This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
File:                     3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa (raw, json)
Hash identifier:          owovpba9zrF7CwunWRsHZThsl+pJ3KCD16oCP/ByKSI=
Subject key identifier:   7F:EF:89:0D:74:1B:62:AE:62:5A:5F:D9:E5:00:45:38:D6:28:65:55
Certificate issuer:       /CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
Certificate serial:       0FAE591819A1CD8F43A7BE96DFD320EB71862A6B
Authority key identifier: BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
Signing time:             Tue 06 Jan 2026 19:21:42 +0000
ROA not before:           Tue 06 Jan 2026 19:16:42 +0000
ROA not after:            Tue 05 Jan 2027 19:21:42 +0000
asID:                     52300
IP address blocks:        190.110.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:59:18:19:a1:cd:8f:43:a7:be:96:df:d3:20:eb:71:86:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
        Validity
            Not Before: Jan  6 19:16:42 2026 GMT
            Not After : Jan  5 19:21:42 2027 GMT
        Subject: CN=7FEF890D741B62AE625A5FD9E5004538D6286555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:a2:5e:15:ac:05:96:3f:6b:31:1d:e7:d9:
                    21:88:2e:5f:75:d7:a7:a7:d6:59:a1:7b:3f:29:22:
                    36:cd:2a:24:7b:35:16:5d:c6:2c:f5:80:86:49:f3:
                    d7:7a:f8:ff:21:85:4f:36:3c:94:2a:9f:89:a4:58:
                    8b:18:1b:6f:b3:c2:30:9d:bd:a7:15:3b:3d:7b:4b:
                    17:37:d5:fc:4b:c9:8b:60:6e:c5:ea:25:09:b9:68:
                    c1:90:d9:b2:e7:91:78:82:a9:0f:28:c0:d4:44:c7:
                    ac:9c:40:c7:f6:61:c9:c6:61:57:cb:eb:91:ba:c1:
                    d5:f4:9f:08:c8:da:ac:9f:f1:e8:5b:cb:18:ae:b5:
                    f5:c4:17:b6:88:0e:44:ba:15:6b:6c:50:01:60:23:
                    65:66:cc:a3:53:70:bc:b6:ba:5b:9b:85:5a:22:52:
                    12:14:23:fd:06:69:1f:3a:c7:df:a1:32:ea:ad:c8:
                    bd:a4:21:53:00:45:57:5f:51:ce:6b:11:27:72:08:
                    fd:2d:29:5d:a7:75:7c:a2:94:27:22:70:41:e5:9c:
                    ee:f6:4a:a5:ff:cc:54:38:96:32:ad:28:37:a6:2c:
                    22:1e:b9:06:94:c9:9a:d9:51:b8:dd:8f:81:63:48:
                    aa:14:84:a9:9a:de:0b:d7:f7:c1:d8:29:fc:16:b1:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EF:89:0D:74:1B:62:AE:62:5A:5F:D9:E5:00:45:38:D6:28:65:55
            X509v3 Authority Key Identifier:
                keyid:BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:ab:9f:7e:5c:34:34:79:15:98:81:9a:53:45:30:b3:82:
         d5:24:20:a6:92:ff:db:d1:3d:27:35:f8:d2:49:29:48:94:44:
         b2:78:44:c8:ad:9a:22:8f:d4:99:7b:64:95:2e:16:dd:99:8b:
         b2:eb:d6:cc:e0:8d:c7:67:37:df:d6:9c:00:96:21:f6:6e:52:
         58:83:c1:0d:d5:3e:35:4e:aa:85:eb:92:8f:93:71:02:9a:ff:
         06:19:da:51:b3:f8:74:56:d0:07:db:bb:85:f6:75:9b:e9:12:
         11:18:5b:6e:03:cf:ed:fa:e8:ac:82:bb:ba:d7:93:95:13:6c:
         b6:53:80:a2:a7:be:ac:61:df:a1:1b:f1:35:53:56:c6:ca:5e:
         f2:00:93:db:4a:90:36:91:06:20:ef:8c:68:b9:94:45:9b:1c:
         90:ed:db:d8:1d:1d:35:b7:d3:9e:72:ee:4e:89:9c:c3:5a:fe:
         c6:53:06:70:6c:76:6d:bf:5c:ca:75:65:64:1f:2b:1b:d6:09:
         a1:0a:80:f7:f9:1a:eb:4c:de:35:e5:f5:e2:99:78:3d:e3:36:
         2a:b1:f9:e6:79:c4:2b:5e:35:ed:ad:33:7e:67:58:16:36:87:
         25:81:66:d7:ae:20:09:e1:da:92:08:86:56:02:c8:2f:f9:10:
         3f:fa:6b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:36 2026 by rpki-client