This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          3d7u/kb8Q6+lrOuh3GREItRgYGfQcXP5PfmpTWZsiqs=
Subject key identifier:   CB:20:7A:19:B4:EA:A9:CB:A7:39:43:8B:35:79:B7:80:16:73:E9:5E
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       32500F9F8B792137E0D98DB7AC4FBF48465A20C1
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 20:48:31 +0000
ROA not before:           Tue 06 Jan 2026 20:43:31 +0000
ROA not after:            Tue 05 Jan 2027 20:48:31 +0000
asID:                     262589
IP address blocks:        190.121.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:50:0f:9f:8b:79:21:37:e0:d9:8d:b7:ac:4f:bf:48:46:5a:20:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:31 2026 GMT
            Not After : Jan  5 20:48:31 2027 GMT
        Subject: CN=CB207A19B4EAA9CBA739438B3579B7801673E95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:be:60:51:8c:c4:7c:bb:86:2d:be:75:8d:
                    78:b5:de:e2:2c:d1:92:e4:10:79:b3:1e:7c:85:8b:
                    20:62:12:68:04:0f:cb:2a:a7:e9:06:dd:e1:71:6c:
                    21:5d:e7:73:a3:d2:90:0b:05:4c:11:69:55:44:60:
                    c3:83:3e:ee:90:d6:6f:66:3d:80:25:be:60:60:95:
                    36:da:72:2f:2d:99:f6:5a:75:ac:41:7b:da:17:b3:
                    97:01:67:fc:e5:18:24:c0:a1:40:40:d5:ec:d2:2d:
                    c7:85:79:c2:f7:5b:9c:df:20:32:f6:37:6d:6f:76:
                    39:79:c2:02:3c:54:ca:e2:14:f9:f3:19:87:b7:68:
                    b0:80:aa:80:d5:66:42:e6:eb:00:95:c1:30:25:ff:
                    0d:93:e7:7a:fb:ee:c7:80:4e:ed:18:a5:18:d4:20:
                    fb:17:f0:40:c5:74:70:db:ac:21:9c:05:da:23:e6:
                    f8:8b:57:d1:ad:27:e7:6e:7c:65:0d:55:5d:47:6b:
                    60:e1:77:04:a1:75:f2:99:80:11:de:1a:62:eb:3a:
                    3d:80:de:aa:6b:84:bf:05:42:a1:63:77:8c:f6:6a:
                    c0:b4:02:bf:41:e6:e1:99:a3:f8:c8:83:6a:f6:31:
                    99:c0:17:b6:42:e6:52:fd:a4:88:86:95:b2:1d:4e:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:7A:19:B4:EA:A9:CB:A7:39:43:8B:35:79:B7:80:16:73:E9:5E
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:b1:19:1d:c4:9a:c3:68:7b:10:40:95:d8:5f:67:f6:2f:
         ab:61:b3:1b:1b:b5:06:4f:3c:c3:3b:75:e3:d1:41:3a:e5:99:
         5b:6c:c9:b7:a6:a3:62:f5:96:45:1a:77:9e:b1:0e:bd:29:73:
         48:59:fe:7a:5c:da:20:55:fc:af:00:06:80:8d:cf:26:10:b5:
         02:5f:8f:6a:81:d7:0b:2c:6d:4e:9d:16:d3:07:9e:db:1e:01:
         7a:9f:c7:97:7b:3d:ea:78:12:10:65:c7:b2:1a:cd:e1:f8:c5:
         4e:8c:94:d0:53:70:c6:33:38:58:0a:7d:d2:ab:e6:7f:9a:51:
         7e:b9:6b:66:31:f9:21:54:ca:26:fa:8f:af:b8:3a:3c:b7:6c:
         46:e9:cc:a7:e2:ee:95:c4:f0:1b:ad:7f:8a:07:52:55:d3:20:
         28:a7:e7:6f:b4:d1:34:89:4b:c6:4e:87:fe:29:5f:f2:49:e3:
         63:b1:b3:40:21:08:0e:4d:3c:a4:79:26:b2:04:d5:a9:73:f4:
         f3:5a:1f:74:f1:a7:b9:4d:1c:a1:96:ef:7d:ff:7e:e6:8b:7e:
         29:73:dd:6a:da:25:35:5b:32:99:e2:9e:29:ef:df:31:ca:46:
         3d:50:c1:1b:91:e0:64:f6:d2:85:7c:33:1b:89:a5:4f:de:5e:
         71:bb:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:14 2026 by rpki-client