This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e36342e302f31382d3234203d3e203237363635.roa
File:                     3139302e3231332e36342e302f31382d3234203d3e203237363635.roa (raw, json)
Hash identifier:          mXIg2P/HOJQ/GZwCMSZG/Ionl19pr87kcYOzaiKzKZQ=
Subject key identifier:   FF:19:30:74:F0:AE:88:2B:FA:5C:69:2A:99:77:42:EC:F7:6E:77:E3
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       22C9D8B421AE9CD1B2A618D81B81544040260B00
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e36342e302f31382d3234203d3e203237363635.roa
Signing time:             Tue 06 Jan 2026 19:30:52 +0000
ROA not before:           Tue 06 Jan 2026 19:25:52 +0000
ROA not after:            Tue 05 Jan 2027 19:30:52 +0000
asID:                     27665
IP address blocks:        190.213.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c9:d8:b4:21:ae:9c:d1:b2:a6:18:d8:1b:81:54:40:40:26:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Jan  6 19:25:52 2026 GMT
            Not After : Jan  5 19:30:52 2027 GMT
        Subject: CN=FF193074F0AE882BFA5C692A997742ECF76E77E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fc:fc:29:94:07:a9:3f:e4:b4:3e:50:b3:f5:
                    3c:69:cf:14:fb:0b:c6:9b:22:50:ed:57:30:fe:c8:
                    2c:70:a2:c3:fb:e4:c4:4d:94:7a:52:f2:75:c4:6e:
                    1d:d1:28:83:8a:39:e9:29:aa:86:7a:e7:e9:23:7c:
                    b7:69:81:c6:39:a9:b5:fd:18:06:d1:f8:2c:62:0e:
                    f0:f7:2f:94:35:a7:09:2b:f5:53:eb:25:e0:2d:25:
                    de:e6:12:6e:b5:f4:76:f7:b8:dd:9c:b7:93:d1:99:
                    bd:e5:ba:c7:42:ed:e0:f4:23:6f:0f:6a:67:31:21:
                    2d:4a:de:70:f5:c9:19:b7:4f:4a:b6:20:9c:c6:2e:
                    c7:0b:f1:db:19:08:a9:fe:3d:85:c4:63:11:79:10:
                    66:94:03:d8:2f:27:c3:a1:c6:19:b0:7c:cc:74:cb:
                    4b:5e:0a:91:51:7f:74:7b:9f:24:33:df:e0:20:c9:
                    ca:54:50:be:5f:3e:12:7d:a9:cb:2c:e8:07:b7:6b:
                    38:00:62:d7:73:70:76:68:b0:9b:13:e4:1b:cc:d8:
                    99:81:33:96:33:14:4d:f2:1e:e7:13:f6:9e:e2:a4:
                    4b:1b:04:b5:87:66:9d:d7:81:be:93:77:29:4e:fe:
                    ed:8a:7d:da:61:29:91:b9:bd:36:ad:39:31:72:97:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:30:74:F0:AE:88:2B:FA:5C:69:2A:99:77:42:EC:F7:6E:77:E3
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e3231332e36342e302f31382d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.213.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:5a:e3:a8:a2:03:11:40:33:3b:7c:56:35:4c:ba:87:63:
         24:07:2b:e7:39:36:0d:65:5d:41:cc:79:8c:d4:dc:cd:dc:e3:
         9f:86:2c:42:60:3a:47:99:69:27:df:50:e2:ac:fd:9e:83:7b:
         3d:00:6f:ec:77:af:2e:0d:38:94:24:3c:72:33:1c:a1:ef:4c:
         2c:29:d8:69:ed:02:ee:59:09:9f:36:8c:a3:75:ed:01:d0:20:
         c3:aa:de:51:64:56:67:8d:34:44:3f:d5:f4:57:17:6b:5c:f6:
         60:5d:d0:8c:20:8e:81:e0:a7:aa:76:20:f1:7d:aa:54:53:83:
         6f:57:3e:81:85:d9:a9:33:18:f5:34:7a:6f:dc:40:16:55:20:
         cb:74:d2:0c:a4:09:ab:4a:0d:2b:38:c0:47:0f:19:46:a1:ce:
         90:d0:f4:a1:1e:6d:de:76:5d:75:e2:35:7e:10:1c:c7:0d:09:
         7b:cf:5c:2d:50:63:4b:ec:70:8b:ea:25:82:90:05:ab:f9:f9:
         9e:e4:a5:4e:0a:2a:11:0b:98:ba:b9:b4:4f:40:8f:64:17:e2:
         91:3f:6c:5d:5e:35:57:0a:eb:23:bb:7d:5d:98:c9:cc:28:f7:
         ee:8b:90:f4:e2:c4:ac:e1:8b:4a:1e:27:ba:d0:b8:ce:9f:d3:
         e5:e0:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:54 2026 by rpki-client