This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa
File:                     3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa (raw, json)
Hash identifier:          8xwYa6p6ftH/xhjwAVfyLxbjA70uFFD3n3ip8QPvF2Y=
Subject key identifier:   01:92:13:EE:1A:CB:E9:C2:E7:76:71:76:00:4D:C9:6C:F7:8D:67:48
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       21D590FB4CD5B7A16C1335A03823AA52C82EC2BE
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa
Signing time:             Tue 06 Jan 2026 19:05:22 +0000
ROA not before:           Tue 06 Jan 2026 19:00:22 +0000
ROA not after:            Tue 05 Jan 2027 19:05:22 +0000
asID:                     273019
IP address blocks:        190.12.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:90:fb:4c:d5:b7:a1:6c:13:35:a0:38:23:aa:52:c8:2e:c2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:22 2026 GMT
            Not After : Jan  5 19:05:22 2027 GMT
        Subject: CN=019213EE1ACBE9C2E7767176004DC96CF78D6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:1f:e7:dc:ab:c3:e7:53:ed:a1:fe:6d:b8:
                    c2:82:db:67:cc:c8:b1:ed:37:41:a1:96:19:72:b3:
                    27:e7:1e:51:82:c1:00:bc:13:54:1a:4e:17:3b:b6:
                    6b:b4:a1:98:9b:2c:79:c7:e0:eb:02:96:28:95:b1:
                    38:3d:6a:fc:2a:28:a3:27:f4:52:96:2c:51:8c:32:
                    ca:63:c4:62:74:23:ee:7d:90:a5:f9:9d:09:67:2a:
                    49:2e:bf:50:da:b1:36:ec:e9:c4:80:e4:7b:80:f8:
                    83:ed:4c:cf:10:f4:96:56:1b:99:7d:93:59:bf:8a:
                    c3:d8:74:b5:a9:bb:33:5d:06:23:03:87:6d:20:b6:
                    a1:68:2b:ff:eb:ed:b4:e5:f0:1a:73:e6:3e:50:88:
                    ff:2a:ea:1f:a0:25:bb:cd:52:5c:98:bc:86:a1:3c:
                    38:6f:0e:64:a1:68:0c:d9:58:f6:31:f8:86:24:d5:
                    a7:8f:46:08:70:9b:cc:2e:9b:db:e6:b5:c7:56:5d:
                    71:ad:38:22:93:14:8b:09:62:90:58:0a:66:23:1c:
                    0b:23:24:42:3c:ee:58:3f:69:6b:97:1e:b9:be:93:
                    10:6a:82:8d:52:93:eb:c0:25:42:93:77:44:11:7d:
                    66:95:a7:7f:11:19:a2:78:31:70:2d:05:b5:bf:bf:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:13:EE:1A:CB:E9:C2:E7:76:71:76:00:4D:C9:6C:F7:8D:67:48
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e31322e3137322e302f32322d3234203d3e20323733303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:5c:23:49:51:a8:3f:21:38:c9:04:aa:c6:8b:dc:54:e8:e9:
         bc:31:d0:db:00:1e:2c:20:44:41:65:8b:1e:4a:7c:12:14:7e:
         d2:cb:a3:2e:44:9d:6e:2f:c6:5f:37:d9:aa:35:08:21:9f:97:
         42:0e:c6:ff:4c:51:97:c8:09:76:be:8d:b8:a8:74:b2:ca:72:
         91:94:2c:04:bd:b2:08:b7:65:80:bc:2b:4b:9e:84:b2:9a:94:
         e6:eb:31:80:4f:2c:7d:22:41:ae:76:42:92:12:f3:58:33:79:
         d8:56:23:30:3f:75:ea:6a:c9:7f:70:9a:7b:4d:a2:47:51:df:
         e2:ff:f7:7a:e8:79:14:01:df:96:60:93:67:dc:85:85:85:d8:
         9f:7c:f7:c2:49:ae:f3:ca:44:0a:77:c7:18:04:14:8b:20:cb:
         24:3c:9e:bf:b0:91:51:0f:01:28:e4:ae:2b:65:c3:03:3c:01:
         74:ef:83:db:40:08:e5:6e:72:8a:73:3e:77:01:10:8b:4a:c3:
         d9:48:7c:34:7c:36:58:91:29:7d:40:8a:4d:ef:ca:5b:51:51:
         b6:eb:c8:05:77:48:97:8e:6d:99:18:b0:2d:f3:fc:ce:2b:37:
         55:85:77:a5:8e:86:6b:b6:f3:bf:28:b8:88:fd:49:15:e4:f6:
         41:c2:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:28 2026 by rpki-client