This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
File:                     3139302e382e34382e302f32302d3234203d3e203532343035.roa (raw, json)
Hash identifier:          Esa1A+vBMnbEDcs1BDTsun5Q+Sc2rdRZjbRBj+L22fg=
Subject key identifier:   F8:DF:A9:CE:5C:E7:D3:44:6D:FE:15:A5:D3:76:54:C8:E5:71:8B:80
Certificate issuer:       /CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
Certificate serial:       70DB1355B403991DED1185A13B9175C8A792752C
Authority key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa
Signing time:             Tue 06 Jan 2026 19:03:40 +0000
ROA not before:           Tue 06 Jan 2026 18:58:40 +0000
ROA not after:            Tue 05 Jan 2027 19:03:40 +0000
asID:                     52405
IP address blocks:        190.8.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:13:55:b4:03:99:1d:ed:11:85:a1:3b:91:75:c8:a7:92:75:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
        Validity
            Not Before: Jan  6 18:58:40 2026 GMT
            Not After : Jan  5 19:03:40 2027 GMT
        Subject: CN=F8DFA9CE5CE7D3446DFE15A5D37654C8E5718B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:75:f5:0e:24:3c:4f:b8:5b:02:2e:5c:43:
                    fb:10:ef:9d:3a:1d:32:f4:71:38:d9:f7:f8:fb:6f:
                    1c:8c:8b:45:c5:20:da:f7:df:c5:66:e3:01:7a:57:
                    9f:3c:7c:2c:5d:4b:06:5a:4c:bf:32:a1:5b:68:42:
                    61:dd:d9:a4:b2:b0:ec:70:78:c5:3c:60:5d:19:05:
                    5b:bc:44:cb:91:8d:35:c7:54:f0:46:28:cb:ad:d9:
                    cb:73:73:8b:70:0c:aa:1c:86:a9:c1:cc:03:46:67:
                    1b:3d:09:50:08:e7:0c:29:df:f8:fb:e9:d5:ef:f3:
                    77:ae:f5:c3:3b:b8:2f:d6:be:8c:8c:d1:84:9c:11:
                    81:a5:98:9c:09:da:50:b2:b4:a3:2e:ce:65:7e:d9:
                    37:53:56:44:a3:84:63:25:e3:e0:36:38:ae:5b:4f:
                    f1:92:86:a5:a0:ad:f8:7c:55:78:7c:99:67:7c:33:
                    44:96:f7:fd:68:f0:1f:2a:b4:75:3e:d0:c6:16:bd:
                    90:d9:5a:e0:e7:a5:4b:5f:58:26:7c:00:af:7d:2b:
                    c4:10:bc:9b:d5:cb:b0:39:24:c2:90:eb:0a:e8:2c:
                    a8:06:07:33:c1:2c:bb:6b:87:97:e3:5e:5c:e7:fa:
                    d2:6d:d7:b2:30:f3:42:1f:3b:cb:01:f1:c8:b8:7f:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:A9:CE:5C:E7:D3:44:6D:FE:15:A5:D3:76:54:C8:E5:71:8B:80
            X509v3 Authority Key Identifier:
                keyid:C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3139302e382e34382e302f32302d3234203d3e203532343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:21:26:9b:26:da:dc:11:a1:8b:63:23:1e:ab:ab:0a:9b:
         fa:90:86:f9:a8:01:50:11:44:e5:13:e1:1e:df:2b:bd:14:a5:
         cc:06:72:f9:b1:eb:3f:a3:18:63:87:3e:1b:b7:56:0a:07:5b:
         a5:17:48:65:9d:44:90:1f:bf:a4:61:cc:5f:1b:5e:2e:a9:49:
         3d:57:23:21:65:47:6b:c8:ef:de:82:c3:70:d6:7f:6b:c2:02:
         e0:40:53:e9:87:77:78:17:d2:25:2a:93:4e:1a:25:04:2a:32:
         c0:3b:5a:0b:e8:42:bf:a7:92:3b:8d:84:0a:df:a3:fe:e9:5b:
         68:89:3b:ed:e2:be:d4:7d:0f:7a:bf:4d:ad:7b:89:ad:8c:eb:
         f9:0c:e5:ab:42:19:2b:78:e5:5e:eb:bd:dd:31:b5:ae:be:0f:
         72:7d:d3:79:d3:9b:16:d2:7e:b9:a9:a5:0a:9c:f0:09:97:4c:
         70:c6:af:5c:db:76:bf:07:74:c0:8d:29:ee:8a:27:c6:b3:8c:
         3d:d7:63:12:df:b1:45:47:14:bb:ae:1b:47:5a:ed:cc:7d:e3:
         ac:b7:6e:bf:8f:df:4c:56:ee:96:fa:34:b5:61:60:ec:0c:3f:
         f8:b1:0b:07:7a:97:44:49:0b:95:5c:4b:f6:d9:16:c7:bf:ff:
         d1:2c:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:36 2026 by rpki-client