This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130322e302f32342d3234203d3e20323131333937.roa
File:                     3139302e31342e3130322e302f32342d3234203d3e20323131333937.roa (raw, json)
Hash identifier:          fVP1Tkayj9Zfy9RCp7jxNoHMQrC1gbhU1OAoMd4y7s0=
Subject key identifier:   A7:CC:62:BC:1F:F4:08:40:5F:90:28:F0:2B:FE:1A:44:36:00:08:44
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       72229F47389A36F67DF8112E16C1FE91328E2491
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130322e302f32342d3234203d3e20323131333937.roa
Signing time:             Wed 19 Nov 2025 22:53:15 +0000
ROA not before:           Wed 19 Nov 2025 22:48:15 +0000
ROA not after:            Wed 18 Nov 2026 22:53:15 +0000
asID:                     211397
IP address blocks:        190.14.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 09:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:9f:47:38:9a:36:f6:7d:f8:11:2e:16:c1:fe:91:32:8e:24:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Nov 19 22:48:15 2025 GMT
            Not After : Nov 18 22:53:15 2026 GMT
        Subject: CN=A7CC62BC1FF408405F9028F02BFE1A4436000844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:ff:1b:b4:9b:45:f5:27:ac:ee:0a:d7:aa:
                    40:0f:d4:1f:c9:54:2c:8e:34:28:a8:8d:1b:70:60:
                    8d:12:84:d8:da:47:52:0d:83:8c:7f:b0:48:44:58:
                    8b:63:ee:f0:b2:e1:e7:c0:dd:f3:4c:47:8b:c7:68:
                    76:ec:cf:fa:f6:1b:ee:fb:48:cd:77:08:c6:76:bc:
                    a2:14:50:aa:f6:1a:ef:08:7a:85:1b:33:87:58:1e:
                    90:bd:5a:ad:32:35:e7:eb:fb:9f:d7:2c:90:0c:6b:
                    44:35:13:34:09:4b:27:16:20:73:51:ce:29:a1:79:
                    6a:27:0e:2e:a1:4b:e0:79:9b:21:ef:1c:61:9e:a9:
                    e5:fe:a4:c0:1d:4e:8f:5a:40:11:b7:e4:c3:b4:fd:
                    6d:54:db:13:44:3f:bf:5c:e6:c6:b0:2c:f2:a7:d7:
                    66:ee:ac:16:8f:5e:a2:6d:31:fa:4e:a8:7b:bb:29:
                    c0:a4:7e:d6:80:38:fb:79:b7:73:61:00:9d:ab:42:
                    d9:f1:66:44:14:2d:de:78:5b:dd:98:65:9b:ce:7d:
                    0b:72:f8:e5:04:df:41:2a:e9:3d:6f:7e:d2:4c:7e:
                    e4:66:d1:a4:b7:9f:41:ad:d2:10:25:12:04:68:a5:
                    71:e0:2e:ba:f2:91:92:79:44:b0:6f:d4:48:94:e2:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CC:62:BC:1F:F4:08:40:5F:90:28:F0:2B:FE:1A:44:36:00:08:44
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e3130322e302f32342d3234203d3e20323131333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:be:93:d8:05:45:4b:43:3d:b5:0c:45:87:c7:45:24:4e:78:
         1b:87:a8:73:48:ca:56:8c:79:6e:7d:6d:27:b3:51:62:f2:69:
         f7:0c:99:12:f2:cb:86:d6:29:58:82:ed:b0:22:88:97:7f:d3:
         36:db:50:24:24:3e:91:d1:c6:fc:15:4a:35:42:b6:e4:f2:06:
         b1:71:63:c4:a3:50:7f:c9:70:d8:2f:55:ac:af:b5:7f:39:72:
         57:1e:d4:4d:df:a6:d6:62:bc:82:a4:c5:17:1b:b0:bc:17:25:
         98:fc:b1:8f:71:43:05:52:26:99:00:c2:86:c0:55:18:ee:16:
         28:2d:f0:43:64:09:ad:c7:d6:53:8d:68:94:50:3f:c9:6c:73:
         2d:7f:2c:29:c9:a4:34:ce:71:2b:7f:95:f0:11:c7:a6:f9:5d:
         bc:f1:da:03:60:36:87:42:c5:7b:df:7c:9b:c0:25:3c:46:b3:
         e7:6c:34:78:ab:c0:3f:fc:98:e9:73:37:5d:00:7f:ef:70:01:
         41:86:93:ca:83:13:32:0c:c5:49:1a:04:0e:26:1d:39:d5:59:
         b8:cb:a9:c1:d6:e4:0e:eb:1d:b9:64:53:6b:17:7f:2e:60:dd:
         06:96:d3:20:18:86:b2:c6:9c:9c:32:18:61:43:37:cc:3e:97:
         b8:49:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:45:17 2025 by rpki-client