This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
File:                     3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa (raw, json)
Hash identifier:          0IWJitUvGpTl9mlKHc7BhUF6C8qMKYhJuSUNTwaTO50=
Subject key identifier:   D0:A7:35:72:84:8B:06:C8:B3:CB:C5:59:EA:5A:94:FD:C1:60:42:B6
Certificate issuer:       /CN=B06551473984A7D021CE4C930068D4DD4CBA142A
Certificate serial:       2C38D59EA1036BBF96C5048C7F013D49627D1215
Authority key identifier: B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa
Signing time:             Tue 06 Jan 2026 19:15:26 +0000
ROA not before:           Tue 06 Jan 2026 19:10:26 +0000
ROA not after:            Tue 05 Jan 2027 19:15:26 +0000
asID:                     40676
IP address blocks:        190.110.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:d5:9e:a1:03:6b:bf:96:c5:04:8c:7f:01:3d:49:62:7d:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B06551473984A7D021CE4C930068D4DD4CBA142A
        Validity
            Not Before: Jan  6 19:10:26 2026 GMT
            Not After : Jan  5 19:15:26 2027 GMT
        Subject: CN=D0A73572848B06C8B3CBC559EA5A94FDC16042B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:88:1a:55:40:c8:f3:7f:59:2a:d7:29:7a:
                    24:0a:fc:93:1a:5c:67:7e:29:a3:f5:99:8c:15:0b:
                    89:fc:a4:6d:21:fb:0f:0b:8a:a7:41:01:70:69:b0:
                    8c:a4:2c:c3:d4:1f:5c:21:5f:e9:72:7c:0d:c3:b4:
                    77:0b:43:39:3a:48:c3:df:7b:68:13:d1:89:a9:60:
                    4f:d2:ba:96:dd:ae:8f:0b:dc:c5:9f:3a:b3:3b:96:
                    48:6e:54:b0:dc:da:89:ac:2a:50:56:33:14:57:bd:
                    17:90:e9:19:98:a1:80:35:b8:35:5d:db:56:fe:d5:
                    32:2b:0f:b8:f2:17:eb:0e:b2:39:fb:41:5a:51:27:
                    81:75:55:09:9a:a4:fb:a0:94:fa:00:69:ad:b8:93:
                    f3:02:72:89:be:14:d4:86:c2:73:4b:35:49:11:d7:
                    36:3d:2d:33:37:5a:e4:a2:e7:a9:22:61:5c:22:71:
                    9e:f5:e2:ea:d6:a1:95:ad:53:9c:ed:7d:ad:94:76:
                    bb:0f:a4:45:8f:9b:4a:8d:ec:30:a7:14:6d:f7:42:
                    95:29:9f:60:74:11:53:70:76:0d:65:a7:b6:03:e1:
                    c7:a0:e6:1d:99:24:22:7d:d9:5e:be:46:c9:15:81:
                    fd:1a:b6:9b:e7:1a:21:64:76:fd:de:4d:70:1b:66:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:35:72:84:8B:06:C8:B3:CB:C5:59:EA:5A:94:FD:C1:60:42:B6
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:47:39:84:A7:D0:21:CE:4C:93:00:68:D4:DD:4C:BA:14:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/B06551473984A7D021CE4C930068D4DD4CBA142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B06551473984A7D021CE4C930068D4DD4CBA142A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13830BDE7A7DC7CBE2750590E8135E376B1634AC5C0EE69464D117EA0615126E/0/3139302e3131302e3132302e302f32312d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:df:78:ef:2d:7e:7d:a4:66:f5:a5:0e:d1:c5:32:d2:b7:15:
