This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e39362e302f31392d3234203d3e203237373733.roa
File:                     3139302e35332e39362e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          veYvYa5ptpjHLm2WFca9nY9cyHjg1Lqj8e6xFaujewU=
Subject key identifier:   29:9E:26:8D:2D:8D:45:47:1B:4F:38:1C:9C:86:FC:D4:78:A1:6E:C7
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       433683297E22305BDCF2396DBDB8D90DA3B60569
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e39362e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:26 +0000
ROA not before:           Tue 06 Jan 2026 20:48:26 +0000
ROA not after:            Tue 05 Jan 2027 20:53:26 +0000
asID:                     27773
IP address blocks:        190.53.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:83:29:7e:22:30:5b:dc:f2:39:6d:bd:b8:d9:0d:a3:b6:05:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:26 2026 GMT
            Not After : Jan  5 20:53:26 2027 GMT
        Subject: CN=299E268D2D8D45471B4F381C9C86FCD478A16EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:59:11:a2:48:58:f4:7e:81:af:1e:a4:7f:
                    19:cc:56:a4:5a:c9:b5:f5:3c:83:df:ed:6a:a6:e4:
                    20:c2:5c:08:35:f2:2d:6c:64:77:e0:95:16:66:8d:
                    f2:43:ee:aa:0d:4c:bf:08:ab:d8:8b:20:a6:1d:12:
                    36:6e:51:11:83:64:57:31:ee:8c:19:ba:75:79:5c:
                    17:47:56:8e:3a:f2:b9:cf:94:52:f1:14:3c:e8:bd:
                    5e:7e:11:f3:00:77:ff:e6:73:9a:ba:7d:7e:2a:e6:
                    f1:f5:bf:b7:88:9e:7b:d4:44:a2:ee:9b:e7:6e:ee:
                    ec:ae:13:e6:a1:f2:ef:c2:d1:03:65:f4:0b:fe:31:
                    bf:d9:ca:c3:e6:5b:e0:9c:0c:ab:31:ac:ef:c3:19:
                    5f:81:cb:de:3c:d8:e0:08:c2:16:ab:ac:73:73:3f:
                    ea:20:9c:18:8c:bd:30:3b:97:ab:60:58:f0:76:85:
                    ff:84:2a:d7:7f:db:71:59:ea:23:3f:9e:e6:0e:9a:
                    c2:3f:c0:cd:d3:49:11:bb:61:21:54:24:af:df:b9:
                    9f:71:af:44:79:f8:10:1b:21:22:c4:a8:6e:cf:3a:
                    6e:75:3a:4a:c4:1a:d3:32:43:4d:f9:9b:c4:30:6d:
                    b3:c2:8f:bb:fc:4f:a6:61:08:06:d5:7e:d1:77:67:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:26:8D:2D:8D:45:47:1B:4F:38:1C:9C:86:FC:D4:78:A1:6E:C7
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e39362e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:02:ac:d3:c8:6c:d9:20:14:01:93:b1:56:54:a9:d6:08:
         4c:f8:eb:cd:c4:a6:ed:81:56:33:91:95:06:69:77:27:5f:08:
         14:d3:5f:fe:12:d7:e2:c4:2d:79:50:41:a0:7f:df:91:6e:03:
         fc:4a:07:1a:79:17:37:0b:1b:dd:ac:37:0c:96:d5:b9:ac:b2:
         33:19:ad:cb:27:a5:8c:48:2f:d6:2f:37:71:4d:b7:b0:a9:fe:
         9b:c4:88:41:2f:96:1b:02:a5:13:b5:0f:a7:bf:5d:59:c6:cf:
         bc:9f:99:bc:01:65:d3:c2:15:c5:b9:62:91:02:06:58:13:b6:
         c4:3b:14:41:e4:71:c6:06:0e:71:55:5f:7f:b0:b5:91:b5:42:
         de:8d:1e:f8:ba:29:16:7b:f8:e4:8d:05:e3:2c:f5:4c:c4:7f:
         1a:40:ed:ae:40:83:e9:8d:de:f5:a7:0b:47:8e:52:27:dd:b3:
         e9:4b:80:c2:4c:ed:de:2f:fb:80:c6:33:5d:6f:32:79:39:2f:
         25:6b:14:08:24:67:e4:b7:e9:49:f1:49:c4:fa:f8:8b:75:0f:
         d4:0d:e9:6b:3a:3f:24:21:80:1d:a2:ee:16:a4:c8:da:50:71:
         35:46:a1:11:69:73:66:e8:67:14:4b:f1:27:19:c7:0f:f2:db:
         a4:f6:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:35 2026 by rpki-client