This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa
File:                     3139302e31342e36342e302f31382d3234203d3e203232353431.roa (raw, json)
Hash identifier:          dig7cv3ETS0bUeWMvJwScljxq26Qv3Vo26frOorlYBw=
Subject key identifier:   D9:DE:3F:2A:71:13:8A:A5:02:58:27:04:DC:00:0D:86:BD:3C:56:D7
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       3912496AEC2D910F0912E3A60731F56EF783298C
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:47 +0000
ROA not before:           Tue 06 Jan 2026 20:45:47 +0000
ROA not after:            Tue 05 Jan 2027 20:50:47 +0000
asID:                     22541
IP address blocks:        190.14.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:12:49:6a:ec:2d:91:0f:09:12:e3:a6:07:31:f5:6e:f7:83:29:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:47 2026 GMT
            Not After : Jan  5 20:50:47 2027 GMT
        Subject: CN=D9DE3F2A71138AA502582704DC000D86BD3C56D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:66:ea:3b:26:89:28:40:a9:32:ab:ce:50:d8:
                    60:a3:30:d3:76:19:18:b6:04:2e:2f:15:72:4a:76:
                    8f:e6:69:a1:80:cf:b1:10:0c:22:d1:0d:9f:2d:84:
                    d8:ee:5f:e8:5a:a8:cf:ae:f8:7d:05:f1:dd:8d:d1:
                    c0:3e:47:a5:fb:2d:b9:80:db:f8:70:1d:ef:b0:45:
                    73:0b:f3:4c:10:7f:8c:6c:4c:ee:67:2c:02:82:39:
                    f6:1d:fd:f2:92:bf:44:fe:c3:fe:f0:71:25:79:e3:
                    23:a1:e3:88:26:c5:ca:6c:17:79:32:69:0d:46:61:
                    94:28:04:1f:74:71:8c:5e:59:5a:06:11:43:90:bb:
                    dd:2c:65:9d:c6:90:ec:d4:b2:79:30:97:e7:f9:d9:
                    40:63:5c:e8:aa:c5:d5:82:8a:23:07:44:72:26:c5:
                    3a:ce:06:80:1f:29:f7:7b:58:ff:f7:c9:62:48:eb:
                    e7:5f:4c:fe:c0:d1:bb:20:2d:1a:41:d8:3e:a0:59:
                    a7:80:8e:c5:91:c2:f1:11:96:5f:34:89:d9:58:97:
                    dc:ee:ee:46:fa:5d:e7:dd:48:9e:7c:15:0c:c3:ea:
                    6b:94:07:f0:7c:71:21:6c:37:7e:56:10:79:83:6b:
                    cf:02:b8:6b:71:c6:71:74:4f:18:ee:55:53:5e:8b:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:3F:2A:71:13:8A:A5:02:58:27:04:DC:00:0D:86:BD:3C:56:D7
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3139302e31342e36342e302f31382d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:42:b9:cc:65:84:fc:35:a9:0f:29:8c:d7:79:12:c4:91:
         1d:51:3a:d5:71:50:0b:3f:90:71:e7:89:09:a6:5a:29:51:a9:
         eb:21:32:7b:32:ca:0d:e5:d3:00:db:a8:81:4d:15:d6:4c:85:
         68:d4:5c:76:6e:f6:dc:63:77:1c:14:72:a9:e9:a6:33:33:1e:
         5b:59:52:22:51:a6:9b:8c:3e:93:35:e2:42:f9:82:c9:4a:0b:
         88:be:0f:d1:cf:7f:e5:f3:8f:f2:43:b7:2b:6b:c6:0d:98:d6:
         0b:d0:ee:8b:cc:4d:24:c8:13:de:54:e8:db:ca:6b:ec:bd:19:
         1b:db:1b:dc:01:cb:67:84:76:0a:dd:23:17:8d:7f:40:b0:f5:
         9a:b7:29:77:bd:bc:35:ea:1e:21:01:08:ef:ab:41:7b:08:df:
         49:4a:7a:1e:bb:0e:8c:4c:55:fc:99:20:b3:e6:74:ed:b1:c1:
         a2:47:cd:b0:c1:e9:70:48:53:dc:c7:fa:b2:b1:29:f9:6c:b9:
         9e:57:aa:4c:ad:d8:c9:3a:ac:5b:55:69:c7:01:d2:29:b8:20:
         79:30:61:d0:3b:7e:b5:a9:98:f2:e5:a0:d8:f7:dc:9d:c3:41:
         05:16:d8:10:58:0d:6d:4a:12:e7:47:cb:68:b1:97:fd:8b:2d:
         43:0a:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:50 2026 by rpki-client