         e8:53:99:bf:a0:46:07:b8:67:a1:bd:50:12:4e:a2:83:19:ce:
         47:c9:c1:c1:cf:1c:96:f3:39:f2:11:f7:2d:6e:85:86:c3:a3:
         67:63:57:3b:02:44:90:4b:22:5c:04:27:68:aa:c1:8f:0d:bb:
         5f:41:b4:28:87:ad:38:28:ae:ed:47:7a:e6:9c:cb:e3:de:e0:
         0b:15:b8:42:a2:dd:67:92:29:80:e8:6b:0a:d4:db:27:1a:05:
         08:8f:d1:24:a0:8c:bb:0a:ed:0c:6e:45:c7:72:60:a4:6f:07:
         69:be:4e:aa:24:13:48:06:db:13:11:81:db:35:39:23:ff:38:
         e1:ce:37:10:82:b1:bf:b5:e3:fb:85:c2:35:cf:1a:3a:b4:e7:
         62:0c:e9:c6:9d:62:c6:1f:d3:ff:68:bb:ef:5a:fc:3d:a6:82:
         ad:c7:71:7a:57:1e:9f:dc:0c:3c:84:60:9a:ef:d3:27:a3:24:
         2e:30:47:12:52:29:12:7e:a5:5e:25:d2:f8:0f:a2:84:a1:6f:
         da:0f:1c:db:ce:02:6d:55:96:0c:8b:80:1d:50:79:92:76:bb:
         c4:15:3d:53:31:7a:6f:a7:3a:96:97:41:74:83:a9:2c:8d:9e:
         d9:50:c5:69
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULDjVnqEDa7+WxQSMfwE9SWJ9EhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA2NTUxNDczOTg0QTdEMDIxQ0U0QzkzMDA2OEQ0REQ0
Q0JBMTQyQTAeFw0yNjAxMDYxOTEwMjZaFw0yNzAxMDUxOTE1MjZaMDMxMTAvBgNV
BAMTKEQwQTczNTcyODQ4QjA2QzhCM0NCQzU1OUVBNUE5NEZEQzE2MDQyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2YgaVUDI839ZKtcpeiQK/JMa
XGd+KaP1mYwVC4n8pG0h+w8LiqdBAXBpsIykLMPUH1whX+lyfA3DtHcLQzk6SMPf
e2gT0YmpYE/Supbdro8L3MWfOrM7lkhuVLDc2omsKlBWMxRXvReQ6RmYoYA1uDVd
21b+1TIrD7jyF+sOsjn7QVpRJ4F1VQmapPuglPoAaa24k/MCcom+FNSGwnNLNUkR
1zY9LTM3WuSi56kiYVwicZ714urWoZWtU5ztfa2UdrsPpEWPm0qN7DCnFG33QpUp
n2B0EVNwdg1lp7YD4ceg5h2ZJCJ92V6+RskVgf0atpvnGiFkdv3eTXAbZuuzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0Kc1coSLBsizy8VZ6lqU/cFgQrYwHwYDVR0j
BBgwFoAUsGVRRzmEp9AhzkyTAGjU3Uy6FCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMzgzMEJERTdBN0RDN0NCRTI3NTA1OTBFODEzNUUzNzZC
MTYzNEFDNUMwRUU2OTQ2NEQxMTdFQTA2MTUxMjZFLzAvQjA2NTUxNDczOTg0QTdE
MDIxQ0U0QzkzMDA2OEQ0REQ0Q0JBMTQyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMDY1NTE0NzM5ODRBN0QwMjFD
RTRDOTMwMDY4RDRERDRDQkExNDJBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTM4MzBCREU3QTdEQzdDQkUyNzUwNTkwRTgxMzVFMzc2QjE2MzRBQzVD
MEVFNjk0NjREMTE3RUEwNjE1MTI2RS8wLzMxMzkzMDJlMzEzMTMwMmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvm54
MA0GCSqGSIb3DQEBCwUAA4IBAQAI33jvLX59pGb1pQ7RxTLStxXoU5m/oEYHuGeh
vVASTqKDGc5HycHBzxyW8znyEfctboWGw6NnY1c7AkSQSyJcBCdoqsGPDbtfQbQo
h604KK7tR3rmnMvj3uALFbhCot1nkimA6GsK1NsnGgUIj9EkoIy7Cu0MbkXHcmCk
bwdpvk6qJBNIBtsTEYHbNTkj/zjhzjcQgrG/teP7hcI1zxo6tOdiDOnGnWLGH9P/
aLvvWvw9poKtx3F6Vx6f3Aw8hGCa79MnoyQuMEcSUikSfqVeJdL4D6KEoW/aDxzb
zgJtVZYMi4AdUHmSdrvEFT1TMXpvpzqWl0F0g6ksjZ7ZUMVp
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:04:18 2026 by rpki-client