This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa
File:                     3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa (raw, json)
Hash identifier:          jqCf+iJEfVXvWvu6KfjbNTpV/7xMIhBVMqaQfgOTaRE=
Subject key identifier:   70:79:B7:39:3C:32:99:15:E5:E1:EB:ED:A2:0A:68:C7:B3:0A:CA:82
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       669A8215CCE29E4C5BA13DEA53D24D648A3E1F96
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa
Signing time:             Tue 06 Jan 2026 19:25:04 +0000
ROA not before:           Tue 06 Jan 2026 19:20:04 +0000
ROA not after:            Tue 05 Jan 2027 19:25:04 +0000
asID:                     270111
IP address blocks:        189.51.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:82:15:cc:e2:9e:4c:5b:a1:3d:ea:53:d2:4d:64:8a:3e:1f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Jan  6 19:20:04 2026 GMT
            Not After : Jan  5 19:25:04 2027 GMT
        Subject: CN=7079B7393C329915E5E1EBEDA20A68C7B30ACA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:21:1a:31:5e:d5:18:56:c1:8b:e2:82:17:
                    b4:f4:58:32:c1:f7:c8:ac:5d:c8:23:73:79:6d:af:
                    ed:f2:6c:8c:ec:56:c4:35:ac:7b:46:fd:18:71:33:
                    a9:87:18:83:a2:f9:02:c4:1f:ed:aa:a5:ad:64:41:
                    73:e2:b7:af:3e:86:b8:95:23:9e:38:08:14:6a:5d:
                    62:18:7c:db:8e:28:a0:1e:f5:b0:d5:b3:07:a3:84:
                    26:de:bb:7e:5c:ce:7b:9b:a6:7e:5f:57:96:42:db:
                    7e:22:ae:41:a1:f5:ce:67:b7:8f:b5:ed:33:6b:36:
                    f3:37:cc:d2:88:f7:be:0c:23:ba:5a:62:48:8b:07:
                    62:8d:7d:12:ff:e8:c4:88:8a:9e:b2:21:3e:4b:30:
                    36:06:e9:70:30:dc:1e:3c:84:49:1e:6c:d6:3a:1a:
                    68:88:ec:dc:0e:72:c5:c8:d0:88:11:f3:82:29:5f:
                    c4:7b:f6:75:73:c8:3e:ac:de:97:57:fc:e8:52:67:
                    0a:27:7b:43:76:5c:d9:b4:4a:da:b0:4c:57:a5:05:
                    9b:97:30:74:31:14:65:73:65:49:3a:cb:3d:15:b2:
                    7a:c2:b6:10:21:e6:f4:1e:f6:a0:12:4e:b1:72:9d:
                    fc:0b:12:c0:63:53:32:4f:28:49:ad:d7:73:36:ee:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:B7:39:3C:32:99:15:E5:E1:EB:ED:A2:0A:68:C7:B3:0A:CA:82
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6c:c0:80:e1:aa:6e:70:77:b4:81:d2:bc:3d:9f:33:3b:fd:
         9e:ff:3e:9f:ba:7e:1d:74:6c:97:ed:59:08:a0:c3:38:a7:30:
         4d:e8:07:44:e8:ed:fd:fb:e8:f0:44:a4:4e:fe:7a:19:61:c6:
         1d:41:1e:8b:35:11:bd:59:66:81:ee:2e:2d:61:c3:1b:74:78:
