This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
File:                     3139302e39342e3132382e302f31392d3234203d3e203237363638.roa (raw, json)
Hash identifier:          nEMLKwJ3hE1VIznafZTWQpa6m/vNoib8Zw/txYWn0ew=
Subject key identifier:   01:E6:92:01:83:8C:B9:C6:3F:84:06:0D:75:0D:EE:CA:F4:7C:5B:E7
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       71DBFB3F24B4EFFC721A3D5408E0FC8D729D5204
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
Signing time:             Tue 06 Jan 2026 20:49:23 +0000
ROA not before:           Tue 06 Jan 2026 20:44:23 +0000
ROA not after:            Tue 05 Jan 2027 20:49:23 +0000
asID:                     27668
IP address blocks:        190.94.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:fb:3f:24:b4:ef:fc:72:1a:3d:54:08:e0:fc:8d:72:9d:52:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Jan  6 20:44:23 2026 GMT
            Not After : Jan  5 20:49:23 2027 GMT
        Subject: CN=01E69201838CB9C63F84060D750DEECAF47C5BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:b1:38:d0:f5:ae:b8:da:1e:4d:c4:a4:c4:
                    92:36:df:d5:d8:25:a9:5c:8a:b7:b1:07:47:78:10:
                    53:26:98:27:9c:67:23:a2:f4:c6:28:3b:77:b4:7d:
                    b8:68:7b:8b:79:0f:e6:e6:4f:bc:c5:06:de:e3:ac:
                    01:78:cc:2c:b3:79:44:8e:3b:74:b9:c5:83:91:fd:
                    ca:98:9f:cc:58:1d:03:21:00:c6:c2:db:e5:96:82:
                    ac:7b:d7:61:04:45:6e:59:0e:b1:fc:b9:6c:50:88:
                    1b:bd:d2:29:07:14:46:7d:ba:b5:c3:83:da:74:94:
                    b7:ef:ab:b0:85:4d:df:2c:a2:64:12:4d:8d:f9:34:
                    23:e1:c2:9a:8f:8b:b7:ed:4c:db:71:c7:66:1b:22:
                    4a:fa:c8:20:af:bd:27:69:1a:96:99:9d:a2:bb:fc:
                    2f:3f:22:07:52:bd:65:2b:9c:6f:41:3c:04:ef:ab:
                    d1:1f:af:6c:90:d1:43:f5:58:04:b4:05:fa:56:4a:
                    b2:d4:5a:bc:3d:a2:3a:29:ca:32:d5:71:5f:45:3a:
                    92:83:9e:49:3a:f8:d0:b9:41:5d:44:6a:14:a8:b6:
                    19:7b:70:a5:df:f8:73:83:11:84:c5:55:48:bc:b3:
                    77:90:02:af:dc:7d:6c:6f:54:37:39:42:52:8d:fd:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:92:01:83:8C:B9:C6:3F:84:06:0D:75:0D:EE:CA:F4:7C:5B:E7
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:43:cf:71:91:7e:57:d4:cf:2a:a8:69:b4:87:77:93:c6:
         ac:92:18:fd:18:94:97:ab:bd:af:35:5d:4b:02:28:68:23:5d:
         93:e5:d3:4c:eb:dc:55:6f:b6:83:6d:83:fe:25:35:cc:52:f6:
         44:ff:9f:c0:96:7b:cc:72:7b:bb:aa:7e:49:bd:e6:a8:16:14:
         32:e6:df:ce:cd:64:66:24:e2:13:b8:6c:53:a6:6c:b9:b7:bb:
         d6:a7:cc:ce:66:67:cd:5f:14:76:ae:84:28:af:eb:87:44:b7:
         ab:42:38:13:9c:c9:28:6b:6c:72:2f:6a:a6:0b:10:f4:f6:1b:
         1b:b2:c2:0e:8d:44:c1:54:83:a9:fc:42:96:1e:25:59:6c:eb:
         80:69:21:98:1d:e4:69:27:e9:cb:58:75:cb:d3:bf:d6:63:1b:
         02:ad:51:c2:5f:4f:34:0b:14:c8:2c:c5:7f:3e:75:22:d3:04:
         a0:d0:3a:73:c5:cd:b6:be:bb:59:a4:a3:ea:37:ed:31:78:51:
         df:88:a1:8c:d9:4f:ff:f0:c4:d8:68:de:09:dd:70:89:4f:54:
         44:bb:ce:dd:0e:07:35:73:75:d4:71:0e:0a:16:67:e9:2d:42:
         07:0f:2d:d2:ca:6d:45:97:a6:18:09:0b:10:3b:a6:09:ed:45:
         88:3d:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:23:24 2026 by rpki-client