This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa
File:                     3139302e35342e3132352e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          O74RTRXRwE4PN3kJ5orN/3H2vVQEdaOmOSo6jAhhiAo=
Subject key identifier:   34:BA:DF:01:39:1B:FA:25:55:48:BC:A9:27:77:C3:28:E7:D1:D9:CF
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       2D21D631C63459A0C81DBBD6638A620E3BACD2B1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:23 +0000
ROA not before:           Tue 06 Jan 2026 20:49:23 +0000
ROA not after:            Tue 05 Jan 2027 20:54:23 +0000
asID:                     6535
IP address blocks:        190.54.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:21:d6:31:c6:34:59:a0:c8:1d:bb:d6:63:8a:62:0e:3b:ac:d2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:23 2026 GMT
            Not After : Jan  5 20:54:23 2027 GMT
        Subject: CN=34BADF01391BFA255548BCA92777C328E7D1D9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:17:85:52:53:04:75:00:c0:a6:02:fb:81:
                    4a:05:33:3a:94:a6:e1:b6:85:47:0b:9c:4a:3a:9e:
                    2f:31:df:8f:34:5f:5f:86:4c:95:62:b1:f3:ed:2b:
                    ce:34:52:fd:4c:7b:a3:97:7f:47:45:42:37:96:9f:
                    9f:ad:79:2e:99:b7:aa:6d:a1:07:43:ce:6f:84:21:
                    84:14:b0:a1:45:0d:a2:45:f0:90:0f:d1:0c:8e:b0:
                    ff:37:38:3d:fe:95:88:76:c6:4f:f0:5d:96:19:bf:
                    d0:2b:88:9f:95:9c:f4:b1:8a:e9:43:06:22:d4:8c:
                    f1:08:53:4f:3c:9a:a6:a3:df:77:15:02:ee:f0:63:
                    2a:38:ac:cb:bd:81:8f:2c:56:3c:0f:6a:f6:ef:87:
                    79:0a:f4:e0:42:ca:c6:59:54:48:da:46:3c:28:5d:
                    15:87:0e:9b:91:cf:9b:2b:47:a2:83:99:2b:61:b2:
                    d4:4d:36:b8:0c:fa:a6:6c:19:b9:8e:72:7a:0d:9e:
                    ae:5c:bb:b1:32:36:f6:b2:08:fc:98:0f:56:87:e5:
                    01:f1:79:27:5f:2b:04:60:9f:c6:43:3a:02:3a:c9:
                    29:12:bd:a6:ed:20:99:b7:35:30:76:44:25:59:e9:
                    44:63:e1:fb:77:92:77:da:9b:83:c5:0d:a6:ef:da:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:DF:01:39:1B:FA:25:55:48:BC:A9:27:77:C3:28:E7:D1:D9:CF
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3132352e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:a3:4e:f8:4b:db:13:4f:bf:03:47:7d:2f:e3:39:36:c3:
         d7:54:11:4a:c3:44:38:98:29:30:07:24:1a:74:0f:bd:61:80:
         ce:67:5b:ec:2f:7f:88:b4:51:af:0f:64:1f:1c:45:c4:56:ca:
         02:f5:7a:e7:2a:2c:7f:96:a5:89:80:81:a4:f8:e3:73:6f:d0:
         6c:7a:9a:8f:19:bd:b8:1a:10:3a:83:74:45:5c:5c:30:fa:79:
         21:8f:d8:76:43:07:f4:cb:ab:28:ce:32:a6:a3:9f:7f:e7:b7:
         d0:45:0e:50:bd:38:29:88:98:d4:4f:82:a0:42:32:b7:6d:50:
         32:46:dd:ef:9f:4a:c7:1f:29:87:2c:76:20:6c:d3:9c:20:86:
         0f:2e:af:14:ec:77:1e:f5:cc:a1:67:99:f1:f9:c3:b8:b8:89:
         6f:92:d7:98:70:ad:4c:fc:d1:b4:e8:eb:8b:47:62:87:cf:88:
         74:e2:7a:ab:d2:e8:89:51:46:1c:18:62:47:f9:b3:fe:4a:a0:
         22:49:74:5d:5f:72:6d:9b:d2:f5:f7:44:41:d1:20:2e:db:35:
         61:64:35:2c:ac:17:ce:c6:23:83:03:cc:3c:b8:80:cb:d2:28:
         20:06:c7:bd:f2:3a:74:94:06:5f:74:f5:58:dc:dd:c0:ef:6f:
         9d:80:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:42 2026 by rpki-client