This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e392e302f32342d3332203d3e20323639393236.roa
File:                     3139302e38332e392e302f32342d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          aGbcDIlw6lCL8Kz9jn/yCTmO5Uf6zT8xbgFZ72oA1sA=
Subject key identifier:   AE:F3:DF:50:B6:3A:36:99:9D:F4:BB:B1:20:C4:F7:2D:A7:F7:42:B3
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       EE44E80647FAB4280D7EFB669E2996A74DFCDE
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e392e302f32342d3332203d3e20323639393236.roa
Signing time:             Tue 06 Jan 2026 19:24:23 +0000
ROA not before:           Tue 06 Jan 2026 19:19:23 +0000
ROA not after:            Tue 05 Jan 2027 19:24:23 +0000
asID:                     269926
IP address blocks:        190.83.9.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ee:44:e8:06:47:fa:b4:28:0d:7e:fb:66:9e:29:96:a7:4d:fc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Jan  6 19:19:23 2026 GMT
            Not After : Jan  5 19:24:23 2027 GMT
        Subject: CN=AEF3DF50B63A36999DF4BBB120C4F72DA7F742B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:36:e8:e6:79:a4:c3:3a:c3:91:61:f7:6f:
                    65:3b:f0:ab:c5:34:3a:78:ca:a8:ab:0a:3f:a2:d3:
                    96:d1:6f:99:75:62:46:c6:14:eb:ca:51:87:8a:2f:
                    c0:00:ca:a8:08:b4:a1:07:48:84:90:6c:5b:4e:d7:
                    57:a6:ab:dc:f1:7b:ed:bb:f4:b7:ce:c8:6a:c6:3e:
                    6f:85:b4:69:f8:53:14:b6:e8:ea:8f:db:2b:59:d9:
                    95:b9:c9:0f:3c:77:4d:1b:66:7b:5f:34:78:e6:55:
                    15:8e:d5:4a:7c:6a:97:d3:d0:8b:e2:44:28:0a:4e:
                    d4:55:77:35:a6:03:2a:31:2f:0c:ca:f5:6c:eb:69:
                    eb:c6:57:30:6c:d3:0d:f6:0c:4b:01:61:7a:3b:5c:
                    d4:f6:8a:bc:59:11:cf:0d:3d:39:b2:85:a1:45:19:
                    0a:24:b3:c9:93:5b:31:93:88:12:f1:a3:7c:67:82:
                    65:8d:b7:98:8b:45:87:69:20:da:6f:7a:9e:5e:e8:
                    41:72:ef:ef:3b:fb:f9:c5:86:c7:fd:1a:de:c3:66:
                    11:8a:3f:b2:0b:8d:67:a8:53:6f:02:57:cd:d3:d6:
                    b7:d2:15:ae:77:c4:79:93:32:c7:ed:30:46:17:a1:
                    8c:68:ce:a1:db:f8:b0:91:b7:75:36:94:ee:22:a3:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F3:DF:50:B6:3A:36:99:9D:F4:BB:B1:20:C4:F7:2D:A7:F7:42:B3
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e392e302f32342d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:df:8b:7f:0e:e8:e1:df:72:da:b1:76:5e:66:e3:b9:d3:
         c8:68:63:76:59:17:f1:51:11:36:4d:8c:5f:26:c8:fa:ec:cd:
