This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
File:                     3139302e39372e37322e302f32312d3231203d3e203237383435.roa (raw, json)
Hash identifier:          6UquvPo5f7BoQNa7lexJH9bK0jA+ukN94EOdZabZ3yY=
Subject key identifier:   AA:AC:06:47:B1:60:15:42:7F:3F:51:7A:F2:97:60:E4:90:31:6E:AC
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       7EA1C173444BD5ED6AFE0452235DAF90188BB2AB
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:05 +0000
ROA not before:           Tue 06 Jan 2026 19:39:05 +0000
ROA not after:            Tue 05 Jan 2027 19:44:05 +0000
asID:                     27845
IP address blocks:        190.97.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a1:c1:73:44:4b:d5:ed:6a:fe:04:52:23:5d:af:90:18:8b:b2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:05 2026 GMT
            Not After : Jan  5 19:44:05 2027 GMT
        Subject: CN=AAAC0647B16015427F3F517AF29760E490316EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:e0:87:39:85:b1:fd:71:78:e4:25:0f:c4:
                    4e:ab:78:3c:78:b7:3c:ba:66:da:01:e7:fa:42:a8:
                    1c:34:4c:3f:16:56:ef:27:e5:25:96:4a:2b:a7:59:
                    d6:6e:d0:74:85:e7:6f:27:27:e0:61:1d:1f:fe:0e:
                    99:b0:47:ed:03:2a:87:b8:11:c5:ed:35:73:77:90:
                    6d:3f:cf:16:d3:77:5a:e3:1a:d2:cd:81:ab:d7:a0:
                    3f:42:3f:57:b9:d2:88:d2:88:30:84:2f:c7:7f:f1:
                    8b:3c:1f:b1:30:24:bf:8e:e9:6d:b2:58:91:b1:f0:
                    da:c3:aa:17:62:ae:2e:e0:eb:0c:f4:e2:90:be:84:
                    22:93:3e:a5:42:07:fb:f7:ee:13:b1:0e:9a:da:9f:
                    c1:45:a3:df:95:f9:89:78:04:5f:f6:e6:62:91:5b:
                    20:5e:76:df:51:dc:19:71:fb:50:b4:57:99:be:84:
                    fc:46:7f:34:fb:5e:70:70:e0:84:6b:0f:5b:17:7c:
                    82:b9:cb:7d:91:bc:1a:ed:6c:86:83:30:16:4b:e2:
                    84:1c:4f:2e:6c:c2:00:22:da:3e:df:43:79:be:54:
                    fe:e0:39:30:e4:0b:14:0f:b7:d7:f6:9c:6d:4d:0f:
                    e7:0a:86:1b:3b:3c:e3:0c:e1:2f:40:91:e8:53:dd:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AC:06:47:B1:60:15:42:7F:3F:51:7A:F2:97:60:E4:90:31:6E:AC
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e37322e302f32312d3231203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:1c:ef:f1:3d:f0:aa:53:00:01:d2:42:1d:48:eb:c4:dc:fa:
         be:55:93:a1:49:ac:72:79:e5:d5:09:25:83:46:c9:7c:ea:b6:
         f3:2d:ae:ec:2a:8d:7e:77:1d:a8:b1:11:fb:6a:e3:c5:35:76:
         09:28:9b:de:73:e7:e7:47:01:61:fd:a2:6b:b6:e2:bc:24:d2:
         ee:bc:9e:ab:8f:87:e6:8f:c0:aa:77:74:c7:33:56:4f:53:bb:
         fb:40:71:f2:96:8e:bb:c1:f1:1b:ff:27:5d:65:5b:0a:ce:92:
         03:00:4f:2e:35:98:f7:20:06:b1:e1:be:60:98:90:fc:86:f4:
         6d:cb:3b:cc:71:e6:e8:26:cb:3a:25:7a:8d:2e:94:4c:f4:5f:
         dd:7f:6c:2a:54:9c:21:2d:1c:d1:a7:ca:e2:64:56:a2:c0:03:
         7d:2b:03:4d:ec:4d:69:cb:31:2b:af:83:05:42:a1:59:a4:82:
         a6:1c:bf:fd:bc:f1:c7:a5:37:e2:b2:db:97:8b:a4:d5:4c:b1:
         0c:40:75:d0:e3:9d:06:c5:bd:0c:92:73:37:d2:16:4b:a2:7a:
         48:ea:c8:96:83:e8:68:33:8b:f7:68:39:06:73:eb:87:7d:12:
         be:a8:09:98:1b:6c:ee:47:8c:53:c1:88:f8:e3:52:e1:06:32:
         17:15:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:35 2026 by rpki-client