This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa
File:                     3139302e352e36382e302f32342d3234203d3e20323633323339.roa (raw, json)
Hash identifier:          h3IhtvOMCvkBYX5oqkDae8pZA6OBfzHiQO5OnU/6thE=
Subject key identifier:   21:59:5D:F2:BE:1F:24:04:58:09:62:75:A4:EE:C2:D4:BB:1F:CA:CF
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       79593EA8ACDFB115BC4DE041145B094BA2434A82
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa
Signing time:             Tue 06 Jan 2026 19:24:12 +0000
ROA not before:           Tue 06 Jan 2026 19:19:12 +0000
ROA not after:            Tue 05 Jan 2027 19:24:12 +0000
asID:                     263239
IP address blocks:        190.5.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:59:3e:a8:ac:df:b1:15:bc:4d:e0:41:14:5b:09:4b:a2:43:4a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Jan  6 19:19:12 2026 GMT
            Not After : Jan  5 19:24:12 2027 GMT
        Subject: CN=21595DF2BE1F240458096275A4EEC2D4BB1FCACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:c6:f6:94:0e:04:81:11:62:97:73:cc:a9:
                    c9:52:cd:6b:b5:73:80:a9:56:71:51:18:fb:e1:af:
                    6c:83:8a:fd:3e:54:0b:2a:82:a1:50:d8:84:43:12:
                    95:d5:3d:99:ff:12:a8:30:65:d4:7d:9a:e3:92:a0:
                    a3:2e:da:e1:67:0f:a1:1d:d4:7b:42:12:38:b2:7c:
                    1e:c9:1c:d6:3d:e2:ee:17:58:66:f9:57:f7:99:e0:
                    bb:d0:da:89:89:ee:d2:00:9d:cd:3b:cc:33:db:16:
                    4e:f7:27:79:69:a4:e2:2c:e5:12:c1:4d:7e:17:0d:
                    59:a8:b4:37:3f:e6:ad:fc:de:01:c6:f0:fd:38:f2:
                    f0:85:d7:67:7d:5d:8c:ba:bf:c5:fd:c9:27:f3:f4:
                    ba:15:1c:3c:d7:10:2e:9e:93:f0:ef:1c:ac:6f:a9:
                    60:8e:98:14:ae:cb:ce:92:e3:a5:46:f3:32:1e:ae:
                    6b:38:18:d7:8b:a8:a9:d6:2f:be:fa:db:83:f7:ad:
                    d0:8d:c0:da:9d:90:5e:37:81:27:e3:07:64:b5:71:
                    e3:48:39:a0:c8:31:06:91:d0:4b:91:15:89:fd:30:
                    c5:94:84:30:3c:2a:90:7e:93:30:d0:42:1e:20:46:
                    f2:5d:dd:8b:20:b2:c5:de:fc:3c:84:97:10:a9:34:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:5D:F2:BE:1F:24:04:58:09:62:75:A4:EE:C2:D4:BB:1F:CA:CF
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36382e302f32342d3234203d3e20323633323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:8b:f9:9f:01:f0:a6:d3:c4:67:5b:aa:6b:c2:1a:95:d7:
         85:bf:ba:51:42:c6:9f:27:d1:92:16:be:75:13:20:e5:17:c0:
         7a:f5:f5:27:92:df:19:f4:9c:ac:f9:bc:80:72:e5:b1:7d:af:
         12:60:60:6c:6e:b4:04:31:d2:1f:fa:97:c9:c6:73:86:81:e0:
         70:22:7a:20:4b:11:8a:73:a7:80:29:65:f1:7d:9e:13:04:7f:
         08:e7:68:95:0a:b1:e1:a9:d3:70:ef:ba:53:39:66:3f:cd:29:
         92:b8:7c:f0:6f:ba:df:48:89:f3:6c:30:7c:71:d9:43:28:b2:
         12:c4:9a:5f:d9:f5:63:69:9b:15:eb:c3:db:00:8f:ef:58:69:
         37:46:f9:20:ad:02:7f:bf:df:87:42:f9:8a:00:4f:a4:b8:97:
         73:7d:94:42:41:9e:c0:e8:c3:b6:f1:32:07:2c:1b:ba:d1:73:
         7b:e2:83:4a:af:3a:58:de:69:3b:61:cc:35:43:cb:54:f0:e6:
         9c:7c:5a:ff:38:25:c7:95:c2:d0:44:1c:10:19:ed:49:89:7e:
         97:c9:ac:51:2b:ff:0b:c8:39:86:1c:0a:be:48:9a:21:68:e0:
         64:71:f1:56:2b:fc:27:89:1d:54:86:e1:4f:c7:e5:0c:99:5e:
         96:6d:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:38:30 2026 by rpki-client