This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/3139302e3130362e34302e302f32312d3234203d3e20323632323330.roa
File:                     3139302e3130362e34302e302f32312d3234203d3e20323632323330.roa (raw, json)
Hash identifier:          et+O8463r0C0JhbBSeChfbWIC32daQqyagAJW2abZnI=
Subject key identifier:   F0:D0:5F:10:2B:B0:F8:08:5E:D3:B9:31:24:6A:59:C3:8D:15:60:BC
Certificate issuer:       /CN=5476D3DCCFF32D40304F300362E14E912C59544D
Certificate serial:       789E84DEED44BD497E6E57CF4891026725F7D708
Authority key identifier: 54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/3139302e3130362e34302e302f32312d3234203d3e20323632323330.roa
Signing time:             Tue 06 Jan 2026 20:55:45 +0000
ROA not before:           Tue 06 Jan 2026 20:50:45 +0000
ROA not after:            Tue 05 Jan 2027 20:55:45 +0000
asID:                     262230
IP address blocks:        190.106.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:84:de:ed:44:bd:49:7e:6e:57:cf:48:91:02:67:25:f7:d7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476D3DCCFF32D40304F300362E14E912C59544D
        Validity
            Not Before: Jan  6 20:50:45 2026 GMT
            Not After : Jan  5 20:55:45 2027 GMT
        Subject: CN=F0D05F102BB0F8085ED3B931246A59C38D1560BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:14:3e:c7:54:aa:25:49:54:3a:6e:34:e8:
                    8d:a0:5c:66:b9:1d:76:77:c8:95:25:9e:31:59:90:
                    21:73:16:a6:70:c1:3b:61:e1:de:bc:68:e9:e5:8a:
                    ae:29:81:ab:28:1d:0f:20:04:c5:e7:57:28:16:7e:
                    48:09:1b:1e:07:e2:67:96:58:3c:01:90:33:85:55:
                    e9:71:a6:06:99:33:bf:ea:cb:5d:8b:c2:a8:95:41:
                    76:41:6c:64:19:3c:06:0f:94:83:95:07:02:1c:40:
                    cc:16:72:79:9a:35:7a:8a:4d:63:d4:d8:73:aa:ec:
                    00:62:19:33:ac:34:7a:5f:cd:2a:79:aa:0d:70:c5:
                    93:7f:ea:3e:c5:fa:d2:f6:d9:3c:29:cc:f4:f2:8c:
                    8f:c1:14:3e:de:7a:6c:6f:c9:2c:d9:65:10:95:d3:
                    e3:c4:31:62:8c:b6:12:47:4b:d4:b7:f5:88:21:2c:
                    59:c2:9e:84:59:19:dd:c7:d5:09:ee:ff:d9:14:70:
                    82:76:d5:9a:ab:14:10:4f:33:cf:58:40:d4:0a:26:
                    de:9d:4c:32:8b:97:f2:42:30:f8:c9:b5:ad:47:dc:
                    1d:04:4e:eb:0a:42:47:c7:53:39:a1:62:b5:b9:a3:
                    5c:9f:be:df:9b:1b:79:6e:db:50:f4:92:22:3b:7c:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:5F:10:2B:B0:F8:08:5E:D3:B9:31:24:6A:59:C3:8D:15:60:BC
            X509v3 Authority Key Identifier:
                keyid:54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/3139302e3130362e34302e302f32312d3234203d3e20323632323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:6e:e8:61:cf:d4:a6:63:38:fb:51:fc:ba:de:40:14:f8:60:
