This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134342e302f32302d3233203d3e2036353335.roa
File:                     3139302e35342e3134342e302f32302d3233203d3e2036353335.roa (raw, json)
Hash identifier:          8TSfZv+g6tBk3UDvzB/RQ2JrFeCWc2683GmT1XwK/+g=
Subject key identifier:   4C:FF:40:37:3F:E9:F2:F7:D3:9A:00:3E:1B:DA:65:98:DE:4E:B5:C0
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       1C4CDD12E88495DAA8011D1770FA2038C6CD55B2
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134342e302f32302d3233203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:13 +0000
ROA not before:           Tue 06 Jan 2026 20:49:13 +0000
ROA not after:            Tue 05 Jan 2027 20:54:13 +0000
asID:                     6535
IP address blocks:        190.54.144.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4c:dd:12:e8:84:95:da:a8:01:1d:17:70:fa:20:38:c6:cd:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:13 2026 GMT
            Not After : Jan  5 20:54:13 2027 GMT
        Subject: CN=4CFF40373FE9F2F7D39A003E1BDA6598DE4EB5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:2b:a8:ab:a5:81:43:8d:0c:dd:ba:a6:70:
                    9a:ca:40:1f:9e:12:cc:4c:5a:28:ee:e9:b2:62:4d:
                    f6:9d:9e:9a:e6:ce:2d:74:21:4a:b8:43:e9:3d:1f:
                    9b:c3:33:3d:5a:2b:65:a5:05:05:05:ef:32:01:30:
                    ff:e6:7b:d2:49:2b:d0:2b:2c:9a:88:14:de:46:f4:
                    b1:ba:aa:20:35:7e:70:0b:7f:4f:d7:bd:f5:f3:17:
                    da:08:41:5d:2d:76:0c:bf:46:a6:08:b7:a9:59:72:
                    1a:c8:75:89:15:94:56:ea:ad:c1:71:be:ed:63:36:
                    a2:a7:4a:d8:01:a7:44:ef:b7:95:a3:6b:d7:20:f0:
                    8b:93:88:72:26:43:87:20:f4:40:7f:2e:a8:1a:79:
                    bb:02:51:de:4b:ca:dd:19:b4:09:c3:af:51:b5:1b:
                    ab:ee:5a:4d:ae:c3:49:8c:1c:c6:24:bb:8e:56:a3:
                    11:78:f6:ff:0c:f9:8e:43:a6:69:0f:da:38:da:03:
                    e2:92:11:7d:30:c1:c8:5c:c3:a3:11:b9:8b:6f:e0:
                    7b:6e:a7:ac:52:4a:f1:02:fb:d4:e0:d4:da:7a:33:
                    a9:9b:49:d1:d8:96:a4:51:df:fd:7d:5f:77:f1:b4:
                    8a:1f:de:57:9f:a4:27:fb:9b:65:51:e6:a1:c5:d3:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FF:40:37:3F:E9:F2:F7:D3:9A:00:3E:1B:DA:65:98:DE:4E:B5:C0
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134342e302f32302d3233203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:cf:a9:ce:ce:33:c9:b4:e0:2c:3f:16:45:89:f0:19:b2:
         70:42:ad:95:d4:e3:28:d8:01:7b:d3:16:48:12:67:bb:fc:3f:
         21:87:55:4e:bb:85:37:80:9d:ba:d7:61:21:4e:c3:e0:5e:b2:
         55:32:ee:ec:6e:6f:3d:10:c1:9d:e1:37:d4:1d:a2:16:d3:c3:
         60:b4:ab:28:53:3d:57:c6:29:de:1c:01:98:23:8b:99:17:a5:
         ae:86:62:db:35:5c:7d:2f:32:d9:4f:26:0d:f3:43:7f:4a:f8:
         54:89:12:b4:03:5b:76:92:27:71:11:55:7e:36:fe:ae:68:f8:
         d8:19:1c:b9:85:05:d0:5a:66:c7:f6:3f:84:2a:2c:62:74:fc:
         e3:b0:85:f2:ba:f4:80:86:00:c3:88:a9:70:13:a6:e4:88:d8:
         d4:da:f7:ad:83:e5:c0:ac:f1:16:a4:d1:42:6b:cb:ba:ac:d5:
         2c:7a:10:ab:12:a0:f4:10:9f:17:d0:66:ae:6f:2f:ca:b1:37:
         ea:1f:0f:c0:cb:41:0d:0d:1b:21:34:8f:73:b2:a8:0c:ed:ae:
         72:e5:29:d1:08:71:fa:4d:3f:20:6e:e6:55:f1:da:2a:20:aa:
         ec:97:4b:9a:b0:32:c1:98:47:be:cc:33:37:ba:8c:65:a9:39:
         7c:d1:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:06 2026 by rpki-client