This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
File:                     3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa (raw, json)
Hash identifier:          bfz8FX/n/0N5mCIClP+5uFHNUDWmmlzHTSxrzg1hQvA=
Subject key identifier:   72:29:0C:12:03:4A:3D:75:6B:CE:75:0A:79:AF:FB:90:E9:72:6B:95
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       7C52A5A3AB409821CF683EF3BD7FCDA5A80B9D31
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
Signing time:             Tue 06 Jan 2026 19:39:09 +0000
ROA not before:           Tue 06 Jan 2026 19:34:09 +0000
ROA not after:            Tue 05 Jan 2027 19:39:09 +0000
asID:                     28509
IP address blocks:        201.139.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:a5:a3:ab:40:98:21:cf:68:3e:f3:bd:7f:cd:a5:a8:0b:9d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: Jan  6 19:34:09 2026 GMT
            Not After : Jan  5 19:39:09 2027 GMT
        Subject: CN=72290C12034A3D756BCE750A79AFFB90E9726B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:c8:83:4f:34:31:3d:43:6a:6a:d1:db:7d:
                    32:cb:05:73:08:0d:0d:aa:af:be:8b:6d:26:07:51:
                    30:8d:0c:76:b7:af:2f:cb:fa:78:fb:2f:ba:34:b9:
                    10:ed:36:28:3e:cc:19:8f:6f:2e:7c:e5:b7:11:03:
                    6a:6a:ce:84:3c:0c:df:cd:c0:39:fa:0c:65:ce:25:
                    ff:76:15:98:4f:2c:98:8e:5f:b0:61:a4:fb:08:60:
                    f5:da:bc:1d:74:0c:4f:95:ce:7d:1e:de:6f:d1:2d:
                    b6:e2:54:aa:5c:4f:c6:e9:7f:ba:3c:43:5f:d1:21:
                    16:d6:db:f7:c7:c2:4c:76:ba:05:7c:85:78:de:73:
                    7a:8d:82:b5:39:3d:68:62:9c:a0:67:bf:b4:4a:f3:
                    38:04:76:96:43:fd:a4:fb:8a:81:9f:27:fb:32:76:
                    cc:43:32:28:1a:19:a8:75:bd:9d:05:1e:1e:be:0c:
                    9c:41:1a:2f:c7:a2:98:08:a4:54:d2:75:a2:9e:7a:
                    99:6f:ba:aa:0e:9f:9f:fe:20:24:e4:fc:83:2b:e2:
                    43:b1:0e:f1:ea:3a:51:e8:2f:36:22:04:ad:d3:26:
                    04:19:c3:d4:9d:59:ac:00:a0:8f:c7:d4:71:e5:db:
                    f4:8a:fe:db:f4:22:df:78:51:88:ca:77:c0:e1:25:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:29:0C:12:03:4A:3D:75:6B:CE:75:0A:79:AF:FB:90:E9:72:6B:95
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:01:69:60:e4:0d:6c:0a:4e:7e:6d:c3:c2:ae:7a:04:f2:8d:
         21:17:29:12:af:4d:87:fb:e2:a2:b7:2a:6b:a9:98:7e:d1:05:
         de:39:15:65:c2:90:5d:30:de:68:ee:55:da:8b:77:5b:7a:bf:
         56:78:99:9d:a3:89:ef:b8:9e:28:6f:0e:00:e0:1b:23:09:77:
         57:e6:d8:e5:a1:09:1f:e9:80:51:8c:ea:88:d6:fb:c6:fb:7a:
         f4:7a:bd:41:d3:e5:f5:a7:89:73:9f:e4:87:76:68:5d:fa:98:
         82:22:a9:6a:5d:e5:84:d6:a8:ad:5f:68:6a:9f:59:01:9b:bb:
         13:cc:bd:3d:f3:29:0b:3e:41:ba:9a:4c:4b:4b:a4:d2:04:9f:
         10:c9:38:5f:25:b8:53:6d:94:54:d5:cd:70:35:ab:93:2e:8f:
         59:19:da:b6:74:99:eb:bb:c1:67:30:a2:78:a2:08:42:c2:aa:
         4f:b5:be:21:07:fe:0b:aa:43:d9:81:94:e0:82:7e:c9:b5:31:
         5c:ba:7e:24:9a:3e:5a:ae:fd:b1:5b:5c:7a:bc:c7:ab:fa:60:
         ea:5d:e8:cc:5a:38:c4:ec:45:6f:72:cc:08:15:5c:31:8b:d4:
         f9:5a:8f:0f:c6:da:af:05:d5:27:5e:b1:40:91:ed:08:86:34:
         48:ec:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:25 2026 by rpki-client