         6b:92:4f:4a:63:3c:5e:09:b4:0b:b3:e6:9b:9e:d0:68:a6:bb:
         3d:c5:cf:1c:54:8f:c2:f1:12:2b:83:3b:e2:2b:7d:12:7a:bb:
         2e:57:41:de:b0:74:d5:9e:5d:a7:27:b4:07:d7:b2:22:50:b9:
         a2:5e:25:49:06:8b:f4:78:31:55:e0:46:8e:15:5f:52:e9:c2:
         df:c1:c1:5f:03:51:86:81:3c:e5:48:52:ca:2f:57:c9:7c:ee:
         d0:83:32:25:4f:16:19:e7:41:31:8a:97:3a:3c:8a:6a:11:0c:
         47:ed:07:80:04:63:63:57:eb:03:66:ba:74:e3:5d:06:83:a0:
         20:3b:d2:0a:fd:9c:54:85:14:bf:63:98:0c:f9:5c:c9:ed:2f:
         8b:85:19:d2:8f:58:8c:15:09:b2:01:61:ed:13:58:80:5d:6a:
         74:8c:10:5f:91:6d:f8:fd:83:94:b9:26:cc:d6:fc:bd:f0:db:
         e3:a6:06:2b:dd:4d:ff:f1:70:f0:d7:d3:75:ab:7f:9b:30:4f:
         54:b0:3d:17:40:81:d8:e1:86:5a:17:22:a9:16:cf:aa:56:68:
         b0:c9:ae:31:23:7f:82:58:a8:17:c1:14:b0:62:5a:46:27:1b:
         a4:5a:41:f2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeJ6E3u1EvUl+blfPSJECZyX31wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3NkQzRENDRkYzMkQ0MDMwNEYzMDAzNjJFMTRFOTEy
QzU5NTQ0RDAeFw0yNjAxMDYyMDUwNDVaFw0yNzAxMDUyMDU1NDVaMDMxMTAvBgNV
BAMTKEYwRDA1RjEwMkJCMEY4MDg1RUQzQjkzMTI0NkE1OUMzOEQxNTYwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVBQ+x1SqJUlUOm406I2gXGa5
HXZ3yJUlnjFZkCFzFqZwwTth4d68aOnliq4pgasoHQ8gBMXnVygWfkgJGx4H4meW
WDwBkDOFVelxpgaZM7/qy12LwqiVQXZBbGQZPAYPlIOVBwIcQMwWcnmaNXqKTWPU
2HOq7ABiGTOsNHpfzSp5qg1wxZN/6j7F+tL22TwpzPTyjI/BFD7eemxvySzZZRCV
0+PEMWKMthJHS9S39YghLFnCnoRZGd3H1Qnu/9kUcIJ21ZqrFBBPM89YQNQKJt6d
TDKLl/JCMPjJta1H3B0ETusKQkfHUzmhYrW5o1yfvt+bG3lu21D0kiI7fAnpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8NBfECuw+Ahe07kxJGpZw40VYLwwHwYDVR0j
BBgwFoAUVHbT3M/zLUAwTzADYuFOkSxZVE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTdDN0MyRThDRUZGMUYwQjdDRTEwNjU4RTY2REE1MDA5
RkM4MTdBMDkyMDM3MDQ2MDI5RDExODAyODM3RDJGLzAvNTQ3NkQzRENDRkYzMkQ0
MDMwNEYzMDAzNjJFMTRFOTEyQzU5NTQ0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NDc2RDNEQ0NGRjMyRDQwMzA0
RjMwMDM2MkUxNEU5MTJDNTk1NDRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU3QzdDMkU4Q0VGRjFGMEI3Q0UxMDY1OEU2NkRBNTAwOUZDODE3QTA5
MjAzNzA0NjAyOUQxMTgwMjgzN0QyRi8wLzMxMzkzMDJlMzEzMDM2MmUzNDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmoo
MA0GCSqGSIb3DQEBCwUAA4IBAQAObuhhz9SmYzj7Ufy63kAU+GBrkk9KYzxeCbQL
s+abntBoprs9xc8cVI/C8RIrgzviK30SersuV0HesHTVnl2nJ7QH17IiULmiXiVJ
Bov0eDFV4EaOFV9S6cLfwcFfA1GGgTzlSFLKL1fJfO7QgzIlTxYZ50Exipc6PIpq
EQxH7QeABGNjV+sDZrp0410Gg6AgO9IK/ZxUhRS/Y5gM+VzJ7S+LhRnSj1iMFQmy
AWHtE1iAXWp0jBBfkW34/YOUuSbM1vy98NvjpgYr3U3/8XDw19N1q3+bME9UsD0X
QIHY4YZaFyKpFs+qVmiwya4xI3+CWKgXwRSwYlpGJxukWkHy
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:07 2026 by rpki-client