This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e34382e302f32302d3233203d3e203237393630.roa
File:                     3139302e3132322e34382e302f32302d3233203d3e203237393630.roa (raw, json)
Hash identifier:          FHXmoAiUdjenaLl54TG4ZCmuz/gLKKFMr299XCRPdkg=
Subject key identifier:   F0:39:52:38:CD:76:82:2E:39:50:F6:A5:37:26:34:E2:0B:D0:61:D5
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       1B222CDB3AA90C0AA59044BE0A3CDB1EB82268D3
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e34382e302f32302d3233203d3e203237393630.roa
Signing time:             Tue 06 Jan 2026 19:25:48 +0000
ROA not before:           Tue 06 Jan 2026 19:20:48 +0000
ROA not after:            Tue 05 Jan 2027 19:25:48 +0000
asID:                     27960
IP address blocks:        190.122.48.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:2c:db:3a:a9:0c:0a:a5:90:44:be:0a:3c:db:1e:b8:22:68:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Jan  6 19:20:48 2026 GMT
            Not After : Jan  5 19:25:48 2027 GMT
        Subject: CN=F0395238CD76822E3950F6A5372634E20BD061D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:41:8a:2b:c4:02:e0:80:3a:e4:df:4c:b2:
                    01:93:4b:e7:64:ec:72:17:93:05:e4:d4:06:aa:1c:
                    ba:02:8b:ce:a4:77:a1:a1:85:fc:8b:da:0d:4c:67:
                    fa:84:b4:33:f1:3a:bd:7b:86:04:85:e8:cd:50:8e:
                    d9:d7:7e:67:4c:be:30:7a:4f:f2:0e:59:4d:0b:f7:
                    36:ca:a5:a0:a2:4c:d8:6b:8e:9d:c2:6e:64:63:fb:
                    4f:1a:f8:86:a9:f2:1c:f6:18:94:d9:85:82:66:83:
                    46:3d:be:9d:f7:ab:8a:f4:66:93:5d:7e:c0:ef:00:
                    32:25:c7:c8:a7:a0:71:ba:57:62:0b:cc:a9:f0:8a:
                    32:3f:6a:55:74:5c:ab:4d:b2:0f:fc:34:c9:3c:38:
                    27:8c:73:c3:42:82:9d:fc:44:f2:ab:60:1d:14:14:
                    14:3c:8f:ac:14:29:d1:17:71:6e:fd:a5:2e:6e:f7:
                    7f:4b:b4:f0:35:ff:27:bc:cb:e2:5d:fe:9e:2e:02:
                    34:ed:4d:d5:a1:35:e5:63:1e:74:bb:59:ac:62:2b:
                    24:1a:63:8a:be:1a:e2:b6:6b:45:cd:8f:bd:18:32:
                    7c:22:3d:19:0d:25:22:30:fa:c1:85:f8:84:d1:db:
                    c7:4e:26:ec:d4:d0:86:5e:de:f2:de:64:02:99:6a:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:52:38:CD:76:82:2E:39:50:F6:A5:37:26:34:E2:0B:D0:61:D5
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e34382e302f32302d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:b1:c9:44:9d:68:ba:cf:aa:0b:9c:66:8a:52:2a:ca:09:
         01:f1:2a:65:37:b3:57:c6:04:8d:6b:1b:44:49:57:3e:f3:ab:
