This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa
File:                     3139302e39392e39362e302f32302d3234203d3e203532323431.roa (raw, json)
Hash identifier:          Ez6wUNBZQYl4+Unjzg1QwfEX6tFGdMC/oA80uKot2qU=
Subject key identifier:   E6:16:22:31:32:1D:69:6B:CB:18:E3:1E:BC:49:DA:23:CB:FB:82:62
Certificate issuer:       /CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
Certificate serial:       6F131E1EC26DFABC122047AD0A74A8F6719A5AC4
Authority key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa
Signing time:             Tue 06 Jan 2026 19:40:37 +0000
ROA not before:           Tue 06 Jan 2026 19:35:37 +0000
ROA not after:            Tue 05 Jan 2027 19:40:37 +0000
asID:                     52241
IP address blocks:        190.99.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:13:1e:1e:c2:6d:fa:bc:12:20:47:ad:0a:74:a8:f6:71:9a:5a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B
        Validity
            Not Before: Jan  6 19:35:37 2026 GMT
            Not After : Jan  5 19:40:37 2027 GMT
        Subject: CN=E6162231321D696BCB18E31EBC49DA23CBFB8262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:50:67:04:bc:97:f6:a9:85:a6:cc:38:a2:
                    3e:4b:ab:44:a1:28:6e:74:30:5b:00:62:56:d6:eb:
                    6c:08:66:cb:9a:31:f2:6f:8c:d7:61:22:60:78:a5:
                    bc:0e:bd:ce:10:cb:f5:51:d6:82:79:59:08:28:5b:
                    88:43:92:69:4a:44:00:03:3c:7f:29:ea:d6:c5:07:
                    ae:69:7a:80:05:8e:c8:d0:56:a5:58:4a:6b:d9:19:
                    f5:89:ea:cd:af:2b:fc:34:b7:e0:c9:0e:0c:dd:af:
                    95:b3:f6:58:84:d7:f2:f4:a6:dc:ae:ef:2b:d8:9a:
                    3c:f3:88:ae:f7:e2:dc:9e:fb:d6:33:58:d7:1b:2f:
                    83:5d:a2:1e:96:a7:1e:37:de:b2:3e:21:93:d9:90:
                    4e:f1:fc:3b:96:d3:1c:f4:e2:0d:6e:de:67:7f:14:
                    e5:e7:59:af:ab:f7:d5:30:8d:46:6d:e0:73:c6:51:
                    ee:3f:0c:5f:71:3a:91:50:fb:96:eb:b7:d6:5b:bb:
                    73:d1:71:ed:c4:2b:30:71:c6:68:44:75:e9:ba:15:
                    9f:66:3a:24:cb:2c:b9:2f:d9:4a:08:ea:16:99:49:
                    28:3f:8e:08:ca:14:81:2a:70:11:38:99:c9:31:5e:
                    96:d4:19:63:0e:aa:c7:0a:8f:77:ca:68:1b:97:8c:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:22:31:32:1D:69:6B:CB:18:E3:1E:BC:49:DA:23:CB:FB:82:62
            X509v3 Authority Key Identifier:
                keyid:D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/3139302e39392e39362e302f32302d3234203d3e203532323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:31:a0:06:8b:5e:79:ed:e4:b0:99:71:0c:71:b4:7a:04:
         4a:4d:1f:da:37:8a:45:c7:e9:b9:ad:b0:fe:ee:5f:62:eb:97:
         03:02:8c:3a:30:86:ce:62:63:77:ac:ab:f0:92:45:3d:e6:fe:
         2c:45:d1:43:82:35:b4:92:22:37:a2:65:44:de:1c:18:cb:75:
         28:6e:77:18:01:3d:7a:cc:b5:fb:3f:34:c1:17:08:ba:bb:47:
         50:8e:cd:a3:46:7d:46:1e:6e:94:c3:49:19:d5:53:f3:a2:be:
         4b:02:bb:f2:9b:91:95:0c:cb:be:c2:87:e5:42:61:7c:b1:27:
         ef:c1:47:46:ad:3c:35:f0:5b:72:4c:d8:07:90:29:cb:37:37:
         96:27:80:ca:de:4d:82:62:69:00:54:66:7a:a8:46:e2:0c:8c:
         c5:20:5c:30:c6:d5:80:7f:15:f7:49:6d:e8:b6:aa:be:87:22:
         67:f2:75:d0:04:6d:3d:d6:cc:b3:21:c8:ef:7e:4a:2a:39:e3:
         dc:3d:41:f0:72:6d:fe:88:c6:e9:0a:b3:73:c7:2d:cd:3e:0d:
         0a:29:76:1c:fc:cd:2a:0f:16:3d:25:19:32:fe:ad:ed:03:f5:
         02:64:be:28:03:b3:07:1d:52:84:ea:8c:a7:c0:f0:e6:14:a5:
         e4:1e:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:45 2026 by rpki-client