This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/3139302e3132322e3234302e302f32302d3234203d3e203237393933.roa
File:                     3139302e3132322e3234302e302f32302d3234203d3e203237393933.roa (raw, json)
Hash identifier:          eGmxbZTAyvV8dV1L/NnhxYDf7/Rz/vIACw6KbzOgv/U=
Subject key identifier:   B6:F4:C0:9B:9D:BE:BD:24:41:8B:9D:C9:8D:8A:AE:1A:DA:0C:9A:EF
Certificate issuer:       /CN=68C3FB0581813B7EC1889FA7BA9577F4D6646516
Certificate serial:       077A976DE7DB2E465177A7DF39AAFC61CD3221A4
Authority key identifier: 68:C3:FB:05:81:81:3B:7E:C1:88:9F:A7:BA:95:77:F4:D6:64:65:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/3139302e3132322e3234302e302f32302d3234203d3e203237393933.roa
Signing time:             Tue 06 Jan 2026 19:05:08 +0000
ROA not before:           Tue 06 Jan 2026 19:00:08 +0000
ROA not after:            Tue 05 Jan 2027 19:05:08 +0000
asID:                     27993
IP address blocks:        190.122.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7a:97:6d:e7:db:2e:46:51:77:a7:df:39:aa:fc:61:cd:32:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C3FB0581813B7EC1889FA7BA9577F4D6646516
        Validity
            Not Before: Jan  6 19:00:08 2026 GMT
            Not After : Jan  5 19:05:08 2027 GMT
        Subject: CN=B6F4C09B9DBEBD24418B9DC98D8AAE1ADA0C9AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:7f:f1:1a:24:7d:26:ee:24:11:d9:a2:3a:
                    96:85:dc:b6:d9:5e:f5:95:80:3e:2e:2c:87:42:4d:
                    6f:04:c7:9a:53:2e:5f:14:75:a9:6f:05:78:7f:90:
                    30:50:82:ae:dc:31:de:96:c5:86:8f:e5:76:1e:6a:
                    b8:28:37:a4:a6:f0:b1:59:8f:fa:69:1d:e9:96:b6:
                    ff:8d:aa:9a:88:89:c6:8d:d1:ba:38:1f:a4:ae:31:
                    62:57:ff:3f:44:06:3a:e9:72:5e:de:e4:22:12:89:
                    77:0b:58:9e:77:5b:78:57:75:60:23:a7:0c:27:a7:
                    85:f0:b6:f9:65:b3:84:ca:3e:99:45:9d:ed:09:e6:
                    67:e4:34:5c:b0:46:01:4c:ec:35:d3:ea:52:e9:f4:
                    37:e9:a3:e0:f4:6b:03:67:5b:9f:41:a9:53:82:f0:
                    76:52:9a:bf:fb:57:b5:aa:0d:fc:95:03:c7:d7:82:
                    3c:37:b3:e4:80:e9:70:7c:bd:94:a5:d8:f5:41:1e:
                    03:c9:b0:8a:89:21:33:68:42:b5:09:78:6e:e0:c1:
                    dd:5c:3e:77:a2:5c:96:d2:56:c0:ba:a2:40:45:67:
                    f5:97:4b:20:6d:84:b7:85:aa:66:a1:c3:98:df:2e:
                    6d:67:c5:c5:b3:07:5a:f2:88:e3:84:95:29:88:85:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:C0:9B:9D:BE:BD:24:41:8B:9D:C9:8D:8A:AE:1A:DA:0C:9A:EF
            X509v3 Authority Key Identifier:
                keyid:68:C3:FB:05:81:81:3B:7E:C1:88:9F:A7:BA:95:77:F4:D6:64:65:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/3139302e3132322e3234302e302f32302d3234203d3e203237393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:99:5e:a8:31:95:83:38:ba:33:0b:7a:b5:8f:c4:b2:82:26:
         f5:ee:0a:2f:91:9d:52:8f:d9:11:02:3d:3d:d5:fc:97:cc:5f:
         95:2b:ce:49:10:44:39:9e:89:e9:e3:f1:7d:f4:49:fe:93:80:
         c9:26:56:0f:8f:24:5d:2c:d5:8a:c0:45:5a:a0:8a:e7:ba:77:
         b1:0b:25:a4:a0:56:3f:5d:3d:b4:c7:12:1e:9f:6a:c6:2e:6c:
         8b:4a:7d:4e:48:23:dd:a4:fa:60:fe:80:0f:55:b3:27:90:32:
         c5:04:85:cb:da:08:d0:36:cb:eb:61:df:1d:06:3a:0e:59:c3:
         ae:05:5f:0b:76:77:5d:5b:1d:ff:0b:8b:5c:aa:1d:dd:fe:15:
         47:34:de:8e:bd:59:5c:27:77:44:71:43:ee:bd:f7:6b:bf:14:
         fa:d9:1b:e5:0a:af:49:52:f7:b0:c4:28:78:c1:84:34:0b:cd:
         d4:c5:9a:0e:c8:2f:27:50:40:14:d8:57:06:a0:fd:9f:17:9b:
         10:73:73:9a:05:ac:6e:cf:ef:65:4f:b2:49:9e:86:99:0e:e1:
         50:1c:96:43:00:34:1c:f6:24:c2:2d:20:18:70:6c:a5:92:53:
         93:fd:74:9c:92:22:24:63:7b:0d:ca:ff:9a:b8:ce:15:48:a6:
         13:cc:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:32 2026 by rpki-client