This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
File:                     3139302e3132322e33322e302f32302d3233203d3e203237393630.roa (raw, json)
Hash identifier:          NfFFhPiduuF63qp/VSgKBMpTqhsgrw8JhqBExj0SzdY=
Subject key identifier:   0E:E6:19:86:01:49:F7:DC:02:2B:33:73:0C:6B:AF:36:F2:C1:D3:0F
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       7D47E7153FFE2312A6FBDDE858D6560C689D1DA0
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
Signing time:             Tue 06 Jan 2026 19:25:49 +0000
ROA not before:           Tue 06 Jan 2026 19:20:49 +0000
ROA not after:            Tue 05 Jan 2027 19:25:49 +0000
asID:                     27960
IP address blocks:        190.122.32.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:47:e7:15:3f:fe:23:12:a6:fb:dd:e8:58:d6:56:0c:68:9d:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Jan  6 19:20:49 2026 GMT
            Not After : Jan  5 19:25:49 2027 GMT
        Subject: CN=0EE619860149F7DC022B33730C6BAF36F2C1D30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:ab:0a:8c:a3:60:e4:27:59:89:51:36:bd:
                    d8:8a:e2:54:fc:d2:50:ad:55:ec:83:f7:b5:07:8b:
                    cb:32:10:60:e1:42:3b:04:45:6c:44:11:15:e7:a9:
                    1f:19:08:f0:e8:bc:59:dc:7a:6b:18:45:ff:4d:7c:
                    86:4a:36:64:25:4e:74:e7:4a:55:02:28:43:d0:72:
                    3e:bb:32:3e:2a:2b:7a:b3:d4:e3:0e:38:e0:f3:94:
                    e6:f3:f5:74:c1:dc:0c:be:7b:5a:1b:c0:28:53:0e:
                    25:88:f9:da:eb:25:3b:24:a1:34:b4:71:c7:24:42:
                    63:58:ad:6c:fc:37:d5:f0:3e:10:9c:6f:e1:d1:a2:
                    cb:df:81:ec:ec:b7:5f:cb:87:dd:2c:ee:a7:33:a9:
                    57:a1:19:75:d4:00:99:a5:4c:e0:fc:e2:f6:7b:55:
                    cd:4c:2d:3f:f8:84:3d:10:a8:b3:82:a3:36:23:67:
                    c6:10:5c:95:c3:90:c7:36:e9:be:b7:24:a8:38:a4:
                    74:c5:a1:be:7c:8e:d6:e4:35:5c:61:2f:ca:54:57:
                    15:e3:16:b4:09:9d:b5:d5:c8:33:b7:a1:56:a6:77:
                    cf:fb:55:cb:f1:93:37:7b:71:58:a0:46:f2:92:8e:
                    65:9d:b4:09:41:b8:2e:eb:b9:0a:f7:72:77:38:4a:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E6:19:86:01:49:F7:DC:02:2B:33:73:0C:6B:AF:36:F2:C1:D3:0F
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:44:ac:ba:ec:0a:70:2b:c4:39:88:12:94:6f:07:eb:cb:
         92:33:30:58:1d:04:12:0e:9f:5c:5a:9e:69:3a:0a:25:6d:f3:
         2a:16:c6:cb:45:a8:cd:2b:80:74:8e:b7:e8:07:cc:ea:9d:9d:
         77:89:28:ef:f1:f6:b9:33:e3:65:bc:04:97:bf:6b:73:36:d4:
         7f:2a:dd:23:16:20:bd:fb:ab:ea:55:02:d0:42:46:69:a4:27:
         5f:05:aa:44:35:0e:2e:8e:d0:c3:a1:b1:76:69:09:4a:6b:db:
         7c:c0:00:20:76:e1:29:ed:6a:86:38:36:79:cb:f3:1c:7e:a1:
         d6:f4:22:f4:ce:94:fd:7c:36:70:9a:2f:4f:ec:85:b1:aa:82:
         8d:15:63:e6:ad:f5:84:fc:46:50:bf:64:68:5a:44:2c:ee:f3:
         18:6b:66:98:5b:07:d7:cf:fa:b7:5f:70:23:fd:e5:0a:6a:0b:
         1a:0f:a5:4f:0f:f8:ce:c3:0b:95:bd:40:5a:2f:47:1c:49:39:
         74:64:c3:11:be:1a:c2:a2:e9:ec:47:43:3f:20:1f:fb:8e:13:
         f0:2e:3b:e4:d2:bd:c1:9c:f5:14:4b:f1:75:0e:25:bf:ba:68:
         5a:bc:0e:23:71:0c:8e:64:a0:96:20:d5:48:ae:62:a2:36:57:
         0b:b9:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:36 2026 by rpki-client