This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa
File:                     3139302e39342e3136302e302f32302d3234203d3e203532333634.roa (raw, json)
Hash identifier:          tJp1n4cfdxOw1socg6w+6RNKQgiQr3SepZm2L0zBmAQ=
Subject key identifier:   D1:66:EA:12:71:70:F5:D9:6D:0B:0F:39:7D:4C:69:23:8D:88:77:41
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       4EBDAF7F01700AF82AA6DE599A23DD17D06A22BD
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa
Signing time:             Tue 06 Jan 2026 19:46:53 +0000
ROA not before:           Tue 06 Jan 2026 19:41:53 +0000
ROA not after:            Tue 05 Jan 2027 19:46:53 +0000
asID:                     52364
IP address blocks:        190.94.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bd:af:7f:01:70:0a:f8:2a:a6:de:59:9a:23:dd:17:d0:6a:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Jan  6 19:41:53 2026 GMT
            Not After : Jan  5 19:46:53 2027 GMT
        Subject: CN=D166EA127170F5D96D0B0F397D4C69238D887741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c7:40:28:e9:f3:0f:82:bf:4b:3a:68:7b:e0:
                    d8:6c:9f:05:29:11:d0:09:86:43:e7:33:7d:c9:66:
                    f6:ed:a2:6e:db:89:2f:12:82:2a:02:87:07:7d:35:
                    38:8c:a4:ff:c3:66:67:f1:ce:ae:50:5a:87:12:2a:
                    a8:a2:08:05:f3:28:80:59:3b:33:e8:7c:d3:e4:0e:
                    f5:d8:ad:00:b0:1d:02:92:ea:61:45:eb:75:64:f0:
                    38:d1:cc:d6:9b:47:99:ae:d7:fd:0c:10:90:ec:a8:
                    25:0d:b5:02:e0:93:84:1d:28:10:34:08:20:c0:3e:
                    1f:10:4e:32:c2:34:59:2b:ef:6e:3f:49:da:c2:8c:
                    e8:0b:24:70:09:7c:c5:db:72:d0:71:d7:c6:84:8b:
                    63:1e:bc:27:c7:b4:0f:db:b5:17:72:07:ee:c2:a8:
                    05:c0:cf:c3:56:e6:86:ba:9b:0f:43:34:da:44:19:
                    83:47:15:5a:41:0e:0b:76:d0:54:43:38:9e:2a:f4:
                    10:e8:96:0a:13:1c:4f:51:b8:32:38:66:14:d0:07:
                    73:13:23:90:d5:43:7b:08:56:4c:a6:18:e1:ee:18:
                    db:42:df:cb:68:e7:ef:c1:0a:76:4a:13:6b:85:81:
                    85:47:b7:56:d4:de:55:e9:1e:21:a4:12:0b:e5:02:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:66:EA:12:71:70:F5:D9:6D:0B:0F:39:7D:4C:69:23:8D:88:77:41
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3139302e39342e3136302e302f32302d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:58:dd:44:a3:26:4f:51:fc:8a:03:99:bf:68:3b:81:42:51:
         f2:ef:20:92:f4:56:bc:45:59:b3:e4:61:90:90:20:de:c8:5a:
         a5:eb:2d:29:55:58:e3:2d:24:18:13:62:2c:b9:35:3e:59:30:
         f4:86:95:63:61:28:e9:b9:c4:67:1d:43:f9:0c:34:0b:8f:bc:
         fe:33:8a:31:5c:7a:58:99:c7:93:78:bd:aa:d9:73:d4:9d:87:
         9e:9a:56:3d:f2:9d:a7:7d:cf:54:b4:2c:c2:00:d5:81:9d:40:
         80:e0:cd:98:28:e1:df:a1:2a:69:aa:29:f0:8e:c5:fd:82:66:
         2d:91:a2:ac:d7:68:b2:96:77:88:be:fa:bc:a4:f1:11:9f:b3:
         3a:00:28:2b:b4:8a:e2:be:dd:2f:0e:d6:68:29:88:bb:00:8e:
         2f:f5:86:c3:1b:86:87:34:e2:ad:a7:9f:83:d1:bb:9e:68:36:
         df:a8:9a:ff:c1:4e:70:2b:6c:5a:3a:fc:d2:9d:16:78:28:de:
         6a:e7:5d:d3:2c:21:1f:17:1b:b1:7b:7d:b2:82:38:be:44:59:
         f9:eb:5d:bb:3d:df:ef:db:49:7e:22:7a:62:0d:d3:8f:34:73:
         21:49:d5:c5:7e:05:14:30:50:1c:10:72:e2:79:8e:9f:3f:52:
         43:a2:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:18 2026 by rpki-client