af:82:10:12:6c:c6:22:81:e8:e9:
                    0f:8b:2e:7f:7a:a9:f5:d1:c2:1a:ca:4c:94:93:71:
                    32:e0:b9:1d:0a:9a:8d:80:36:06:9f:24:40:9f:ad:
                    fb:7a:0b:68:e2:b7:71:fd:d4:79:24:42:3d:a4:ef:
                    d3:89:0d:81:2b:1a:64:5c:b6:ed:8f:d8:51:09:46:
                    0d:96:b1:02:73:64:e3:aa:56:53:28:93:2a:7e:57:
                    ad:5f:34:f6:17:3a:25:70:bd:62:3f:bc:ad:d9:0d:
                    e5:80:40:02:10:97:94:f8:c5:ea:c4:0f:b4:f1:a3:
                    a2:d4:f7:84:a9:22:c9:66:f8:11:29:f6:d3:e2:b0:
                    12:20:6b:85:7b:53:e8:d9:fb:62:4c:8d:50:2e:62:
                    52:62:d9:e3:66:8e:66:6f:6d:ff:b6:b0:f8:09:eb:
                    02:10:f1:97:a1:be:95:09:1e:ee:d5:00:21:0a:85:
                    d4:f6:2d:ac:3e:06:48:02:fa:91:79:75:d3:1f:42:
                    01:b5:50:b1:1d:64:da:2f:1d:9d:cc:a7:18:34:00:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:18:BB:75:FA:98:91:48:EB:E5:4E:CD:2D:10:AA:C6:E5:39:FA
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32322e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:1b:17:57:7f:0b:ff:ba:7c:b0:9a:a8:51:39:23:4b:5c:
         c0:35:3c:17:cb:6c:f8:ea:2e:e0:c1:bd:b4:c6:60:f9:c4:d1:
         d9:32:e0:f8:b7:0e:67:df:22:8c:8c:3e:51:a8:b8:74:bb:88:
         18:71:43:d6:3a:f1:27:f4:2f:ab:22:b5:da:d2:01:2c:3a:98:
         d5:94:c1:04:97:89:bf:10:6d:10:27:a7:be:db:e1:ba:92:28:
         fa:74:02:9b:4a:b2:50:30:7f:e3:57:1f:c1:7b:77:76:e8:e2:
         a6:9e:9d:de:aa:34:6b:77:a9:16:30:29:35:38:f6:4e:3b:21:
         3b:98:01:fa:5c:6b:41:ac:fd:ab:74:e0:20:74:ec:11:70:f7:
         dc:86:6e:dd:81:f8:31:64:76:6e:eb:49:e4:96:6f:67:58:1a:
         30:92:46:a7:8e:46:64:b5:d0:a0:7c:d1:5e:d6:95:d2:61:0f:
         0e:bf:85:f3:55:fe:d7:44:a4:fd:d5:bb:1a:15:ca:79:f4:1d:
         78:cc:4a:b1:78:e9:8d:a1:6a:38:a8:d3:c4:1b:5f:20:5c:96:
         d9:5e:4c:ce:bc:10:0f:95:cb:a3:c3:82:44:e3:4f:1d:5f:4c:
         8b:77:e7:ce:ee:87:85:2c:c9:91:d2:a5:b9:de:3d:89:54:a4:
         7d:a5:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:42 2026 by rpki-client