This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa
File:                     3139302e35342e322e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          Mc/vAGYBTVdaHbbqt7tZgBDXtUUYIf6a5M4w+vjQsZc=
Subject key identifier:   05:37:4D:54:AB:91:33:BE:7C:CA:28:B0:7F:F5:D8:5C:79:CD:25:9F
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       362765934453681D34DF4733A4D8DECD3DEAEE8B
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:15 +0000
ROA not before:           Tue 06 Jan 2026 20:49:15 +0000
ROA not after:            Tue 05 Jan 2027 20:54:15 +0000
asID:                     6535
IP address blocks:        190.54.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:27:65:93:44:53:68:1d:34:df:47:33:a4:d8:de:cd:3d:ea:ee:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:15 2026 GMT
            Not After : Jan  5 20:54:15 2027 GMT
        Subject: CN=05374D54AB9133BE7CCA28B07FF5D85C79CD259F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:37:4b:6a:f0:0a:f3:be:6e:e1:9f:4c:47:
                    05:57:bc:5b:c4:fd:a2:a2:c3:2c:a7:09:e7:43:11:
                    70:7b:0a:c9:4e:eb:ab:2a:d2:d2:d6:27:ad:8d:df:
                    eb:9c:34:a1:d0:d4:44:7e:cd:12:99:a1:55:61:23:
                    b1:27:0f:ff:76:f8:61:1d:68:28:1b:25:20:04:50:
                    52:f5:da:ac:3d:fc:5e:2b:27:18:a9:67:bc:fa:6d:
                    02:58:bd:12:d7:f8:c8:38:63:58:2f:04:52:d8:34:
                    17:60:d0:50:14:75:48:2c:d0:f7:9b:2b:1f:31:04:
                    6a:be:df:c6:d6:c7:12:5a:3b:77:21:75:75:21:ab:
                    8f:c4:36:06:f7:35:50:aa:79:fc:db:e4:b1:e9:31:
                    cc:a0:8b:28:e5:99:60:37:5a:0e:bc:4b:37:60:c9:
                    78:05:25:c1:c2:98:f9:62:e4:14:71:86:cb:58:72:
                    92:bf:90:21:86:8e:57:25:04:f4:11:c0:8b:77:99:
                    c7:c3:6e:86:88:6c:44:e7:70:4e:06:e3:61:eb:4b:
                    52:73:27:f0:08:50:5f:1e:0e:70:5c:73:7b:81:be:
                    2d:76:0e:e5:25:ff:9a:62:07:e0:e8:61:aa:fb:27:
                    e0:f9:3a:1d:ea:e5:ca:23:75:b4:ec:be:da:98:8b:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:4D:54:AB:91:33:BE:7C:CA:28:B0:7F:F5:D8:5C:79:CD:25:9F
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e322e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:64:23:18:fb:6c:59:dd:02:71:0a:d6:1a:5e:fb:f9:6f:
         61:51:65:9d:87:4b:80:53:01:db:0c:f3:f9:eb:dd:32:d9:ff:
         7b:a3:be:ef:1f:21:e7:bc:21:bf:bd:48:bb:bf:78:15:16:2b:
         e2:e6:b2:01:fb:dc:ea:33:f3:1b:3f:54:ad:3c:85:b4:2e:b7:
         c4:af:2e:07:5e:00:d5:be:bd:f5:8c:ad:8f:24:cc:d9:77:99:
         53:fc:46:8c:41:c9:ed:17:1a:5b:63:91:a6:74:b4:a2:b5:a0:
         aa:d5:f1:1e:af:ed:ef:5d:ae:1a:14:28:0a:05:be:44:d1:c2:
         8d:e8:48:38:0d:2b:b1:20:4e:7f:9a:16:2b:aa:d9:4f:6d:f9:
         cc:4e:6f:3b:21:6a:f1:e1:f8:a8:f1:ff:ec:7f:b8:c9:51:9e:
         98:7b:81:e7:62:7c:d6:26:2f:cb:d9:e3:81:ca:f4:67:e7:0e:
         f6:63:f6:d0:c6:dc:7a:72:34:ac:2d:59:89:49:72:19:a8:03:
         91:73:0d:96:52:4d:bc:1d:9d:fc:10:61:b5:07:b4:9c:b3:09:
         cd:67:d0:a9:b9:e2:73:c6:fe:24:8a:a6:b0:75:e1:27:5b:1f:
         d2:ad:3d:eb:1c:20:f8:3f:48:98:6c:35:4d:25:ff:e0:c7:f3:
         29:fb:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:13 2026 by rpki-client