This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa
File:                     3139302e3132332e34382e302f32302d3234203d3e203238303235.roa (raw, json)
Hash identifier:          IUU1HJLiT0Zb0JqVoohxeX1qEKbtCw7F8yIi1pQyH74=
Subject key identifier:   70:BF:18:43:AE:4E:83:AA:6D:4F:67:29:4F:26:19:43:8F:46:79:3E
Certificate issuer:       /CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
Certificate serial:       0589D1F8A4479CD4C73A564DDBB1332F27FF600F
Authority key identifier: F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa
Signing time:             Tue 06 Jan 2026 19:14:34 +0000
ROA not before:           Tue 06 Jan 2026 19:09:34 +0000
ROA not after:            Tue 05 Jan 2027 19:14:34 +0000
asID:                     28025
IP address blocks:        190.123.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:89:d1:f8:a4:47:9c:d4:c7:3a:56:4d:db:b1:33:2f:27:ff:60:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA
        Validity
            Not Before: Jan  6 19:09:34 2026 GMT
            Not After : Jan  5 19:14:34 2027 GMT
        Subject: CN=70BF1843AE4E83AA6D4F67294F2619438F46793E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:08:de:f6:f2:f7:52:2c:ec:1d:a8:9e:49:
                    f3:d5:6f:f7:bf:e1:84:3b:91:4e:f6:c0:cd:06:25:
                    e3:e3:95:c1:2f:de:2c:7b:12:07:58:8b:30:c8:c6:
                    a8:44:52:85:c4:1e:69:20:4d:fa:3a:fb:e2:c3:3d:
                    1f:54:c5:bf:3d:f9:5e:bf:df:14:b2:f9:06:a8:04:
                    c0:c9:ea:bb:b8:82:98:cd:7f:5c:98:72:22:9d:63:
                    38:d9:3e:58:ce:12:42:18:69:1d:0a:78:81:6a:c5:
                    39:09:c9:9c:25:35:36:57:b1:af:f9:92:3d:c5:5d:
                    9d:d4:66:e2:f2:3a:82:5e:f9:60:f0:5b:4e:9e:35:
                    e6:97:07:b3:0b:db:99:3b:75:75:b8:31:5f:46:35:
                    e1:55:0e:16:e3:df:70:4b:4f:41:58:bc:b7:f1:ba:
                    e1:1c:90:c8:d6:42:9b:ee:16:ff:d7:d4:83:fd:8f:
                    a1:99:34:2c:c6:e7:a6:98:d5:4c:1d:4c:09:d0:62:
                    21:1b:25:a9:fa:e7:1d:53:8c:72:6a:0d:ed:a4:e5:
                    ca:25:98:86:f1:5f:ff:c7:ee:51:39:87:b9:b5:bc:
                    6f:b2:19:1a:62:66:b6:6d:df:d0:43:a4:34:d2:60:
                    53:21:84:35:03:08:ee:57:75:17:9e:24:df:d8:bf:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:18:43:AE:4E:83:AA:6D:4F:67:29:4F:26:19:43:8F:46:79:3E
            X509v3 Authority Key Identifier:
                keyid:F6:4B:9C:43:EE:EB:19:A0:ED:10:58:03:DC:8E:99:43:CE:DA:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F64B9C43EEEB19A0ED105803DC8E9943CEDA35AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7396851D73BEBD3C87F555E2FAFF7A5E77DA470E2C21127CFFA5B4A2D9E636A8/0/3139302e3132332e34382e302f32302d3234203d3e203238303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:7a:4a:f0:72:4b:2e:89:5e:6f:d0:89:3c:3e:91:5a:a5:
         cd:5a:b9:b4:51:fb:87:d1:a4:45:c9:f5:26:8e:6a:24:cc:97:
         4a:fe:38:3b:d2:b8:b4:4c:6c:15:48:e5:4c:be:5e:6a:1f:6c:
         ec:df:5c:a3:25:4f:c4:00:b8:31:ea:77:13:2d:0a:ce:44:51:
         c1:3c:9b:41:35:70:41:bb:2a:63:e7:83:8b:69:59:3c:d1:b4:
         9f:59:43:11:ea:f4:9d:82:59:92:e1:5e:44:2f:c8:ec:ba:c9:
         1e:68:90:38:d9:7a:7f:5f:b4:79:a4:2d:44:b4:61:73:1e:eb:
         2e:b8:5e:12:62:c3:6a:77:f2:e3:49:13:c5:1f:c1:5c:6b:6d:
         d8:21:ca:9a:7b:05:05:a1:93:90:de:ac:80:1e:65:0e:71:78:
         2e:95:39:f8:57:5c:2f:81:18:2d:27:ce:04:a8:d8:e4:58:1a:
         1e:a2:03:35:35:f6:46:49:45:94:ad:12:44:7a:b6:b4:29:09:
         42:79:87:6b:4b:a3:3f:bf:c4:17:5e:db:a6:dc:0d:08:74:b3:
         44:5c:1a:4d:df:60:79:dc:08:07:5b:3c:8a:c4:6d:ab:fa:c4:
         20:81:3a:ac:72:c1:26:e4:b1:16:fa:cc:f6:25:90:c4:62:ad:
         22:e7:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:32 2026 by rpki-client