This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa
File:                     3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          9GAKLxd8k9LBYCpqFY8ziwbEQy2hIhkl6g9BardtqIE=
Subject key identifier:   82:BC:87:B5:F3:07:5B:CA:DD:7F:29:F2:48:C6:B6:A1:5F:8E:8E:FF
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       363ED4B9322107ED83DF6DEBAE93FD7B4D718149
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:15 +0000
ROA not before:           Tue 06 Jan 2026 19:15:15 +0000
ROA not after:            Tue 05 Jan 2027 19:20:15 +0000
asID:                     11014
IP address blocks:        190.111.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3e:d4:b9:32:21:07:ed:83:df:6d:eb:ae:93:fd:7b:4d:71:81:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:15 2026 GMT
            Not After : Jan  5 19:20:15 2027 GMT
        Subject: CN=82BC87B5F3075BCADD7F29F248C6B6A15F8E8EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:e4:82:80:5b:be:67:20:d4:a5:89:c0:ce:
                    31:5f:1d:8c:8d:7b:78:50:df:a6:4c:e7:6c:59:bc:
                    ac:3e:81:32:96:1e:7b:3c:a4:9f:8f:f8:7a:8d:8f:
                    c9:da:ab:cb:a4:ab:27:71:64:1c:77:a4:80:42:26:
                    b4:a4:59:f3:9e:aa:7e:7b:8a:1c:f4:d9:11:d6:e2:
                    ee:72:fc:28:b0:fe:61:f1:19:d0:85:39:4d:ed:0f:
                    19:95:b6:6d:4a:f4:74:e0:c2:9d:54:6e:26:d6:23:
                    84:3e:fc:f3:39:38:f0:50:50:c9:35:26:b2:94:e5:
                    a1:df:63:ce:d7:0c:f6:14:d4:31:74:fd:d3:14:ca:
                    08:ac:1a:0e:18:c9:f1:27:3f:1c:d3:1c:0f:a4:83:
                    1d:5f:23:e8:ca:ee:fe:af:53:4d:68:58:b5:51:ba:
                    59:e7:68:93:f0:ec:b2:f8:5e:1c:29:69:b4:62:bd:
                    2e:d3:a7:5b:6b:08:ba:10:eb:16:10:0e:5c:ad:02:
                    a7:12:69:e3:f7:5c:81:aa:99:e2:d4:36:e9:5e:15:
                    83:6e:73:39:65:96:df:04:2a:52:0d:e5:04:34:87:
                    cf:1a:45:7e:07:bc:73:6b:d6:13:6c:00:c0:ea:70:
                    53:7c:ce:62:88:c6:0e:04:27:dd:64:92:04:f9:68:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BC:87:B5:F3:07:5B:CA:DD:7F:29:F2:48:C6:B6:A1:5F:8E:8E:FF
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233372e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:d8:62:42:f8:07:09:83:d8:43:a7:7a:02:85:5f:66:75:
         b5:3d:08:f9:ed:e5:cd:ac:75:75:9d:9d:54:56:f0:42:d2:41:
         47:a9:d1:b0:1a:24:3e:77:c5:68:ea:a8:0c:3d:76:98:19:26:
         b1:4d:e8:97:23:34:d7:bc:56:0e:f0:39:19:05:28:a4:82:da:
         53:37:f3:09:9d:79:dd:cd:7c:04:f7:50:fe:f4:29:fd:d2:d1:
         a3:d7:36:10:c0:58:cc:7f:15:9a:b1:ae:04:99:fe:66:7e:d1:
         c1:75:04:01:1f:71:b2:9a:03:0c:ad:ab:68:29:31:7a:f4:9a:
         23:0b:46:45:53:05:c7:f7:3a:0e:fb:f7:bf:be:17:9c:e6:a5:
         ab:ed:f6:18:b2:5d:11:43:e5:d4:44:a4:8b:22:e9:de:d9:95:
         0d:27:33:b7:64:51:be:a2:60:3f:3b:05:1c:c0:31:eb:be:d9:
         04:06:52:7c:9a:6e:b3:4e:1b:8e:1e:e2:7e:c2:e7:be:96:88:
         5c:70:09:9a:af:55:5f:d7:7e:d1:69:74:1b:00:2b:fa:f9:17:
         54:71:ef:55:ff:22:4e:5c:ed:1c:84:a0:bc:ad:5e:06:64:fa:
         47:74:78:5d:19:04:06:41:6f:1a:4a:c0:fc:41:7a:1e:8a:2a:
         a7:4d:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:51 2026 by rpki-client