This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3139302e35322e3139322e302f32302d3234203d3e20323634373434.roa
File:                     3139302e35322e3139322e302f32302d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          j5TbfOLQNvnm7VJ+KCXtiXZcyxPj4SzxNnHPs9D6/2E=
Subject key identifier:   6F:4E:72:D7:47:1B:99:C5:EC:59:BA:32:15:BD:BB:8A:42:07:2E:DC
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       0F3D96C8B26E91A6B080C7629B68E8D79D9E83CD
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3139302e35322e3139322e302f32302d3234203d3e20323634373434.roa
Signing time:             Tue 06 Jan 2026 19:21:31 +0000
ROA not before:           Tue 06 Jan 2026 19:16:31 +0000
ROA not after:            Tue 05 Jan 2027 19:21:31 +0000
asID:                     264744
IP address blocks:        190.52.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:96:c8:b2:6e:91:a6:b0:80:c7:62:9b:68:e8:d7:9d:9e:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Jan  6 19:16:31 2026 GMT
            Not After : Jan  5 19:21:31 2027 GMT
        Subject: CN=6F4E72D7471B99C5EC59BA3215BDBB8A42072EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:a0:f5:fe:af:78:61:f1:e3:0e:5d:d2:2f:
                    48:5d:e0:51:1e:cb:cb:8a:b3:b0:3f:b5:15:69:11:
                    6b:d4:83:c3:e1:1a:f6:53:05:6d:64:71:3a:da:c6:
                    d1:ce:2e:f8:d1:3e:ce:33:49:2f:88:89:ce:2e:3b:
                    ba:af:e3:b7:57:f9:8c:2c:e8:e0:be:16:96:05:d1:
                    9d:15:4e:c3:10:7a:42:5d:20:af:e7:04:30:68:f6:
                    bf:dc:4e:f1:22:30:eb:0b:f6:41:97:40:50:49:08:
                    2f:27:9b:c5:0d:db:72:6b:68:57:35:18:c6:69:fe:
                    ee:51:05:52:fb:1c:b4:25:d2:8d:c4:b8:9d:aa:ec:
                    38:14:57:c4:39:42:e1:a0:f0:74:0c:93:97:be:f3:
                    9a:c0:89:ab:60:7f:95:ec:d7:1c:a2:9b:07:11:7a:
                    35:41:4e:f1:0c:d1:9c:77:aa:73:9a:e0:6f:3a:8d:
                    a5:b1:f7:ad:76:fe:98:9d:04:9e:c8:3a:1f:4d:c7:
                    eb:01:d5:9b:4d:e2:3b:91:fd:d4:47:5d:67:75:63:
                    ab:e7:11:07:b7:7b:90:4a:15:5a:66:e3:4d:15:bb:
                    8e:50:bd:ed:c8:74:f2:b2:c6:d6:c9:00:7d:c5:54:
                    97:63:d2:e1:a4:66:a2:90:da:d5:b9:b0:b8:ae:31:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:72:D7:47:1B:99:C5:EC:59:BA:32:15:BD:BB:8A:42:07:2E:DC
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3139302e35322e3139322e302f32302d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:a7:7b:08:f6:08:d8:28:6f:84:bf:47:e2:c2:58:cc:4c:
         cf:89:b3:59:35:ae:c6:5e:37:bc:aa:18:99:3f:03:71:b9:a8:
