This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa
File:                     3139302e3131312e34302e302f32312d3231203d3e203532333437.roa (raw, json)
Hash identifier:          0CksCYz0u6QI7V0+DAUul009+uI/CX8/9HMa7sF2E0E=
Subject key identifier:   7A:70:17:29:60:29:49:DC:D9:D9:3E:F8:CD:9B:BC:27:09:44:EC:33
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       23FF635C56BAFAE34AA41AF2A9BB860FE5D2DB83
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa
Signing time:             Tue 06 Jan 2026 19:16:04 +0000
ROA not before:           Tue 06 Jan 2026 19:11:04 +0000
ROA not after:            Tue 05 Jan 2027 19:16:04 +0000
asID:                     52347
IP address blocks:        190.111.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ff:63:5c:56:ba:fa:e3:4a:a4:1a:f2:a9:bb:86:0f:e5:d2:db:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Jan  6 19:11:04 2026 GMT
            Not After : Jan  5 19:16:04 2027 GMT
        Subject: CN=7A701729602949DCD9D93EF8CD9BBC270944EC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:0b:0a:39:f7:09:31:43:12:49:49:7b:de:
                    c4:1f:1a:1b:b4:ff:f2:f4:59:d9:fe:00:46:f4:13:
                    88:8c:fb:d7:30:3e:91:45:8f:d6:f2:e5:33:98:71:
                    65:ec:d6:e1:8b:6c:39:3a:87:6d:69:4a:94:70:3f:
                    bc:5d:06:1f:61:e2:8c:29:71:0c:44:c5:0a:19:a1:
                    ed:8a:89:4e:bb:3e:09:90:8e:85:6e:6d:82:32:4c:
                    e7:4e:dc:47:e4:a5:b3:98:c2:15:00:38:2e:04:d6:
                    92:c2:7d:3e:e5:6e:c3:4b:39:e5:8a:88:2c:f1:f1:
                    89:17:2e:0a:f5:0a:c9:0b:00:db:92:29:1c:69:ef:
                    bd:1e:ea:64:0d:bc:77:95:ce:7d:99:e3:58:5a:ac:
                    83:9e:07:2d:47:df:b9:d6:ec:20:ad:6a:a3:38:8b:
                    9f:86:f8:26:57:61:16:21:d7:95:58:55:49:10:bf:
                    f4:c8:54:f0:1e:dd:ca:b4:c2:a3:69:fd:d0:2f:e0:
                    e1:2c:0d:94:29:b0:5a:ff:0b:1b:cb:90:1a:49:7b:
                    c1:9a:1d:08:b7:68:d1:9c:e0:fc:0c:02:20:b6:e8:
                    fe:66:ff:fd:c2:6f:5b:8c:e9:89:bb:d0:a7:2e:87:
                    eb:9b:7c:0c:27:33:54:a7:65:c0:c9:d5:37:99:d5:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:70:17:29:60:29:49:DC:D9:D9:3E:F8:CD:9B:BC:27:09:44:EC:33
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e34302e302f32312d3231203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:8f:3a:2a:da:83:5a:28:bb:e2:dd:94:32:82:29:8f:ce:
         48:cb:3b:6b:54:f2:36:74:4e:c7:d9:0d:92:ba:bd:f8:6a:76:
         96:5e:4a:52:d0:df:d1:be:f5:0d:17:48:e7:ab:d9:00:de:95:
         d0:3a:a3:53:37:b0:59:f6:02:23:35:f1:f6:e9:4a:40:0e:e2:
         8b:c3:9d:70:17:e1:a4:74:ee:c9:9b:b4:ca:23:9d:26:0a:ac:
         1f:c1:3c:01:44:11:7d:1c:3b:36:c1:f0:5f:ce:66:86:50:59:
         3f:45:67:b1:36:12:d3:f1:fb:86:f0:25:7d:7a:48:77:41:4d:
         61:3d:07:8b:0b:74:cd:0e:7f:6e:ba:40:ce:e5:89:a6:52:3b:
         1a:71:61:6c:77:3b:4c:06:c1:bb:4b:b1:49:c1:69:67:68:14:
         5e:9e:01:e3:32:e2:b9:c0:d1:2e:d0:4e:e3:d4:ef:e5:a8:44:
         14:55:a6:44:c4:92:de:6f:b6:17:5b:c7:b8:26:42:db:43:44:
         31:43:ba:ea:5f:9c:3a:15:78:70:b6:85:d7:5b:51:1b:58:0a:
         57:22:7b:60:e4:51:1f:78:61:71:7b:6d:b9:4c:29:b4:5e:48:
         9d:f1:66:38:38:55:f8:90:c9:20:1d:0b:0f:b6:2f:bb:0d:d9:
         bf:74:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:28:54 2026 by rpki-client