This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
File:                     3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          Ccjqds7wghsomwL+PgHXKBHHuFoV8qKyVIOfjKaiTho=
Subject key identifier:   CD:9F:17:8C:95:25:61:DB:9C:82:03:34:CE:68:AB:84:E1:ED:39:A9
Certificate issuer:       /CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
Certificate serial:       235930CD2FBE87A96E1A006F3B53283662B654CF
Authority key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 06 Jan 2026 19:39:24 +0000
ROA not before:           Tue 06 Jan 2026 19:34:24 +0000
ROA not after:            Tue 05 Jan 2027 19:39:24 +0000
asID:                     264750
IP address blocks:        192.141.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:59:30:cd:2f:be:87:a9:6e:1a:00:6f:3b:53:28:36:62:b6:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
        Validity
            Not Before: Jan  6 19:34:24 2026 GMT
            Not After : Jan  5 19:39:24 2027 GMT
        Subject: CN=CD9F178C952561DB9C820334CE68AB84E1ED39A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:2b:12:01:02:9a:25:e9:eb:9d:ff:a6:d5:
                    f6:c6:f9:9b:65:b6:4e:09:e3:e5:50:17:db:de:09:
                    1f:f2:17:41:f7:ef:0e:9b:2d:2a:11:bc:7f:ad:69:
                    36:2a:53:03:56:ef:5b:93:9d:d3:da:62:63:8f:5f:
                    15:1d:6a:3a:43:9e:75:27:3f:25:90:d4:67:87:94:
                    78:c5:76:f0:6d:07:79:1f:b1:4f:db:fa:1d:17:38:
                    d1:6c:77:7e:0e:1d:28:6f:ad:de:ec:8e:75:4f:3d:
                    f1:72:95:be:28:33:11:32:60:6f:ff:04:1b:76:fd:
                    38:c9:19:2a:2e:dc:96:c3:07:1c:54:e4:7a:88:cb:
                    68:ed:78:cc:38:70:c5:0b:05:bb:a5:99:d5:6b:47:
                    2d:70:fc:15:f9:53:92:8d:fa:5b:ad:76:0c:bf:60:
                    d4:a4:9d:57:f5:f9:8c:c8:2f:9a:70:6a:2a:67:e7:
                    bb:c2:22:7f:f0:87:ae:27:a2:da:6b:37:4b:8a:cd:
                    39:e1:62:24:fa:db:64:1c:c1:87:56:e7:83:dd:d0:
                    d7:60:3f:00:bc:da:a6:f9:68:f2:98:1f:06:40:1c:
                    c8:e0:20:d3:8c:1c:13:9f:ff:ba:7f:fb:ab:cc:fa:
                    e0:dc:72:f1:2d:cf:35:12:19:1a:d9:8c:16:be:19:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:17:8C:95:25:61:DB:9C:82:03:34:CE:68:AB:84:E1:ED:39:A9
            X509v3 Authority Key Identifier:
                keyid:37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:55:43:12:7e:8d:57:32:d0:3b:3f:71:84:ca:98:ef:01:4f:
         1a:ad:5d:73:e6:4c:b0:57:ae:b2:87:f6:52:01:a4:76:af:4b:
         f8:81:3a:e0:5a:70:24:5b:89:b8:b2:fd:af:90:e1:33:6d:84:
