This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203436313938.roa
File:                     3139302e382e33322e302f32302d3234203d3e203436313938.roa (raw, json)
Hash identifier:          EI7kx8gqtcZhDDJNN6IT/xmPqTCVOm33rF7lEsvsIuU=
Subject key identifier:   06:AD:83:E5:E4:CD:F9:CC:F2:E9:89:0C:F4:4C:4D:8D:2A:C8:DF:B9
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       58970A13301B0000258664E33A0DB2704852D856
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203436313938.roa
Signing time:             Tue 06 Jan 2026 19:12:18 +0000
ROA not before:           Tue 06 Jan 2026 19:07:18 +0000
ROA not after:            Tue 05 Jan 2027 19:12:18 +0000
asID:                     46198
IP address blocks:        190.8.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:97:0a:13:30:1b:00:00:25:86:64:e3:3a:0d:b2:70:48:52:d8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Jan  6 19:07:18 2026 GMT
            Not After : Jan  5 19:12:18 2027 GMT
        Subject: CN=06AD83E5E4CDF9CCF2E9890CF44C4D8D2AC8DFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:4c:52:68:f0:4a:93:1d:9d:3b:1b:3d:76:
                    b1:06:88:35:96:81:11:39:e0:a2:09:00:e9:aa:2b:
                    d0:6b:bc:2d:87:04:57:44:0b:32:4f:df:66:ff:53:
                    54:73:43:6a:20:4a:b9:3c:7e:df:8a:1f:39:00:ac:
                    cb:1e:6f:32:6c:a9:2f:21:ce:34:9d:55:f7:ff:dc:
                    46:b9:0c:e8:96:8c:97:c5:cd:e6:36:47:b6:52:b5:
                    54:93:1d:02:98:d8:16:2e:3e:54:20:ff:59:e0:a3:
                    1a:e7:4b:60:81:f6:d2:7b:61:31:88:27:09:9b:c2:
                    01:36:35:df:cc:e2:f1:87:7a:07:61:91:c5:a3:fd:
                    07:35:b2:b8:61:a1:b7:a6:c3:37:af:50:15:a4:a0:
                    b5:df:76:6d:f9:26:db:7a:4f:36:1e:75:d9:da:df:
                    89:0c:c1:54:c8:15:fa:81:49:6e:3b:c6:d9:71:e1:
                    73:76:be:9e:f8:55:e3:9c:b2:69:b9:35:00:8c:ea:
                    e7:f8:98:91:73:fa:90:e9:7e:2e:94:c0:51:db:97:
                    03:7d:28:5f:74:c7:16:37:22:8d:dc:c4:f6:00:ec:
                    cf:82:06:1c:86:f1:58:9f:bc:ba:a6:a7:12:b1:77:
                    5a:db:53:57:3f:9a:23:bf:5d:2e:10:61:85:40:5f:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:83:E5:E4:CD:F9:CC:F2:E9:89:0C:F4:4C:4D:8D:2A:C8:DF:B9
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/3139302e382e33322e302f32302d3234203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:bd:6c:f9:4d:3f:c1:bd:16:e2:0a:f6:b9:ce:96:32:e7:
         32:e2:7a:f0:04:b3:ad:77:00:b6:90:d7:f7:d2:8e:a8:d9:cc:
         b5:e6:b5:e6:fd:54:ee:5e:63:e0:24:0f:bf:f1:48:e7:67:e6:
         fe:c1:e3:66:7c:19:05:99:1b:4f:71:9c:25:6f:f6:76:88:89:
         a5:10:84:b9:c2:5c:ef:8d:a6:75:df:31:bf:f3:89:a2:58:3a:
         72:f8:55:c5:58:0a:9a:8a:07:d9:bc:5a:ab:96:e6:38:7a:a9:
         87:eb:e1:b4:55:3e:8a:79:dd:4d:a6:0e:43:f3:a9:de:45:fc:
         f0:c4:73:d3:b2:48:02:3c:11:53:cf:3f:78:8e:4e:22:bd:53:
         c0:1f:1b:27:fe:03:00:a0:34:58:0b:69:8e:9b:c9:8e:1d:22:
         2b:58:cf:91:7b:ff:ce:12:9f:11:17:cc:52:81:21:1b:1d:31:
         93:7e:66:56:b5:a1:b8:fc:86:45:f4:1a:bd:87:8b:76:c1:30:
         da:b7:cb:78:b5:22:65:43:d8:a4:00:34:50:bf:89:9c:4c:50:
         8e:e2:8d:9c:8d:33:69:86:2c:f3:45:4f:b4:71:c3:42:e3:07:
         69:54:a4:43:fb:6b:6b:02:68:04:82:86:06:b6:43:2b:fa:de:
         b5:19:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:12 2026 by rpki-client