This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa
File:                     3139302e3133312e302e302f31372d3234203d3e203237373338.roa (raw, json)
Hash identifier:          r5M2YsDN+qP0B75ruP7ultSIxHClo5EJj0n0RUkk8ik=
Subject key identifier:   C6:F7:EE:6A:A5:1D:0D:79:C3:9E:BB:5D:22:B5:A5:5D:1C:E5:AB:58
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       72D714656AA34018072748ECCA6AE93EC51FB1A5
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa
Signing time:             Tue 06 Jan 2026 19:25:53 +0000
ROA not before:           Tue 06 Jan 2026 19:20:53 +0000
ROA not after:            Tue 05 Jan 2027 19:25:53 +0000
asID:                     27738
IP address blocks:        190.131.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d7:14:65:6a:a3:40:18:07:27:48:ec:ca:6a:e9:3e:c5:1f:b1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Jan  6 19:20:53 2026 GMT
            Not After : Jan  5 19:25:53 2027 GMT
        Subject: CN=C6F7EE6AA51D0D79C39EBB5D22B5A55D1CE5AB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:f5:72:d5:7c:3f:81:fd:d4:0c:81:fc:52:
                    ba:a0:17:bb:5e:fc:9d:00:45:cf:c7:40:47:d1:c9:
                    7a:9f:2f:42:f2:fc:53:50:27:b8:9d:41:d3:fd:8c:
                    fa:10:c9:39:c9:56:c2:96:f2:8d:57:2e:28:5e:2c:
                    37:ef:c6:3d:65:91:b9:dc:89:ef:cc:39:b5:30:ab:
                    dd:71:f2:bc:61:ff:63:71:53:d3:4a:a9:1f:db:ae:
                    77:30:d6:e5:56:b2:57:93:f9:ed:ed:6f:39:aa:30:
                    05:d1:8d:af:8a:67:8f:50:c2:62:09:09:71:56:9a:
                    5e:1f:db:dc:af:b7:41:24:a3:c1:48:da:4b:48:5b:
                    a8:d1:aa:3f:72:0a:81:74:d0:96:6c:12:43:86:2f:
                    8b:64:59:ea:f2:6c:08:bc:2f:d2:43:40:45:e1:ad:
                    de:99:dc:c0:7e:0c:2f:13:4d:33:c5:32:3d:75:3d:
                    b8:f6:b5:00:62:d9:74:3c:0c:65:23:d4:1e:6b:fb:
                    47:59:20:fd:ad:4f:c8:76:c6:36:a1:7e:e2:77:cd:
                    57:fb:c1:7a:2d:15:20:98:42:b7:58:ca:8d:ad:aa:
                    77:19:66:a9:03:36:b3:cc:0d:ca:ab:c5:bf:c7:5c:
                    22:17:ea:31:1c:9e:4b:b2:83:92:90:77:b8:89:5b:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:EE:6A:A5:1D:0D:79:C3:9E:BB:5D:22:B5:A5:5D:1C:E5:AB:58
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139302e3133312e302e302f31372d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:da:c5:8f:1c:ac:2e:65:5c:c8:e3:7b:e7:87:f6:6a:ca:
         59:08:a5:8b:43:a1:86:25:66:f2:70:f3:55:e2:de:57:fe:2f:
         ca:5e:4c:7b:17:83:15:eb:ee:3e:1e:8f:cf:01:68:97:19:c5:
         6b:31:00:43:6f:a3:41:b2:a9:0e:f8:51:35:e6:ba:23:a3:a8:
         f0:4a:da:8b:e6:00:44:05:54:0b:ad:2a:e9:83:79:7e:f1:d1:
         2b:a4:eb:c6:69:82:97:f8:c0:b6:be:cd:6b:c0:90:85:1a:5a:
         b1:b3:ea:e1:27:a2:cb:0d:bf:c4:8b:cb:e5:3b:31:6a:d7:e0:
         37:a4:f8:9e:ef:69:82:8f:13:21:a0:ed:15:95:92:95:10:17:
         0f:8d:1d:13:40:95:00:bc:25:5c:8c:00:b9:6a:44:6f:a7:94:
         a9:d3:4d:85:cd:fb:ae:3f:87:13:38:f9:73:c1:a5:0c:de:7c:
         04:0f:00:34:1c:93:1a:0e:4f:fa:f9:f2:a8:2b:ae:79:c0:cb:
         bc:5a:e3:7b:76:30:53:ef:77:1e:0b:19:c7:1b:59:d6:ff:f9:
         fe:07:0f:6f:79:52:b1:63:c6:3b:32:20:b6:f0:96:ed:ea:eb:
         fa:bc:20:23:02:3b:e1:14:c1:f5:dc:e3:07:a4:b1:f4:4c:74:
         41:e9:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:24 2026 by rpki-client