This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa
File:                     3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa (raw, json)
Hash identifier:          Bcmdxp6Mgsxa/oBQkEdschO6gk564vFMOmuHNt1Z6Ws=
Subject key identifier:   00:88:7C:92:1F:33:E1:89:23:6D:39:9A:DC:66:52:64:47:E5:6A:21
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       5073FDFF065C3D6D6D8960ABBE455141E5B0752F
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:29:37 +0000
ROA not before:           Tue 06 Jan 2026 19:24:37 +0000
ROA not after:            Tue 05 Jan 2027 19:29:37 +0000
asID:                     52233
IP address blocks:        190.112.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:fd:ff:06:5c:3d:6d:6d:89:60:ab:be:45:51:41:e5:b0:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Jan  6 19:24:37 2026 GMT
            Not After : Jan  5 19:29:37 2027 GMT
        Subject: CN=00887C921F33E189236D399ADC66526447E56A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:06:a6:73:a2:41:63:fa:b8:fc:c3:ee:6a:
                    a6:4d:29:fe:dc:88:26:81:1d:37:05:0d:cd:84:34:
                    8d:0c:d9:7c:aa:f0:7b:25:6f:3b:5c:f7:d5:8c:1e:
                    df:a5:3a:7a:ca:b8:48:b9:17:7a:aa:2f:cf:38:5c:
                    7d:1f:19:d9:b6:a8:bd:6f:be:4f:66:60:17:f8:d5:
                    cc:62:3f:41:66:67:65:eb:d7:d0:c1:7a:13:3d:e8:
                    8b:8d:bd:f8:43:a5:fe:6f:a6:3d:3e:43:6f:0e:92:
                    c9:d1:71:01:e3:60:a4:65:17:a9:48:68:92:02:d5:
                    1f:d3:a6:09:95:27:66:65:e8:33:ac:bc:36:b0:07:
                    0a:53:4a:dc:64:c8:f5:22:0d:ad:35:d0:0c:73:93:
                    84:5d:4b:1e:fa:6e:42:99:a4:5b:54:06:2d:c5:86:
                    95:1b:6a:66:8c:96:10:af:c6:d3:ed:41:43:37:db:
                    1b:57:0f:bc:70:02:a5:bf:c3:67:9b:c2:97:3b:a7:
                    7f:b6:55:a1:55:0b:bd:7d:c0:7d:4d:fe:40:b7:5b:
                    00:28:68:07:ea:3d:67:a3:78:ff:ce:b5:ac:1a:13:
                    f7:57:41:98:96:01:2e:1b:c3:fd:46:a5:7f:7c:cb:
                    95:ee:19:94:e0:80:87:d4:61:28:67:07:ae:3c:ec:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:88:7C:92:1F:33:E1:89:23:6D:39:9A:DC:66:52:64:47:E5:6A:21
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3139302e3131322e3232342e302f31392d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:4b:ee:e8:06:5a:07:9d:0f:15:02:45:f7:f9:32:ff:1a:9d:
         7d:1d:03:7c:90:ee:fa:c6:3b:9b:ce:0e:64:02:5c:e5:bf:00:
         7f:82:12:4c:e1:d7:85:ee:8b:4d:65:1d:b6:a2:45:e3:56:47:
         8b:dd:12:41:68:2e:75:71:0b:98:93:2e:3d:95:6b:ad:4d:be:
         c5:a1:80:6a:84:60:b5:77:c8:87:80:a6:94:fc:12:39:62:33:
         e9:05:7c:ae:dd:28:49:ba:05:ac:a3:28:d6:b4:21:a8:46:b2:
         ef:77:d7:e6:de:2f:24:f0:d2:b3:d0:b7:ca:a7:74:48:ee:72:
         bf:c8:7c:1a:78:a9:7d:ad:59:dd:95:22:f8:12:40:c1:f0:ec:
         28:03:c2:b3:41:f9:a9:9f:f5:ac:26:8f:95:1b:40:3c:0e:14:
         3a:c2:e7:8f:1c:c0:15:ab:90:54:c7:fb:82:8e:fa:39:3e:10:
         c2:6a:73:c8:2b:cf:2b:18:a9:04:d1:a2:44:9d:21:ec:a7:79:
         dd:f1:92:74:54:de:4b:f7:e1:ee:b3:76:34:58:76:6c:e1:1b:
         6e:a8:2f:cf:55:12:fb:89:ed:28:c6:45:13:54:ec:34:ae:91:
         a3:14:8c:7d:8f:ee:a8:20:6b:17:5f:b0:3f:4d:d5:7a:19:65:
         30:aa:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:56 2026 by rpki-client