This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
File:                     3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa (raw, json)
Hash identifier:          KUDU+27PURxaEWFoE/UEZOdWcsbgdfzkmcOm9dR1zII=
Subject key identifier:   8D:99:40:0B:4A:F2:51:7E:67:BD:A2:19:E4:9C:71:AB:78:0C:A1:A4
Certificate issuer:       /CN=53953B71C225D2143C92C173E8F140C5C5F22612
Certificate serial:       0561DB2D12D95A3DAD99A56B49147923287E9DDD
Authority key identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa
Signing time:             Tue 06 Jan 2026 19:39:14 +0000
ROA not before:           Tue 06 Jan 2026 19:34:14 +0000
ROA not after:            Tue 05 Jan 2027 19:39:14 +0000
asID:                     52337
IP address blocks:        190.105.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl
                          rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:61:db:2d:12:d9:5a:3d:ad:99:a5:6b:49:14:79:23:28:7e:9d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53953B71C225D2143C92C173E8F140C5C5F22612
        Validity
            Not Before: Jan  6 19:34:14 2026 GMT
            Not After : Jan  5 19:39:14 2027 GMT
        Subject: CN=8D99400B4AF2517E67BDA219E49C71AB780CA1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:d0:a1:c5:e3:e8:41:a8:a7:15:a9:ac:af:
                    42:c2:40:01:0f:b0:b3:e4:f6:43:2d:f2:90:88:42:
                    35:1d:10:0c:5a:d8:fa:d3:1f:68:75:ec:92:20:3b:
                    0a:44:87:64:9b:5d:f1:7b:4d:5e:3d:18:95:21:c2:
                    a1:c8:3e:a4:b6:76:41:dd:56:51:fd:47:19:94:f4:
                    54:cc:1c:1a:f1:60:d1:b1:dd:fc:3e:8c:4c:de:79:
                    38:af:2b:a4:d0:69:e6:28:43:60:0d:e9:eb:51:ef:
                    a0:17:86:25:19:39:7e:2a:00:ba:10:e8:41:d5:ba:
                    e1:04:ac:e9:b4:85:e7:75:05:7f:11:e3:0d:4e:db:
                    bd:f1:6e:d0:d6:d9:6e:27:3c:b5:16:58:a7:d4:25:
                    0b:13:93:05:92:74:12:15:3b:63:3e:92:b5:b3:9a:
                    2c:8d:2a:2a:b2:4d:37:b2:6d:1a:44:d8:13:16:bd:
                    cd:40:ec:37:14:a1:f0:11:e0:1c:0a:1c:fe:4f:e0:
                    b7:8a:6f:ac:8e:25:0a:33:9c:7d:4b:35:5e:35:79:
                    cc:b3:13:fe:bb:8f:2a:f5:2b:a5:96:8e:9b:27:b9:
                    44:87:19:81:17:40:63:0c:91:94:eb:17:c3:6c:ec:
                    3c:5d:90:66:c5:08:70:bf:4e:69:b5:fa:bd:f2:d6:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:99:40:0B:4A:F2:51:7E:67:BD:A2:19:E4:9C:71:AB:78:0C:A1:A4
            X509v3 Authority Key Identifier:
                keyid:53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3139302e3130352e3135322e302f32322d3234203d3e203532333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:95:ed:a2:fa:51:77:8e:91:8d:bb:fe:51:14:b8:a4:bb:b7:
         74:2d:61:88:25:16:38:fd:dc:01:45:86:a1:13:31:1b:08:a0:
         d6:b7:47:85:a0:ae:9b:16:0c:a4:7b:8f:7b:05:77:4d:db:2b:
         ce:ce:a7:1a:0c:b0:71:19:62:e4:69:6f:82:74:87:bf:06:c9:
         69:7b:86:f1:7f:54:d6:94:f0:01:b8:35:a4:f6:f7:40:67:21:
         83:ef:d8:e0:4b:47:34:09:ce:7a:e7:f8:3f:b3:b9:00:8c:2c:
         b8:38:88:5b:c1:c0:90:0c:fa:09:fa:44:a2:14:60:a6:1a:d1:
         00:6d:aa:bc:cd:7b:8e:51:e4:c8:10:6e:aa:27:a2:94:78:95:
         52:13:d9:fc:58:42:1a:52:59:06:e5:a9:a6:3c:b7:45:71:b1:
         55:ae:9b:66:17:b0:7f:51:4b:39:e4:02:ee:6a:4c:4a:18:97:
         a4:1a:e9:a3:52:8e:f5:4c:79:03:fa:5c:ad:76:8c:c7:25:40:
         ed:c0:60:28:16:ff:52:b4:6d:50:78:63:2b:7e:c9:e7:b1:48:
         8b:82:cc:ba:c3:6b:8f:73:d4:b2:47:eb:f9:82:90:c2:db:8b:
         70:d0:bb:d0:94:9c:7a:f4:e0:f0:55:f9:04:d4:18:92:e6:3c:
         b4:58:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:23 2026 by rpki-client