         1c:15:50:26:68:e5:0a:b2:76:49:4a:be:9e:df:04:b9:dd:ed:
         46:a2:b0:38:91:e8:65:0a:a2:fe:43:56:f8:b0:c2:b0:bd:08:
         fc:2b:40:7c:a1:27:60:ca:e5:45:84:cc:6c:b3:58:fc:57:11:
         a7:8c:0c:81:a5:d9:18:d8:76:12:ce:be:d7:e0:f1:bf:3c:26:
         2c:ec:54:e0:80:2b:0a:f2:b9:aa:ec:88:29:9e:d0:13:34:15:
         94:10:03:0e:a3:04:2e:41:e0:5a:fd:b1:d8:7c:25:4c:84:09:
         9d:80:c3:8b:19:ef:48:88:c8:20:41:c5:eb:77:7a:88:81:3b:
         6f:f5:3e:9f:68:5b:99:36:3b:03:76:36:c6:82:c9:1c:ab:b2:
         e1:c7:ca:f3:c6:ed:da:ec:ec:f1:73:64:9c:02:c9:68:19:07:
         53:2a:a4:eb:18:0b:55:a1:4f:4b:4c:f5:cb:c5:2a:bd:44:33:
         68:e3:ce:83:f3:26:f9:4b:c4:1e:4e:29:05:f6:a2:10:1b:02:
         53:ea:b6:a0:8a:53:1d:52:9b:5d:c4:44:da:22:c8:59:d0:a6:
         32:24:65:3e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDz2WyLJukaawgMdim2jo152eg80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwRjQ5NTQxQTc0N0IyMzdCRjVFRUIyREUyQjU2OUIx
RkEwN0JGNTAeFw0yNjAxMDYxOTE2MzFaFw0yNzAxMDUxOTIxMzFaMDMxMTAvBgNV
BAMTKDZGNEU3MkQ3NDcxQjk5QzVFQzU5QkEzMjE1QkRCQjhBNDIwNzJFREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YqD1/q94YfHjDl3SL0hd4FEe
y8uKs7A/tRVpEWvUg8PhGvZTBW1kcTraxtHOLvjRPs4zSS+Iic4uO7qv47dX+Yws
6OC+FpYF0Z0VTsMQekJdIK/nBDBo9r/cTvEiMOsL9kGXQFBJCC8nm8UN23JraFc1
GMZp/u5RBVL7HLQl0o3EuJ2q7DgUV8Q5QuGg8HQMk5e+85rAiatgf5Xs1xyimwcR
ejVBTvEM0Zx3qnOa4G86jaWx9612/pidBJ7IOh9Nx+sB1ZtN4juR/dRHXWd1Y6vn
EQe3e5BKFVpm400Vu45Qve3IdPKyxtbJAH3FVJdj0uGkZqKQ2tW5sLiuMV3HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUb05y10cbmcXsWboyFb27ikIHLtwwHwYDVR0j
BBgwFoAU6A9JVBp0eyN79e6y3itWmx+ge/UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOERCODc0RTQ2QjRBRkY1QkJERDcxN0RGMUNEMDEzNkNC
RDYwNkU0OTgyNUVGMTFCMUZGMDAyOUUwRDU2NkUyLzAvRTgwRjQ5NTQxQTc0N0Iy
MzdCRjVFRUIyREUyQjU2OUIxRkEwN0JGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODBGNDk1NDFBNzQ3QjIzN0JG
NUVFQjJERTJCNTY5QjFGQTA3QkY1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjhEQjg3NEU0NkI0QUZGNUJCREQ3MTdERjFDRDAxMzZDQkQ2MDZFNDk4
MjVFRjExQjFGRjAwMjlFMEQ1NjZFMi8wLzMxMzkzMDJlMzUzMjJlMzEzOTMyMmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvjTA
MA0GCSqGSIb3DQEBCwUAA4IBAQAsl6d7CPYI2ChvhL9H4sJYzEzPibNZNa7GXje8
qhiZPwNxuagcFVAmaOUKsnZJSr6e3wS53e1GorA4kehlCqL+Q1b4sMKwvQj8K0B8
oSdgyuVFhMxss1j8VxGnjAyBpdkY2HYSzr7X4PG/PCYs7FTggCsK8rmq7IgpntAT
NBWUEAMOowQuQeBa/bHYfCVMhAmdgMOLGe9IiMggQcXrd3qIgTtv9T6faFuZNjsD
djbGgskcq7Lhx8rzxu3a7Ozxc2ScAsloGQdTKqTrGAtVoU9LTPXLxSq9RDNo486D
8yb5S8QeTikF9qIQGwJT6ragilMdUptdxETaIshZ0KYyJGU+
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:08 2026 by rpki-client