         fb:1f:fa:18:94:2b:52:dd:0c:ba:57:f9:f8:c8:80:ec:54:c8:
         80:0a:37:c1:e2:7c:aa:bb:99:ed:42:22:57:aa:e3:53:8a:ba:
         1f:63:dd:48:d2:19:da:c4:b6:10:fa:1e:a9:e9:bd:e2:aa:b6:
         d8:ee:63:53:2c:94:54:c2:8f:fe:fe:51:8b:8b:a0:eb:2d:90:
         b5:98:e9:5d:01:fc:68:35:1f:bd:79:b2:42:61:96:64:b5:f6:
         52:6b:73:a4:ce:35:1f:9a:6b:10:c3:2c:6e:27:aa:5e:b9:5f:
         8c:7a:fb:c5:9f:49:c2:04:02:4b:ff:a8:7c:ad:21:54:2f:15:
         ce:aa:51:24:3c:16:21:0c:67:08:9c:e2:d3:49:7f:b4:3a:c8:
         5c:52:67:77:83:63:2b:58:b3:65:f2:a4:6a:a8:b4:c4:e2:bd:
         98:71:05:28:fe:f0:49:37:4f:9b:bf:bc:ba:89:e9:0c:4f:12:
         6f:a5:b2:6c:69:d2:f9:65:b2:29:bd:7c:bd:ee:d7:32:93:08:
         fe:82:43:7d:1c:fa:2c:88:f6:7f:a0:55:a2:72:c9:28:ea:c0:
         d3:af:10:c2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGyIs2zqpDAqlkES+CjzbHrgiaNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNGMkYwRTQ4RTBB
NDYzMzY2NjAeFw0yNjAxMDYxOTIwNDhaFw0yNzAxMDUxOTI1NDhaMDMxMTAvBgNV
BAMTKEYwMzk1MjM4Q0Q3NjgyMkUzOTUwRjZBNTM3MjYzNEUyMEJEMDYxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfG0GKK8QC4IA65N9MsgGTS+dk
7HIXkwXk1AaqHLoCi86kd6GhhfyL2g1MZ/qEtDPxOr17hgSF6M1QjtnXfmdMvjB6
T/IOWU0L9zbKpaCiTNhrjp3CbmRj+08a+Iap8hz2GJTZhYJmg0Y9vp33q4r0ZpNd
fsDvADIlx8inoHG6V2ILzKnwijI/alV0XKtNsg/8NMk8OCeMc8NCgp38RPKrYB0U
FBQ8j6wUKdEXcW79pS5u939LtPA1/ye8y+Jd/p4uAjTtTdWhNeVjHnS7WaxiKyQa
Y4q+GuK2a0XNj70YMnwiPRkNJSIw+sGF+ITR28dOJuzU0IZe3vLeZAKZamO3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8DlSOM12gi45UPalNyY04gvQYdUwHwYDVR0j
BBgwFoAU25+nf35eXijMWVvPLw5I4KRjNmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4
REE3QzA5QzQxMUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUy
OENDNTk1QkNGMkYwRTQ4RTBBNDYzMzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjlGQTc3RjdFNUU1RTI4Q0M1
OTVCQ0YyRjBFNDhFMEE0NjMzNjY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2RDUwMjZDMUYwOERBN0MwOUM0
MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzMxMzkzMDJlMzEzMjMyMmUzNDM4MmUz
MDJmMzIzMDJkMzIzMzIwM2QzZTIwMzIzNzM5MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL56MDAN
BgkqhkiG9w0BAQsFAAOCAQEACz6xyUSdaLrPqgucZopSKsoJAfEqZTezV8YEjWsb
RElXPvOr+x/6GJQrUt0Mulf5+MiA7FTIgAo3weJ8qruZ7UIiV6rjU4q6H2PdSNIZ
2sS2EPoeqem94qq22O5jUyyUVMKP/v5Ri4ug6y2QtZjpXQH8aDUfvXmyQmGWZLX2
UmtzpM41H5prEMMsbieqXrlfjHr7xZ9JwgQCS/+ofK0hVC8VzqpRJDwWIQxnCJzi
00l/tDrIXFJnd4NjK1izZfKkaqi0xOK9mHEFKP7wSTdPm7+8uonpDE8Sb6WybGnS
+WWyKb18ve7XMpMI/oJDfRz6LIj2f6BVonLJKOrA068Qwg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:23:29 2026 by rpki-client