This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3139312e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          aVXXhrgFNx0WpKdDJAY7ye1pR2X2Qs5tRUhpDKVWTQE=
Subject key identifier:   80:0D:19:43:7B:9F:1F:BA:29:72:D8:CB:7C:2D:E4:C1:53:D0:02:72
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       451068189F5602E1C5C137A46E4F360571ECD57C
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:19 +0000
ROA not before:           Tue 06 Jan 2026 20:49:19 +0000
ROA not after:            Tue 05 Jan 2027 20:54:19 +0000
asID:                     6429
IP address blocks:        190.54.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:10:68:18:9f:56:02:e1:c5:c1:37:a4:6e:4f:36:05:71:ec:d5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:19 2026 GMT
            Not After : Jan  5 20:54:19 2027 GMT
        Subject: CN=800D19437B9F1FBA2972D8CB7C2DE4C153D00272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:86:5d:52:8d:99:ee:a9:62:a0:a9:56:bb:
                    08:c4:e9:de:a7:4d:7f:3b:af:fd:0a:ba:b4:d9:cf:
                    b6:ed:56:0f:d8:02:e7:49:41:d8:13:5d:db:f1:06:
                    63:af:b9:76:79:c2:55:1d:3f:6d:f4:25:b4:40:d1:
                    c3:69:ea:af:a4:f4:a5:ed:83:7e:9b:f8:c3:44:35:
                    8c:a2:ee:1d:65:0e:07:de:0a:b6:56:25:a3:0e:90:
                    7d:65:b8:06:aa:95:bc:4b:e9:b2:85:06:4e:77:b2:
                    8c:b1:c1:54:fb:99:9e:5b:83:e5:cb:03:d7:5d:71:
                    b9:68:0e:22:fa:b6:c4:54:e2:8b:c1:da:94:8a:df:
                    0e:52:35:b4:1d:a4:96:e6:06:74:32:2f:50:27:4e:
                    85:52:42:1a:22:48:7a:b8:7c:e1:2b:01:18:80:3c:
                    ae:f9:4a:6e:be:8a:e3:b6:ba:a7:41:6f:ff:08:90:
                    40:c5:eb:e6:d5:b4:78:25:28:65:3c:03:b9:e8:e2:
                    2d:42:f4:8b:d0:51:e8:86:e7:0d:33:b3:53:49:cb:
                    58:46:5e:58:bb:de:88:55:28:15:d3:c7:3a:71:13:
                    71:38:ed:43:f3:1b:3b:db:8c:da:50:b5:7f:a9:a5:
                    8d:18:a5:ed:ae:da:0a:43:ab:b1:6d:9c:dd:a1:46:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0D:19:43:7B:9F:1F:BA:29:72:D8:CB:7C:2D:E4:C1:53:D0:02:72
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139312e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:05:79:98:40:8f:f6:62:d1:62:09:e5:d4:40:fa:c9:61:e0:
         00:1d:72:85:77:18:8b:ee:e8:c6:8c:67:4d:cf:56:59:22:36:
         00:f6:a6:21:97:fd:a1:ff:9e:77:a2:cb:b0:96:a6:6e:b3:5c:
         43:77:73:a8:36:b7:68:28:a8:ea:08:8b:18:e5:14:be:b8:b0:
         ee:f3:8b:c8:54:4d:29:b3:11:9a:6c:1c:77:0d:dc:28:5b:77:
         ce:aa:f7:cf:a3:8e:c6:0a:3e:42:0e:6e:a3:99:ba:1e:b6:a5:
         55:60:20:ff:9e:b1:80:6a:2d:5b:b4:98:9b:d3:71:2e:3c:a6:
         eb:68:5c:46:d2:5f:94:b2:79:b8:ad:c7:b4:89:90:c2:76:b2:
         4f:30:de:21:8c:b9:45:29:f5:50:a0:14:c4:51:69:56:93:77:
         28:3e:99:37:9f:4f:71:cf:cc:55:6d:ef:bc:ea:40:6e:6a:bc:
         16:f3:e4:50:1e:96:ee:d7:09:ee:36:ba:31:16:fd:70:2e:f9:
         f8:ec:05:f5:60:06:ed:82:f9:ac:69:1a:2a:96:9e:66:99:cf:
         ca:06:97:42:81:15:79:27:e9:28:be:74:fa:cb:61:8f:5d:47:
         ea:33:f5:29:17:84:88:22:6d:03:34:c2:d7:2b:cd:1e:03:ad:
         20:08:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:45 2026 by rpki-client