This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa
File:                     3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa (raw, json)
Hash identifier:          nGbhcyOAEla4UWHqomhhnJholU8xSzdeLJPYkbjRIBQ=
Subject key identifier:   6E:91:9F:CE:02:C0:94:78:93:3F:A1:95:8B:2D:54:31:C0:B1:91:8D
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       78106A75E7A71B1B3D719649D51AEA4638D0540B
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa
Signing time:             Tue 06 Jan 2026 18:57:34 +0000
ROA not before:           Tue 06 Jan 2026 18:52:34 +0000
ROA not after:            Tue 05 Jan 2027 18:57:34 +0000
asID:                     52280
IP address blocks:        190.211.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:10:6a:75:e7:a7:1b:1b:3d:71:96:49:d5:1a:ea:46:38:d0:54:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Jan  6 18:52:34 2026 GMT
            Not After : Jan  5 18:57:34 2027 GMT
        Subject: CN=6E919FCE02C09478933FA1958B2D5431C0B1918D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:5d:de:c2:7d:d3:a1:0c:af:ce:44:9d:82:
                    6a:02:4c:ba:73:7f:b7:cd:e6:37:fc:6e:c2:f5:4a:
                    ba:95:01:4f:51:6d:89:f0:5c:a7:e5:3c:e3:bd:2d:
                    3a:2a:66:4e:58:9d:19:6b:01:a4:b4:37:85:ae:d3:
                    cd:ac:f3:74:b7:f1:ff:27:72:b5:42:99:a7:f5:5d:
                    20:b0:e9:d7:3b:5b:89:99:ed:ae:c7:d1:06:9c:17:
                    54:ed:35:d3:d2:ea:40:ea:b6:2d:24:4a:51:51:aa:
                    f7:fa:f5:f8:83:5c:de:cc:1f:be:85:05:d0:3c:30:
                    13:4e:65:46:2d:0a:b0:b3:22:ce:8b:13:03:f9:ff:
                    f2:fa:51:dc:68:41:2c:a4:41:3a:2d:5f:cc:f7:e7:
                    28:4c:7a:86:5d:df:19:9b:c5:3f:bd:14:f6:64:8f:
                    2d:5a:52:27:37:c3:d4:c6:cf:c8:ba:f4:53:0d:5e:
                    84:dc:5e:a2:cf:8d:f5:52:8c:16:da:4e:6f:0e:a1:
                    55:f6:ec:5a:46:5a:09:b2:bb:2c:cb:6d:b0:ec:b5:
                    74:0f:89:b0:46:ea:4a:b1:52:2b:03:49:c5:87:7b:
                    4d:55:75:ea:03:aa:27:c5:c5:ca:79:b7:05:5d:1c:
                    02:1a:9f:ad:17:3f:d9:bc:08:b1:43:bb:6a:89:1f:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:9F:CE:02:C0:94:78:93:3F:A1:95:8B:2D:54:31:C0:B1:91:8D
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32302d3234203d3e203532323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:c7:c4:e0:c0:f8:fa:c5:ce:76:06:18:ae:4e:ed:7d:59:
         51:53:47:f1:74:47:64:3a:c4:55:89:0c:22:d7:d6:98:a6:40:
         52:06:3c:03:9b:68:30:f9:ff:59:c5:12:cd:fb:3d:6e:90:54:
         85:be:47:62:81:a3:23:8a:ca:f2:ab:7d:9b:a5:19:06:7c:9a:
         b7:c9:4f:76:5d:c2:72:a0:0d:cf:6d:fa:aa:dd:e5:7a:7c:cf:
         71:eb:1d:87:75:49:6a:55:55:b4:c6:a7:dd:86:c8:38:c1:a6:
         a5:ef:0a:e5:49:43:66:38:04:6b:c9:8e:11:51:44:96:d3:0a:
         59:d0:82:59:4d:e5:33:85:24:e2:39:3a:12:7c:72:38:59:a2:
         f8:b3:63:33:5f:3b:7f:dc:02:e6:b6:01:92:b0:e3:b0:4a:b1:
         3e:11:c3:b6:d1:22:be:99:24:f8:6f:2f:fe:50:cd:e1:4d:bc:
         15:35:45:67:73:d1:1f:76:a9:c4:9c:00:c7:36:44:4b:5f:f5:
         13:7b:21:1c:65:ef:2b:92:a2:eb:d6:59:57:98:d6:33:e7:79:
         11:b1:7e:59:c5:c2:82:0b:8b:8c:0d:57:d0:90:ad:65:df:49:
         bc:cb:74:f2:98:68:92:2f:74:35:ae:62:f2:76:e8:f4:15:c5:
         e1:61:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:30:23 2026 by rpki-client