         c1:71:eb:a3:27:27:00:fe:84:51:34:5a:0e:4b:8f:6f:98:23:
         e0:a0:09:47:c3:7e:36:ce:68:f0:fc:07:7f:4b:ae:de:c1:d3:
         54:c8:85:22:e5:9a:8d:a8:87:8c:69:c2:bf:1f:58:2d:60:63:
         4a:2b:5c:52:07:e8:0d:28:23:b3:00:54:7c:1d:46:00:16:8f:
         80:0e:cf:94:6d:f6:07:fb:68:83:bb:c6:9b:13:01:b2:01:cd:
         9c:11:2b:3b:b5:8a:4c:15:be:55:1c:99:50:f8:23:cb:62:a8:
         04:36:86:89:4b:f3:b5:ff:09:01:46:1a:f3:ca:74:f3:5b:72:
         6f:63:86:98:da:68:5b:55:b7:61:08:04:3f:2f:2b:c3:70:1e:
         fc:0f:1a:41:b2:e1:bd:eb:d7:a4:a6:45:9b:f5:c6:b9:c2:6c:
         9b:e7:d4:40:d7:d8:b8:49:97:db:aa:08:7a:2a:56:94:92:eb:
         10:63:aa:3b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZpqCFczinkxboT3qU9JNZIo+H5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVBRjg2MzBDNzI4MjM1RDZEMkM1MTlGMjA3MTJDRURB
RDlFNUI2QjAeFw0yNjAxMDYxOTIwMDRaFw0yNzAxMDUxOTI1MDRaMDMxMTAvBgNV
BAMTKDcwNzlCNzM5M0MzMjk5MTVFNUUxRUJFREEyMEE2OEM3QjMwQUNBODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTyEaMV7VGFbBi+KCF7T0WDLB
98isXcgjc3ltr+3ybIzsVsQ1rHtG/RhxM6mHGIOi+QLEH+2qpa1kQXPit68+hriV
I544CBRqXWIYfNuOKKAe9bDVswejhCbeu35cznubpn5fV5ZC234irkGh9c5nt4+1
7TNrNvM3zNKI974MI7paYkiLB2KNfRL/6MSIip6yIT5LMDYG6XAw3B48hEkebNY6
GmiI7NwOcsXI0IgR84IpX8R79nVzyD6s3pdX/OhSZwone0N2XNm0StqwTFelBZuX
MHQxFGVzZUk6yz0VsnrCthAh5vQe9qASTrFynfwLEsBjUzJPKEmt13M27j5tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcHm3OTwymRXl4evtogpox7MKyoIwHwYDVR0j
BBgwFoAUxa+GMMcoI11tLFGfIHEs7a2eW2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjQyMDVGRTYyQUVGMjE0MDQ4RTREN0M0RjU5QjI2NDUz
QjhFQjU0OUY0M0Y5OEJGNTNGM0Q0NDJFNkJFNTIyLzAvQzVBRjg2MzBDNzI4MjM1
RDZEMkM1MTlGMjA3MTJDRURBRDlFNUI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNUFGODYzMEM3MjgyMzVENkQy
QzUxOUYyMDcxMkNFREFEOUU1QjZCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI0MjA1RkU2MkFFRjIxNDA0OEU0RDdDNEY1OUIyNjQ1M0I4RUI1NDlG
NDNGOThCRjUzRjNENDQyRTZCRTUyMi8wLzMxMzgzOTJlMzUzMTJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMwMzEzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvTOo
MA0GCSqGSIb3DQEBCwUAA4IBAQApbMCA4apucHe0gdK8PZ8zO/2e/z6fun4ddGyX
7VkIoMM4pzBN6AdE6O39++jwRKRO/noZYcYdQR6LNRG9WWaB7i4tYcMbdHjBceuj
JycA/oRRNFoOS49vmCPgoAlHw342zmjw/Ad/S67ewdNUyIUi5ZqNqIeMacK/H1gt
YGNKK1xSB+gNKCOzAFR8HUYAFo+ADs+UbfYH+2iDu8abEwGyAc2cESs7tYpMFb5V
HJlQ+CPLYqgENoaJS/O1/wkBRhrzynTzW3JvY4aY2mhbVbdhCAQ/LyvDcB78DxpB
suG969ekpkWb9ca5wmyb59RA19i4SZfbqgh6KlaUkusQY6o7
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:59 2026 by rpki-client