This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa
File:                     3139302e35322e39362e302f32302d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          bH5DBDvivaz9BtSSgpEmS8hLjzJY6qbEXIzT76yJghs=
Subject key identifier:   48:3A:CE:34:71:82:F9:87:39:8E:8C:93:44:6A:58:C0:0E:BF:1D:48
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       5DECCFA445632C6CA7B0E539A6304394E2D11A94
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa
Signing time:             Tue 06 Jan 2026 19:32:15 +0000
ROA not before:           Tue 06 Jan 2026 19:27:15 +0000
ROA not after:            Tue 05 Jan 2027 19:32:15 +0000
asID:                     394684
IP address blocks:        190.52.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ec:cf:a4:45:63:2c:6c:a7:b0:e5:39:a6:30:43:94:e2:d1:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Jan  6 19:27:15 2026 GMT
            Not After : Jan  5 19:32:15 2027 GMT
        Subject: CN=483ACE347182F987398E8C93446A58C00EBF1D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:ed:ab:42:f8:b3:64:35:c6:e4:26:c2:09:
                    a7:69:28:c2:29:a8:a2:8b:00:fe:54:cb:18:58:b9:
                    3e:7f:1f:00:11:a3:17:04:0f:cc:7b:ae:58:af:d5:
                    57:3c:27:69:8c:40:93:84:db:78:57:f4:fd:d5:b1:
                    07:fc:52:71:5e:78:61:6d:3d:dc:d5:8b:46:7e:8b:
                    57:4d:82:96:6b:ab:c8:1c:73:84:5b:b6:fc:38:61:
                    88:ea:69:ee:e9:6d:6a:03:87:1b:c8:3c:8e:c2:94:
                    81:a5:c9:00:3e:dc:59:65:92:76:fc:fa:06:4d:a5:
                    23:be:57:e3:ea:94:af:9d:a1:b3:af:84:37:50:a4:
                    e8:e2:ee:78:a9:67:67:4f:b7:85:60:66:cc:a9:9d:
                    17:03:91:c4:aa:b9:10:ce:f2:4d:11:c2:83:9e:93:
                    43:70:b5:4d:bc:f2:82:2f:38:b1:ec:d4:5e:7f:8b:
                    a4:c9:61:b0:14:93:7c:49:03:12:42:70:19:22:03:
                    9a:48:38:30:33:7f:4d:59:a8:20:ec:1c:f5:3e:45:
                    b5:c8:db:5e:60:5b:82:09:46:dc:74:8e:90:58:62:
                    82:d5:7a:ac:c0:00:3f:97:6e:24:12:41:99:5a:e0:
                    3d:71:67:c0:34:0e:cd:bc:9d:ff:2d:a9:f6:e2:1a:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3A:CE:34:71:82:F9:87:39:8E:8C:93:44:6A:58:C0:0E:BF:1D:48
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:a8:a2:48:04:c9:40:6c:c6:36:d8:b5:7d:b0:22:de:06:
         1f:ff:38:cd:5f:b1:40:5a:0a:4a:13:21:a3:ce:2e:bf:6c:11:
         e8:b7:54:40:20:13:b2:5c:10:95:d7:c9:ee:55:78:ea:fe:82:
         fc:19:b7:44:02:90:d5:c9:f6:01:a9:ea:81:30:ca:fe:11:7f:
         9b:d8:52:bd:ea:5c:48:f5:10:f0:78:e0:9c:18:b0:6b:08:c8:
         7c:a2:45:7d:0f:bb:4b:0e:3e:71:0e:96:d6:13:23:12:91:36:
         d2:d2:5f:85:51:a2:b6:f7:1e:45:a5:95:22:89:b1:66:79:c7:
         cb:5e:bb:f2:43:48:54:45:b6:b4:75:00:63:be:34:bb:61:e8:
         0f:42:ab:fb:d8:da:76:2f:e1:66:db:0c:e0:b5:bb:ce:66:cd:
         c7:7e:19:69:72:a5:2d:3b:f6:c6:0d:97:91:c1:d3:4d:de:4c:
         28:46:14:51:a1:2a:83:87:48:60:4e:01:23:f2:39:e2:0b:5a:
         5f:25:dd:98:86:82:e5:d4:ea:93:a0:5a:b3:19:f0:d6:6e:d4:
         17:a6:77:7e:da:b5:ec:89:3b:9e:10:f4:f0:15:f9:8a:0c:37:
         ca:ae:a4:9b:af:79:5d:5b:60:7d:f6:34:ef:0e:b8:17:1b:9f:
         c4:c3:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:36 2026 by rpki-client