         cf:22:55:ea:00:eb:3c:36:96:a5:85:2e:94:68:50:44:39:23:
         d3:6b:84:b3:62:7a:fe:02:26:55:5b:e0:b9:0c:af:9d:08:3a:
         c9:f0:27:ca:f1:e8:74:7d:62:02:6b:b6:70:8f:29:e9:bf:cd:
         48:36:f2:69:3b:57:7b:b1:c3:95:9c:7a:4d:db:e8:c9:48:a0:
         3d:1d:a4:cd:f0:e0:64:00:44:33:72:8f:d7:91:eb:2f:82:99:
         2e:b6:b4:73:04:98:db:b2:57:e3:2a:f2:6c:f1:6a:c7:30:84:
         21:2a:39:02:51:f3:32:1d:e7:2b:cd:e2:f1:cd:5c:d5:09:dd:
         9d:f9:7e:7a:83:05:db:67:bd:77:b5:74:0f:b1:11:08:41:2b:
         29:62:75:40:8e:5e:48:ba:a1:a1:78:15:ae:eb:7c:74:2f:08:
         94:5a:41:e0:b0:bb:66:29:76:f4:93:f5:20:e5:5f:10:b3:1d:
         b2:3e:6d:f9:78:f2:1b:ac:1f:2c:d1:74:c7:93:17:29:c3:ae:
         20:20:64:3b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUI1kwzS++h6luGgBvO1MoNmK2VM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc0MTkzQ0JBOUYyNzg5RUVBRDhGNDMzMkQ4QzYxQjlF
Mjc0REIxQzAeFw0yNjAxMDYxOTM0MjRaFw0yNzAxMDUxOTM5MjRaMDMxMTAvBgNV
BAMTKENEOUYxNzhDOTUyNTYxREI5QzgyMDMzNENFNjhBQjg0RTFFRDM5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulysSAQKaJenrnf+m1fbG+Ztl
tk4J4+VQF9veCR/yF0H37w6bLSoRvH+taTYqUwNW71uTndPaYmOPXxUdajpDnnUn
PyWQ1GeHlHjFdvBtB3kfsU/b+h0XONFsd34OHShvrd7sjnVPPfFylb4oMxEyYG//
BBt2/TjJGSou3JbDBxxU5HqIy2jteMw4cMULBbulmdVrRy1w/BX5U5KN+lutdgy/
YNSknVf1+YzIL5pwaipn57vCIn/wh64notprN0uKzTnhYiT622QcwYdW54Pd0Ndg
PwC82qb5aPKYHwZAHMjgINOMHBOf/7p/+6vM+uDccvEtzzUSGRrZjBa+GfQ7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUzZ8XjJUlYducggM0zmirhOHtOakwHwYDVR0j
BBgwFoAUN0GTy6nyeJ7q2PQzLYxhueJ02xwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MjRBOEI5QkZFNjYzQzQ1MkI3NERCMTgyNjVCQjI2OEFC
NDgyRjFFQUQ5RTAyODM0OTZBMDA5MjVGNTk1ODNFLzAvMzc0MTkzQ0JBOUYyNzg5
RUVBRDhGNDMzMkQ4QzYxQjlFMjc0REIxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzQxOTNDQkE5RjI3ODlFRUFE
OEY0MzMyRDhDNjFCOUUyNzREQjFDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjI0QThCOUJGRTY2M0M0NTJCNzREQjE4MjY1QkIyNjhBQjQ4MkYxRUFE
OUUwMjgzNDk2QTAwOTI1RjU5NTgzRS8wLzMxMzkzMjJlMzEzNDMxMmUzMTMyMzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQzNzM1MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALA
jYAwDQYJKoZIhvcNAQELBQADggEBAHNVQxJ+jVcy0Ds/cYTKmO8BTxqtXXPmTLBX
rrKH9lIBpHavS/iBOuBacCRbibiy/a+Q4TNthM8iVeoA6zw2lqWFLpRoUEQ5I9Nr
hLNiev4CJlVb4LkMr50IOsnwJ8rx6HR9YgJrtnCPKem/zUg28mk7V3uxw5Wcek3b
6MlIoD0dpM3w4GQARDNyj9eR6y+CmS62tHMEmNuyV+Mq8mzxascwhCEqOQJR8zId
5yvN4vHNXNUJ3Z35fnqDBdtnvXe1dA+xEQhBKylidUCOXki6oaF4Fa7rfHQvCJRa
QeCwu2YpdvST9SDlXxCzHbI+bfl48husHyzRdMeTFynDriAgZDs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:44 2026 by rpki-client