This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa
File:                     3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          Od7OnDeChlAsrZUUhX+wbjd7DkPCPoOza35QdwqHIDA=
Subject key identifier:   E3:84:AC:D9:34:96:2A:14:4D:02:36:4D:F0:5E:99:51:87:1B:54:48
Certificate issuer:       /CN=21FD9011B33FD9996D9085D654F9943A95C37269
Certificate serial:       4821359185ABBBC0D4132630CD839E3702E80122
Authority key identifier: 21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 06 Jan 2026 19:43:39 +0000
ROA not before:           Tue 06 Jan 2026 19:38:39 +0000
ROA not after:            Tue 05 Jan 2027 19:43:39 +0000
asID:                     265523
IP address blocks:        190.123.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:21:35:91:85:ab:bb:c0:d4:13:26:30:cd:83:9e:37:02:e8:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21FD9011B33FD9996D9085D654F9943A95C37269
        Validity
            Not Before: Jan  6 19:38:39 2026 GMT
            Not After : Jan  5 19:43:39 2027 GMT
        Subject: CN=E384ACD934962A144D02364DF05E9951871B5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:e6:c3:ba:19:34:ee:fc:57:99:a8:a7:c6:
                    28:f7:c0:1c:8a:9e:ac:c3:0b:66:9c:53:bb:c6:bd:
                    5f:ec:37:ba:3c:4e:9f:05:3b:9e:67:95:bc:36:f3:
                    45:87:fe:31:9e:92:86:b8:30:51:5b:03:f3:63:4e:
                    2b:cb:e1:11:0e:3a:7c:f7:b8:c8:81:6d:d9:8a:07:
                    a1:d3:18:47:9b:16:00:e5:06:24:e7:46:87:a3:05:
                    c9:21:4d:4d:96:ce:79:5f:bb:d8:f4:3a:4c:43:66:
                    8d:25:ca:86:31:7f:32:03:a7:d4:16:24:02:c8:7b:
                    8b:90:76:9a:58:2e:60:ca:69:3f:3e:f9:bd:b8:35:
                    e3:e3:06:3d:3d:8b:a7:69:24:ae:f4:34:51:4f:1a:
                    80:38:83:52:64:75:8a:92:bd:57:8b:98:b4:6c:3c:
                    25:95:9c:2a:f7:3c:06:1d:7e:3e:48:1a:12:a5:ae:
                    56:ed:9d:65:7d:97:44:73:09:fe:36:9a:91:d9:09:
                    43:c2:85:72:93:53:cb:87:e0:c4:44:a3:cc:5e:28:
                    7d:1d:34:73:b2:5a:47:54:11:a6:3c:62:bc:17:f0:
                    d5:11:b4:85:ad:28:ad:09:54:55:3d:8f:32:d5:f3:
                    28:5c:57:e2:da:3a:f2:fc:e3:7d:85:90:03:cd:22:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:84:AC:D9:34:96:2A:14:4D:02:36:4D:F0:5E:99:51:87:1B:54:48
            X509v3 Authority Key Identifier:
                keyid:21:FD:90:11:B3:3F:D9:99:6D:90:85:D6:54:F9:94:3A:95:C3:72:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/21FD9011B33FD9996D9085D654F9943A95C37269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21FD9011B33FD9996D9085D654F9943A95C37269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79D190189965DA1AAD867063CB6533400487A68736EC971F50F34C22524FC0FF/0/3139302e3132332e3132342e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:63:0b:30:df:47:96:e5:e7:3a:bf:4c:d8:4a:9f:4b:9d:
