This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa
File:                     3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa (raw, json)
Hash identifier:          1MKb4dvkRImk0iyPFoJoLytFg5bZ5zKjIu+evcHvrXo=
Subject key identifier:   24:B5:6E:D6:BA:D0:3B:10:6A:F5:8E:6E:4B:2A:9C:A7:E0:56:F3:65
Certificate issuer:       /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Certificate serial:       4E900396417B8E0CC82D8E4911AABB384F194B14
Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa
Signing time:             Tue 02 Dec 2025 17:53:55 +0000
ROA not before:           Tue 02 Dec 2025 17:48:55 +0000
ROA not after:            Tue 01 Dec 2026 17:53:55 +0000
asID:                     52326
IP address blocks:        190.151.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 00:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:90:03:96:41:7b:8e:0c:c8:2d:8e:49:11:aa:bb:38:4f:19:4b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
        Validity
            Not Before: Dec  2 17:48:55 2025 GMT
            Not After : Dec  1 17:53:55 2026 GMT
        Subject: CN=24B56ED6BAD03B106AF58E6E4B2A9CA7E056F365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:97:1e:67:18:e8:b6:b3:d0:7a:45:fa:67:
                    f7:25:6d:19:47:d9:fa:2f:d0:94:e0:da:bb:0b:ea:
                    c7:a5:4a:6f:2e:88:00:34:94:2b:a4:62:e3:b4:e1:
                    6e:f6:da:19:90:db:08:d0:1b:82:aa:1a:37:4e:9e:
                    19:81:33:1c:4a:e7:65:47:34:58:51:1a:ea:50:dc:
                    fb:79:6e:01:e3:39:97:0a:cd:1f:06:18:30:46:cb:
                    8e:28:e2:0e:df:90:51:06:b2:b0:a1:ff:3e:97:85:
                    ab:b7:f0:cf:25:b2:11:19:03:4b:fb:93:0a:10:4b:
                    4e:fe:1c:9e:f2:66:25:39:32:44:5b:a2:df:f3:41:
                    55:57:f0:00:8b:f8:e1:cf:53:2c:91:49:b8:46:4f:
                    17:47:f1:90:d4:c0:40:ac:f2:bc:e3:4e:f4:d0:d3:
                    1a:8d:9a:af:75:96:24:ba:03:a6:12:2e:3c:0f:74:
                    48:40:31:78:ef:24:10:c3:88:fe:07:48:a3:be:8a:
                    99:99:9e:42:2a:53:f9:06:f4:37:cb:cd:8b:3d:c1:
                    ff:e5:b6:fc:18:dd:b0:c8:44:02:ea:4a:d5:07:f2:
                    3f:51:10:7b:27:3b:59:1f:fc:02:0f:20:7b:d1:95:
                    4a:f8:49:9c:88:94:dc:e1:ea:20:71:ed:51:7a:d8:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:6E:D6:BA:D0:3B:10:6A:F5:8E:6E:4B:2A:9C:A7:E0:56:F3:65
            X509v3 Authority Key Identifier:
                keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:21:14:13:45:4b:a1:f7:e9:d5:fc:c3:38:30:da:61:8b:89:
         83:7a:6c:48:3e:54:a4:5a:b5:23:76:2c:61:b0:cf:1b:2a:d6:
         87:34:6e:b2:2f:40:db:ba:e5:e3:06:d1:c9:bf:c9:dd:64:32:
         b2:f6:24:9c:e4:25:1c:95:55:eb:3f:01:f8:ea:9b:fa:8c:94:
         31:42:23:a6:6e:a1:3b:33:86:23:78:9d:b9:81:ee:fc:1f:db:
         9c:2d:a0:7b:ef:1a:45:48:20:05:13:ea:f2:c5:37:78:5b:b2:
         33:e9:e9:51:60:ef:85:f9:7f:5d:01:8e:a8:d5:2e:28:5e:88:
         42:85:dc:58:b8:e1:3e:5a:a7:9c:e2:21:44:63:88:51:68:f2:
         15:0d:b7:3c:00:de:b2:bd:2b:84:6b:19:9f:7c:24:69:e2:8a:
         64:b2:04:1d:9a:d4:26:b6:46:81:25:f0:5e:55:8e:db:c2:e0:
         98:2b:d8:50:69:b3:9a:06:c5:02:96:e2:d8:73:de:d6:ea:fd:
         4e:1b:2f:d7:e3:8e:eb:a1:38:7c:b2:f2:2f:58:90:81:72:bb:
         07:53:db:b6:9b:3f:be:35:cc:32:28:e2:88:87:b2:3d:98:0e:
         aa:61:86:f1:45:71:58:1d:66:7c:b3:36:4a:e6:1f:ee:46:fd:
         67:14:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:27:14 2025 by rpki-client