This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139362e302f32322d3234203d3e203131303134.roa
File:                     3139302e3130342e3139362e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          Elr6Aaig+R/ufHoYoe1XtAMO/zBwl41ha2R1HC8xT9U=
Subject key identifier:   75:41:75:B5:00:20:4E:8A:00:A7:BB:DE:65:F5:20:6D:6B:F4:0D:B0
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       71DC0241D541DF19E0D550D274485DF37FDB6163
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139362e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:15 +0000
ROA not before:           Tue 06 Jan 2026 19:15:15 +0000
ROA not after:            Tue 05 Jan 2027 19:20:15 +0000
asID:                     11014
IP address blocks:        190.104.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dc:02:41:d5:41:df:19:e0:d5:50:d2:74:48:5d:f3:7f:db:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:15 2026 GMT
            Not After : Jan  5 19:20:15 2027 GMT
        Subject: CN=754175B500204E8A00A7BBDE65F5206D6BF40DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:da:04:78:bc:d3:a7:e9:a6:d8:8a:34:a8:
                    08:35:4d:fd:aa:2b:a4:14:18:00:3c:a6:25:e4:83:
                    43:40:70:75:5e:7c:38:36:dc:85:25:23:94:79:8c:
                    ef:76:81:f5:05:74:ed:35:f1:59:0b:1b:aa:cf:5f:
                    2d:b3:df:b0:15:d7:e5:0f:b9:37:f7:2f:c0:50:b3:
                    ae:62:fb:35:28:91:ec:bf:b0:f5:a6:c6:30:3a:7c:
                    a3:58:7f:0e:22:c6:e8:5c:d2:97:0b:71:91:6f:70:
                    7e:e7:7d:aa:16:40:33:42:c0:5b:31:53:6a:9e:9e:
                    6e:77:0d:40:81:a6:47:3c:8e:07:ab:9e:24:25:c1:
                    f8:a0:21:d9:3e:b4:5e:89:b4:57:e7:85:33:ca:bf:
                    64:53:41:09:aa:45:21:a7:42:26:76:00:0f:7e:8b:
                    91:cf:82:78:1e:7a:a1:fe:7c:77:12:b6:e4:74:b4:
                    cc:76:41:f9:88:5a:83:3b:3a:2f:8a:34:6e:a6:a9:
                    f8:d5:32:33:ce:5d:bd:29:4a:6c:35:56:a3:bd:4c:
                    80:fe:f5:ac:3b:66:62:26:45:39:6e:8e:4b:67:f8:
                    2b:b9:20:2b:09:a2:c1:ed:4d:6b:43:ae:95:8e:e4:
                    d2:e3:02:48:d6:3f:cf:8a:ed:6f:63:21:a0:ae:4b:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:75:B5:00:20:4E:8A:00:A7:BB:DE:65:F5:20:6D:6B:F4:0D:B0
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139362e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:37:f1:c5:18:fe:e2:92:2c:31:b6:5f:8c:a8:56:69:a4:
         1b:cd:73:24:de:8d:41:a6:da:89:81:82:e4:46:0c:d0:e2:29:
         2c:e2:42:5a:fa:c6:9d:d7:33:70:a0:e9:85:3c:e8:1a:b1:37:
         7a:80:f3:92:5e:82:8e:54:24:03:9e:78:86:d7:72:88:33:1d:
         f0:0e:61:53:14:92:e7:bf:6e:15:b1:36:fa:7a:63:ab:ec:cf:
         ff:79:73:92:09:82:10:e5:f5:83:c2:9a:9f:48:42:69:7c:2c:
         00:8a:23:f4:8a:72:56:e9:97:e5:5c:84:69:b7:3d:67:25:4f:
         87:f4:3c:38:9c:a6:3d:8b:92:71:d6:5d:ca:5e:9d:b1:4d:ac:
         02:06:87:ca:d2:d5:f5:ef:25:e2:43:04:de:a5:3f:b9:7e:e1:
         3a:19:dd:22:32:fa:7f:d2:ac:41:60:7f:19:4d:28:f9:1b:66:
         22:cf:08:c2:f0:a3:89:db:19:dc:b7:0c:1e:ff:d5:fe:43:ea:
         b9:74:d8:bc:2f:c9:43:1e:f2:d3:a6:aa:bf:4d:53:24:5c:f3:
         d6:f2:38:0f:28:17:02:6c:f4:c9:44:00:d5:f4:97:b2:de:a6:
         a7:24:a5:25:e4:13:7b:7e:bc:82:a8:ef:e4:40:7f:5a:09:69:
         e5:05:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:19 2026 by rpki-client