This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
File:                     3139302e39342e3134342e302f32312d3234203d3e203237363638.roa (raw, json)
Hash identifier:          k/rNnq2m58mQToYqsVV+ZGxGWfT6FFLIRhUAZbD3IPI=
Subject key identifier:   F4:98:DE:7C:7C:0A:DA:6A:67:15:A4:B1:14:62:B6:7C:95:6C:40:5E
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       250DC2C6CF208F86E34EF637AFF6029D9B0CD08A
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa
Signing time:             Tue 06 Jan 2026 20:49:24 +0000
ROA not before:           Tue 06 Jan 2026 20:44:24 +0000
ROA not after:            Tue 05 Jan 2027 20:49:24 +0000
asID:                     27668
IP address blocks:        190.94.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:c2:c6:cf:20:8f:86:e3:4e:f6:37:af:f6:02:9d:9b:0c:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Jan  6 20:44:24 2026 GMT
            Not After : Jan  5 20:49:24 2027 GMT
        Subject: CN=F498DE7C7C0ADA6A6715A4B11462B67C956C405E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:c4:73:63:6a:96:88:1e:17:cd:6b:69:b5:
                    3e:18:5b:e9:30:21:53:17:49:27:20:02:10:ce:ed:
                    d0:9a:a6:79:85:2b:ce:d3:02:09:5d:16:84:c9:58:
                    36:ed:8a:17:59:7d:9d:d9:52:61:fc:73:38:d5:43:
                    8f:26:c0:da:ff:8a:46:6f:a9:1a:f7:ee:c0:f2:de:
                    0f:83:41:ee:f6:7d:e0:4a:b4:cf:7a:c4:74:2e:29:
                    5e:28:33:bb:38:70:f1:a4:80:8b:7c:58:3d:a1:21:
                    aa:fa:14:bf:a4:5e:9f:cc:d1:5b:7c:20:dc:5b:2e:
                    47:98:dc:2c:8a:63:ba:d5:fa:98:d6:b9:66:54:8d:
                    a5:df:44:ef:1e:04:2e:b1:00:9f:00:f4:55:5a:57:
                    e3:31:09:a2:24:5a:de:2a:c0:96:73:9b:8e:9a:8e:
                    b4:f2:89:ce:96:f2:ff:2c:9a:6b:b7:ed:9f:d5:1c:
                    af:c6:c4:a9:06:e7:bf:14:6a:19:79:9f:b6:cb:b0:
                    2e:1b:16:87:38:b8:22:2e:2e:69:ae:d3:50:37:72:
                    77:b6:4f:67:79:15:19:72:45:cd:3d:17:e8:db:6b:
                    da:59:e3:cb:c7:05:21:71:29:f2:d4:15:0c:d0:c5:
                    28:55:fe:ec:bc:99:c1:87:34:3a:96:0a:4e:d5:f5:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:DE:7C:7C:0A:DA:6A:67:15:A4:B1:14:62:B6:7C:95:6C:40:5E
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3134342e302f32312d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:55:b5:72:10:e3:c0:ef:55:bc:5f:4f:f5:eb:8c:16:81:
         44:b3:4d:dc:7d:c7:47:9e:36:7f:36:6d:f2:ea:0a:b7:a3:4a:
         2a:f6:22:6a:44:9b:d8:8d:ba:58:2c:f3:c4:0f:ad:c4:18:92:
         72:ec:cb:98:4c:35:a9:e2:67:83:3a:b3:9a:03:58:9a:47:ee:
         23:aa:a4:41:a2:bc:2a:f1:24:6e:e8:4e:6f:fa:96:2a:a1:55:
         f7:2c:66:bb:31:a0:8d:3f:1d:4e:31:ff:0f:ff:f6:e9:0c:47:
         08:d0:30:9d:07:8a:fa:76:26:58:2f:b4:03:c8:6d:8c:c8:75:
         6f:32:74:59:af:b6:dc:fd:75:21:53:9e:7b:22:cd:67:c4:b7:
         1b:ed:12:8b:d6:ea:a3:f5:9a:02:6b:6b:28:8b:25:ad:71:d7:
         db:83:1d:ec:33:49:1d:35:5e:09:44:4f:da:f4:e0:fd:85:bb:
         38:68:e4:22:22:f9:f4:25:7e:10:b9:14:4c:a2:4d:89:fa:14:
         5d:4e:07:2f:61:60:dd:b6:60:67:69:5c:94:70:13:df:0e:50:
         17:5d:34:8d:a6:5d:12:b0:11:5b:57:94:f1:2d:bd:57:43:65:
         aa:18:f7:3a:aa:b4:d8:3e:c1:6c:6d:9b:d8:2f:38:c7:4a:2e:
         cb:2d:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:12 2026 by rpki-client