         79:cd:6c:66:2b:bc:42:b5:5f:bc:fd:f2:82:19:30:ff:f2:25:
         83:63:58:70:48:e4:18:b3:16:5a:6d:29:68:a9:dc:e6:03:74:
         22:b8:af:be:40:55:ba:d0:18:a8:a2:8e:0c:0d:8f:60:55:1f:
         a2:9b:ee:5c:4a:cf:3c:03:5e:11:8b:64:cc:7e:3d:a4:07:85:
         53:85:80:70:6e:96:05:10:f5:14:bf:ef:11:8c:02:a4:17:bc:
         11:98:91:a8:51:ca:8c:c7:6f:54:49:b3:6d:8a:89:5c:08:cc:
         b1:44:79:bb:c3:55:ba:45:8e:12:33:58:f3:b2:09:2e:fb:34:
         b1:da:ee:ab:d5:10:a0:1f:25:6e:ca:16:09:6e:c2:39:bb:d0:
         98:dd:73:27:0f:88:7b:e3:b6:9e:90:b7:c1:99:c6:8e:6f:a8:
         4e:ca:b6:1e:ca:d8:33:a8:58:97:35:c2:97:7c:38:fe:0b:80:
         ed:9e:17:bf:cf:18:a3:18:93:e9:ca:e0:27:73:0e:18:b5:db:
         2c:58:f5:da:5a:df:57:25:09:87:f1:ce:61:cf:4a:57:58:46:
         12:da:ef:3e:ac:ff:63:38:c9:1d:71:02:8c:dd:6a:58:d2:e2:
         d1:a7:47:63
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSCE1kYWru8DUEyYwzYOeNwLoASIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGRDkwMTFCMzNGRDk5OTZEOTA4NUQ2NTRGOTk0M0E5
NUMzNzI2OTAeFw0yNjAxMDYxOTM4MzlaFw0yNzAxMDUxOTQzMzlaMDMxMTAvBgNV
BAMTKEUzODRBQ0Q5MzQ5NjJBMTQ0RDAyMzY0REYwNUU5OTUxODcxQjU0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnubDuhk07vxXmainxij3wByK
nqzDC2acU7vGvV/sN7o8Tp8FO55nlbw280WH/jGekoa4MFFbA/NjTivL4REOOnz3
uMiBbdmKB6HTGEebFgDlBiTnRoejBckhTU2Wznlfu9j0OkxDZo0lyoYxfzIDp9QW
JALIe4uQdppYLmDKaT8++b24NePjBj09i6dpJK70NFFPGoA4g1JkdYqSvVeLmLRs
PCWVnCr3PAYdfj5IGhKlrlbtnWV9l0RzCf42mpHZCUPChXKTU8uH4MREo8xeKH0d
NHOyWkdUEaY8YrwX8NURtIWtKK0JVFU9jzLV8yhcV+LaOvL8432FkAPNImajAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU44Ss2TSWKhRNAjZN8F6ZUYcbVEgwHwYDVR0j
BBgwFoAUIf2QEbM/2ZltkIXWVPmUOpXDcmkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83OUQxOTAxODk5NjVEQTFBQUQ4NjcwNjNDQjY1MzM0MDA0
ODdBNjg3MzZFQzk3MUY1MEYzNEMyMjUyNEZDMEZGLzAvMjFGRDkwMTFCMzNGRDk5
OTZEOTA4NUQ2NTRGOTk0M0E5NUMzNzI2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMUZEOTAxMUIzM0ZEOTk5NkQ5
MDg1RDY1NEY5OTQzQTk1QzM3MjY5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzlEMTkwMTg5OTY1REExQUFEODY3MDYzQ0I2NTMzNDAwNDg3QTY4NzM2
RUM5NzFGNTBGMzRDMjI1MjRGQzBGRi8wLzMxMzkzMDJlMzEzMjMzMmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNTMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
e3wwDQYJKoZIhvcNAQELBQADggEBABLIYwsw30eW5ec6v0zYSp9LnXnNbGYrvEK1
X7z98oIZMP/yJYNjWHBI5BizFlptKWip3OYDdCK4r75AVbrQGKiijgwNj2BVH6Kb
7lxKzzwDXhGLZMx+PaQHhVOFgHBulgUQ9RS/7xGMAqQXvBGYkahRyozHb1RJs22K
iVwIzLFEebvDVbpFjhIzWPOyCS77NLHa7qvVEKAfJW7KFgluwjm70JjdcycPiHvj
tp6Qt8GZxo5vqE7Kth7K2DOoWJc1wpd8OP4LgO2eF7/PGKMYk+nK4CdzDhi12yxY
9dpa31clCYfxzmHPSldYRhLa7z6s/2M4yR1xAozdaljS4tGnR2M=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:04:43 2026 by rpki-client