         f0:88:97:3d:38:45:85:51:3e:7d:e1:94:b7:c8:f4:bc:25:a4:
         6f:71:8f:a9:d5:9c:41:4a:e3:08:79:7e:4b:5a:8b:ac:e3:81:
         28:05:aa:b0:5f:0f:3d:22:01:c7:fb:e1:16:f7:b0:f6:38:92:
         25:fb:78:4d:8e:ce:a5:2c:fc:09:f0:9c:e7:38:ca:18:5b:54:
         23:07:01:a7:ac:35:06:e8:da:98:82:d8:76:6d:a1:d5:8c:5a:
         87:ed:c6:3b:92:5d:72:8a:bd:b8:cf:67:27:1a:76:de:3e:c9:
         dc:d3:96:c3:42:de:bb:45:71:6b:9f:ca:ad:f6:77:c3:9f:74:
         89:a9:e2:60:7c:54:6b:75:02:b6:61:11:16:cd:94:b0:cc:65:
         6e:83:df:46:4d:25:e2:46:13:cd:75:b7:3e:78:ef:18:ea:6c:
         06:7c:d9:1b:a4:be:20:f6:32:b2:99:f8:c1:aa:45:f7:f3:c6:
         f5:e3:53:1e:9d:e8:25:76:9d:9b:a0:ff:0b:3b:4b:fb:a4:b2:
         c9:3b:48:9d:c1:b9:65:a0:63:c3:2a:08:93:c0:87:de:b4:37:
         cc:05:40:31
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAO5E6AZH+rQoDX77Zp4plqdN/N4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDQ0VDNDNBOTJCNEJDQzlCNzkyRDc1N0M3MTZGOTND
NTEzM0I2RjAeFw0yNjAxMDYxOTE5MjNaFw0yNzAxMDUxOTI0MjNaMDMxMTAvBgNV
BAMTKEFFRjNERjUwQjYzQTM2OTk5REY0QkJCMTIwQzRGNzJEQTdGNzQyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFRzbo5nmkwzrDkWH3b2U78KvF
NDp4yqirCj+i05bRb5l1YkbGFOvKUYeKL8AAyqgItKEHSISQbFtO11emq9zxe+27
9LfOyGrGPm+FtGn4UxS26OqP2ytZ2ZW5yQ88d00bZntfNHjmVRWO1Up8apfT0Ivi
RCgKTtRVdzWmAyoxLwzK9WzraevGVzBs0w32DEsBYXo7XNT2irxZEc8NPTmyhaFF
GQoks8mTWzGTiBLxo3xngmWNt5iLRYdpINpvep5e6EFy7+87+/nFhsf9Gt7DZhGK
P7ILjWeoU28CV83T1rfSFa53xHmTMsftMEYXoYxozqHb+LCRt3U2lO4io+b5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrvPfULY6Npmd9LuxIMT3Laf3QrMwHwYDVR0j
BBgwFoAUKMzsQ6krS8ybeS11fHFvk8UTO28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDgxQkQ1RjYwOTZBNkFENTIxNzgyODZDRDY5MkJGQTMz
NTAwNkNCMTZERjBFNUZCQjhFMUNBOTczNzJFODAwLzAvMjhDQ0VDNDNBOTJCNEJD
QzlCNzkyRDc1N0M3MTZGOTNDNTEzM0I2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOENDRUM0M0E5MkI0QkNDOUI3
OTJENzU3QzcxNkY5M0M1MTMzQjZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ4MUJENUY2MDk2QTZBRDUyMTc4Mjg2Q0Q2OTJCRkEzMzUwMDZDQjE2
REYwRTVGQkI4RTFDQTk3MzcyRTgwMC8wLzMxMzkzMDJlMzgzMzJlMzkyZTMwMmYz
MjM0MmQzMzMyMjAzZDNlMjAzMjM2MzkzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+UwkwDQYJ
KoZIhvcNAQELBQADggEBAG8234t/Dujh33LasXZeZuO508hoY3ZZF/FRETZNjF8m
yPrszfCIlz04RYVRPn3hlLfI9LwlpG9xj6nVnEFK4wh5fktai6zjgSgFqrBfDz0i
Acf74Rb3sPY4kiX7eE2OzqUs/AnwnOc4yhhbVCMHAaesNQbo2piC2HZtodWMWoft
xjuSXXKKvbjPZycadt4+ydzTlsNC3rtFcWufyq32d8OfdImp4mB8VGt1ArZhERbN
lLDMZW6D30ZNJeJGE811tz547xjqbAZ82RukviD2MrKZ+MGqRffzxvXjUx6d6CV2
nZug/ws7S/ukssk7SJ3BuWWgY8MqCJPAh960N8wFQDE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:13 2026 by rpki-client