This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa
File:                     3139302e36332e3231322e302f32322d3234203d3e203237373338.roa (raw, json)
Hash identifier:          VqhnKpGV48dZ5ARyaOjOUaoLXA0Ta2Tc+wJQVXbH3Wk=
Subject key identifier:   2A:B5:72:47:27:A3:B0:D5:59:A9:99:0E:07:93:67:FE:A1:C1:41:CD
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       691844523FCADBA7650A343F1E3D00DAF5DC2212
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa
Signing time:             Tue 06 Jan 2026 19:21:53 +0000
ROA not before:           Tue 06 Jan 2026 19:16:53 +0000
ROA not after:            Tue 05 Jan 2027 19:21:53 +0000
asID:                     27738
IP address blocks:        190.63.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:44:52:3f:ca:db:a7:65:0a:34:3f:1e:3d:00:da:f5:dc:22:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Jan  6 19:16:53 2026 GMT
            Not After : Jan  5 19:21:53 2027 GMT
        Subject: CN=2AB5724727A3B0D559A9990E079367FEA1C141CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:79:3b:cc:9f:96:09:22:0c:68:52:59:61:
                    5e:18:12:58:17:e8:bd:a8:e0:a3:da:d1:e3:3a:45:
                    fa:57:80:f5:df:1e:4b:a4:e8:21:a4:7a:1c:07:b4:
                    53:bb:ae:0a:e8:bc:b3:44:41:34:72:0b:ac:0c:a7:
                    d1:f1:01:9d:8f:41:50:99:c6:84:c9:cc:dc:08:c0:
                    47:0f:87:10:f0:13:a9:b1:bb:45:4e:fa:31:ce:70:
                    41:9e:99:12:1c:e3:40:51:c8:56:9d:7b:9d:2d:29:
                    75:2c:6f:db:53:8f:b9:4a:a8:ad:4d:b8:23:0b:a6:
                    60:14:be:be:4c:1f:71:83:d0:88:fa:3d:e7:ec:8c:
                    b6:6b:7b:d7:b9:af:ae:14:94:94:da:76:70:c1:de:
                    c9:ee:e5:53:df:08:49:5f:a2:37:69:67:01:94:39:
                    55:31:8a:cc:6f:12:cd:0c:87:4a:2a:4d:09:c3:1c:
                    68:54:5b:08:3b:2f:c8:6a:8e:b8:43:80:12:d4:1d:
                    c1:88:3f:aa:5c:de:fd:51:8e:12:9b:5a:83:7f:aa:
                    59:75:30:5a:40:97:0d:ab:a4:9a:fe:47:83:97:69:
                    6e:7b:4c:c0:5c:d8:d0:7a:13:cb:f8:96:ff:2e:39:
                    35:72:8c:14:2d:98:47:4c:c0:23:ed:5e:9a:2c:a5:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B5:72:47:27:A3:B0:D5:59:A9:99:0E:07:93:67:FE:A1:C1:41:CD
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231322e302f32322d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:25:e4:e4:61:57:e3:05:71:26:ab:4f:56:0a:99:0d:1b:
         1c:7c:d0:75:40:50:f0:c7:e6:6f:b0:e5:dd:18:89:55:bc:8c:
         c8:1e:99:ac:f1:fb:d3:ec:ea:06:a3:f9:fc:1e:97:e1:ba:ab:
         55:3d:ce:3e:a3:e8:f1:43:45:ed:5f:80:5a:3b:54:0f:43:91:
         93:e9:7c:63:11:3e:c9:1a:a4:a3:1f:cc:c1:a0:75:5c:d6:64:
         76:9f:83:c9:43:56:65:5b:c7:cb:ab:c5:f7:54:e3:df:46:b5:
         57:e1:11:e7:33:a8:fc:83:75:c1:7e:60:73:73:3e:7d:99:66:
         41:b3:44:a3:55:9a:94:44:06:f6:b8:4d:98:27:d1:4c:8f:92:
         44:80:b2:e7:bd:b8:2c:08:0e:1c:b8:eb:b5:80:f2:cc:80:45:
         c7:26:33:a1:c4:47:88:30:48:84:c7:e6:54:ed:34:66:6e:46:
         10:8f:ff:41:d2:7b:7e:1a:87:4d:f0:b2:8c:b2:28:4c:3a:89:
         62:b6:91:51:19:a6:f1:9e:5e:de:d9:8a:d1:5c:d9:2b:59:97:
         72:cf:5f:3e:a2:3f:aa:f9:59:8f:63:d1:3c:29:57:09:63:da:
         d5:83:89:f1:94:55:4a:c9:98:de:ee:1e:c3:15:17:c1:e5:dd:
         70:36:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:18 2026 by rpki-client