This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa
File:                     3139302e3131312e35392e302f32342d3234203d3e203532333437.roa (raw, json)
Hash identifier:          QIbQ/AF3R63CGNeDF0txkh5QiMnPn6XiowMkGu5Sn74=
Subject key identifier:   EF:2E:85:7F:B5:78:4C:35:78:4F:4F:63:8C:41:AB:C0:CC:3B:CF:9C
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       49FE1704013B748FE7AD461A6A6B9096DAC36AFE
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa
Signing time:             Tue 06 Jan 2026 19:16:05 +0000
ROA not before:           Tue 06 Jan 2026 19:11:05 +0000
ROA not after:            Tue 05 Jan 2027 19:16:05 +0000
asID:                     52347
IP address blocks:        190.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fe:17:04:01:3b:74:8f:e7:ad:46:1a:6a:6b:90:96:da:c3:6a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Jan  6 19:11:05 2026 GMT
            Not After : Jan  5 19:16:05 2027 GMT
        Subject: CN=EF2E857FB5784C35784F4F638C41ABC0CC3BCF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:29:59:d9:3e:1a:92:31:91:20:8f:85:4e:
                    e9:3e:67:ca:bf:9e:1b:81:1e:83:ec:28:6e:fe:4b:
                    5f:47:32:80:af:9c:48:c9:62:04:a6:7f:19:02:04:
                    48:14:bb:40:b1:cf:28:ba:ca:ac:1c:19:86:3e:30:
                    ac:1a:bb:ef:19:cc:d4:4b:ec:70:93:9c:63:69:31:
                    6d:69:b3:2a:69:28:3f:a9:c3:53:50:3b:d9:6e:18:
                    2b:e4:cc:de:fb:a6:48:39:47:ca:e1:77:80:a9:b2:
                    90:fa:68:e1:e5:3b:fc:d9:c4:6e:c3:4c:7a:4c:4f:
                    a6:2f:4e:aa:50:20:a5:d9:83:4e:f4:9e:d2:05:9e:
                    7c:49:b1:66:bb:73:79:72:bf:0c:c7:b6:8f:44:a5:
                    ca:18:f8:24:62:85:02:91:3e:b2:4f:2b:52:ef:3c:
                    8b:44:6f:76:2d:73:8a:e6:55:81:6b:25:f8:88:d1:
                    d6:80:d2:a0:eb:3a:a2:65:7d:77:7e:33:b9:56:da:
                    90:6c:7f:cd:0c:f4:71:d0:a8:41:b6:9f:03:32:59:
                    f3:1c:d7:a4:bd:5c:7f:9f:49:10:48:56:51:e3:8a:
                    46:3d:2c:e1:d1:f5:10:2e:e7:37:ad:85:79:59:fd:
                    ad:b7:fb:54:c4:64:d2:1e:5a:b2:72:d7:11:8d:22:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:85:7F:B5:78:4C:35:78:4F:4F:63:8C:41:AB:C0:CC:3B:CF:9C
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3139302e3131312e35392e302f32342d3234203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:e5:59:bd:71:68:40:96:e8:7b:30:c0:8b:7b:65:25:30:
         32:64:c1:ba:ef:a5:75:4c:6b:a2:d4:e5:e8:da:ac:63:e3:73:
         77:15:ab:7b:65:3f:91:d5:26:02:14:77:b5:ef:29:57:d9:b9:
         83:fb:84:71:43:d8:bf:ba:f9:d4:38:53:bf:f8:d0:ea:2f:aa:
         d0:ef:9e:7c:f6:9f:13:e6:5c:53:dd:d2:e6:b7:9a:cd:86:14:
         32:f2:cd:ea:9c:ee:0f:31:69:8d:03:cf:77:94:24:75:ea:09:
         69:e1:ae:33:e1:ef:26:dd:ac:31:a8:c5:66:d5:74:b9:02:f4:
         01:b9:52:10:06:ea:c0:76:62:c0:dd:a4:c0:1d:8a:22:7b:fb:
         69:ac:38:de:6f:93:9b:8e:0d:4a:a7:13:06:a0:c7:48:71:af:
         ff:33:18:89:3e:f2:83:d5:63:b7:86:2e:dd:c2:eb:a6:0e:ab:
         1f:ec:34:69:74:b9:c0:3d:0b:0d:9a:5a:c7:95:d1:b3:7c:bf:
         36:79:e6:a1:d2:4b:43:e8:79:85:81:3a:dd:f2:c1:c9:1f:49:
         9c:36:1a:e2:71:da:85:cb:31:84:b8:4d:7e:a2:48:1d:6e:34:
         ba:00:ee:b4:6b:53:0c:5e:9d:af:47:47:71:26:a1:16:af:7d:
         0d:d5:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:30:00 2026 by rpki-client