This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa
File:                     3139302e3137312e39362e302f31392d3234203d3e203532323633.roa (raw, json)
Hash identifier:          pwz7kKALGv7MrefpCp/7UPoAkEosJqg5Tc02rB7PKUw=
Subject key identifier:   C5:19:DD:02:44:F1:45:3F:5C:EC:68:24:A8:00:D2:61:FD:AA:01:25
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       5C3CABCF38EEE28EC80B59341858FC9B5F53CCD6
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa
Signing time:             Tue 06 Jan 2026 19:41:08 +0000
ROA not before:           Tue 06 Jan 2026 19:36:08 +0000
ROA not after:            Tue 05 Jan 2027 19:41:08 +0000
asID:                     52263
IP address blocks:        190.171.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3c:ab:cf:38:ee:e2:8e:c8:0b:59:34:18:58:fc:9b:5f:53:cc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Jan  6 19:36:08 2026 GMT
            Not After : Jan  5 19:41:08 2027 GMT
        Subject: CN=C519DD0244F1453F5CEC6824A800D261FDAA0125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:75:1f:0a:d8:1c:17:26:87:2f:90:11:a9:
                    ea:db:c6:c2:f0:ea:68:6e:85:d3:1b:8a:2c:f1:a0:
                    96:25:3e:cd:3c:d0:0f:df:ed:17:fd:0c:f1:77:b5:
                    66:bd:31:81:60:7c:32:98:cb:34:6e:3c:ba:8f:f1:
                    43:9e:0e:04:4d:93:3f:aa:cd:fb:bf:d0:b9:d0:98:
                    f7:c9:f5:e9:c5:d8:ef:b0:e9:21:43:a0:35:a3:e4:
                    12:f2:15:bc:86:0c:68:93:00:87:b3:25:9d:6a:b0:
                    42:e9:b7:f2:32:c2:fe:b6:20:22:c9:00:aa:00:47:
                    27:8f:d0:d0:ff:4e:49:5b:a8:eb:13:8e:4f:64:58:
                    a2:a6:08:dc:5b:4b:b2:76:36:84:c6:82:2a:a0:96:
                    2a:fb:77:5a:62:43:97:34:d4:6c:37:12:e5:b7:00:
                    56:e8:2d:97:13:a3:2b:d8:a9:91:78:89:b3:9a:b8:
                    dd:3f:2c:bd:af:1c:c3:79:65:93:b3:4c:22:2b:f4:
                    4f:7d:af:e7:f2:75:10:c8:0e:1a:4e:94:ff:a0:ad:
                    81:5b:e4:89:4d:24:83:85:4a:fe:c0:78:74:dc:74:
                    6a:dc:c7:a7:e1:7d:20:49:bf:95:91:5f:1f:2b:fc:
                    d0:2a:6a:10:2c:0e:be:f9:9c:a1:f9:bc:8b:6e:e7:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:19:DD:02:44:F1:45:3F:5C:EC:68:24:A8:00:D2:61:FD:AA:01:25
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3139302e3137312e39362e302f31392d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:35:50:fc:4f:5f:a3:c3:90:83:70:cc:bc:f4:0f:53:4d:
         e9:81:48:21:eb:a8:52:5f:85:68:20:86:57:98:2e:45:3c:0e:
         bc:52:bd:d0:86:1a:a0:00:2b:4c:e6:8d:21:d3:e5:78:b4:a7:
         d8:91:ce:7c:18:8c:99:4f:b9:fe:4d:4f:01:47:33:9b:f1:27:
         0a:de:87:2d:bf:ea:0e:4c:2a:f9:0e:38:d5:d6:bd:18:a2:95:
         9c:0a:1c:06:c4:02:db:28:0a:fb:92:4b:af:fd:e0:11:0a:43:
         56:f6:55:c3:a9:9c:a9:59:80:e1:e6:47:6c:5a:b5:7e:0f:c3:
         49:eb:15:ca:bb:7a:28:8d:a5:79:70:41:44:d7:6d:b3:4f:95:
         a8:2b:3e:5c:45:7b:6a:e9:f9:04:39:26:28:cf:c1:50:42:8d:
         a1:a5:13:9d:91:db:40:36:d3:5f:c7:1e:2b:2f:90:44:3e:de:
         34:01:29:51:e5:0d:6f:2d:a1:d5:19:fc:bb:cf:64:3e:fe:a3:
         09:e2:47:f5:b2:2b:41:20:15:60:2d:1e:cd:3a:d6:51:a9:1b:
         47:fb:8a:5e:ce:df:88:34:03:c5:7a:fe:c7:8c:73:79:f6:ca:
         2e:6d:d3:a4:fc:45:73:01:20:5b:01:dc:76:ac:dc:f8:ac:85:
         44:bc:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:32 2026 by rpki-client