This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
File:                     3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa (raw, json)
Hash identifier:          Cf7wh/UOrIzSxI472wLspaUK/ihxe7dU5M5Xqp/C90Y=
Subject key identifier:   5B:7D:C9:13:6C:C1:80:16:26:3A:E1:18:05:E7:0A:68:E9:FF:2A:70
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       284A638BF99E6BEBBBF7B8ABDD1821321DC106BC
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa
Signing time:             Tue 06 Jan 2026 19:29:35 +0000
ROA not before:           Tue 06 Jan 2026 19:24:35 +0000
ROA not after:            Tue 05 Jan 2027 19:29:35 +0000
asID:                     28068
IP address blocks:        190.122.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4a:63:8b:f9:9e:6b:eb:bb:f7:b8:ab:dd:18:21:32:1d:c1:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Jan  6 19:24:35 2026 GMT
            Not After : Jan  5 19:29:35 2027 GMT
        Subject: CN=5B7DC9136CC18016263AE11805E70A68E9FF2A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:3c:51:d6:54:94:f9:ff:5b:c8:dc:4e:44:
                    68:9a:0f:ca:80:d5:bc:d7:10:45:32:54:56:62:38:
                    a9:91:cb:81:8e:14:f8:57:03:e8:0d:31:14:77:a1:
                    1b:23:32:28:89:02:99:cf:36:e4:01:f6:72:60:94:
                    2a:6a:1d:52:cf:af:ae:ab:5d:8d:63:88:cf:ba:08:
                    35:1a:69:fe:2b:95:9d:51:e5:2f:89:e9:1a:a1:7d:
                    58:d9:48:44:a2:c8:b9:08:ec:a9:fb:12:68:76:75:
                    57:69:9c:ff:3e:d6:77:72:e3:8e:3e:11:3b:5c:7d:
                    4b:fc:a1:76:cb:d8:f1:eb:18:01:9e:bf:fb:7b:8d:
                    db:07:41:d4:27:2f:b5:07:14:fb:a6:b2:06:3b:73:
                    7f:93:cb:c7:cd:44:7f:84:40:16:66:3f:9e:fe:bf:
                    28:c4:5b:12:78:dc:97:85:70:a4:af:5d:0f:54:29:
                    6d:d0:88:63:29:9d:d7:af:a1:81:48:36:f6:38:6d:
                    0c:5a:c3:31:55:7f:80:5a:dc:5a:11:1a:2d:8b:ae:
                    1c:5c:0a:69:dc:35:0a:3f:bd:e3:64:ae:ae:3d:38:
                    da:36:8b:3f:74:77:8c:26:17:0e:16:90:c9:14:a0:
                    67:29:21:5d:b8:56:e8:4c:42:99:55:67:a7:39:52:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:C9:13:6C:C1:80:16:26:3A:E1:18:05:E7:0A:68:E9:FF:2A:70
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/3139302e3132322e3232342e302f32302d3234203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:df:5d:ac:0a:9e:6e:e1:96:68:c9:c1:f2:33:4e:c6:70:3e:
         23:f6:ba:1a:02:9b:d5:21:dd:f9:87:7f:4b:f5:fb:5b:f1:6c:
         1e:21:6e:b7:ae:b7:fe:9a:38:21:0c:98:c6:50:64:95:a8:f1:
         c3:da:44:3d:84:ea:45:cb:d5:58:ec:ac:49:ff:b3:b7:e7:4c:
         d7:0a:09:b6:e6:03:f6:8f:74:16:3f:61:0b:d9:03:95:d3:5c:
         01:4e:62:f8:01:fa:99:7a:03:08:f3:f3:bd:04:34:52:80:cf:
         57:62:a9:86:49:47:af:46:b7:b3:83:1f:39:f2:47:b4:e4:42:
         8c:a3:7f:70:3c:11:3e:49:ad:93:ff:99:1a:ff:51:fd:7c:12:
         02:be:01:1e:e7:69:27:58:73:d4:9e:1f:26:62:33:4c:0c:53:
         3a:a5:a5:f4:c6:0e:4b:6e:ea:37:10:64:f7:3e:2e:9a:67:91:
         b8:c1:a9:a9:3c:ee:b9:66:a8:cc:5a:8f:1e:b3:f1:7e:af:29:
         a4:f7:f3:7f:e4:19:3f:16:c1:59:29:08:d9:b2:8a:1d:cf:ab:
         a8:73:66:61:c6:e7:78:82:66:31:98:06:dc:82:a4:ae:04:9f:
         5f:08:2c:4f:24:eb:a4:9b:64:83:20:00:99:04:b4:19:71:4a:
         ed:c3:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:53:43 2026 by rpki-client