This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa
File:                     3139302e38302e302e302f31372d3234203d3e203139383633.roa (raw, json)
Hash identifier:          EjKHT/RZ9uwqkwYJ6gMGvSebIeuBRf3qhLS9vB2gvYc=
Subject key identifier:   BB:C5:02:56:22:2D:4E:6C:78:22:62:79:64:2A:5F:C4:05:5F:EE:46
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       0F3610E1B0E1334BA984EFAC62E15163DDFCFC9D
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa
Signing time:             Tue 06 Jan 2026 18:59:47 +0000
ROA not before:           Tue 06 Jan 2026 18:54:47 +0000
ROA not after:            Tue 05 Jan 2027 18:59:47 +0000
asID:                     19863
IP address blocks:        190.80.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:36:10:e1:b0:e1:33:4b:a9:84:ef:ac:62:e1:51:63:dd:fc:fc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Jan  6 18:54:47 2026 GMT
            Not After : Jan  5 18:59:47 2027 GMT
        Subject: CN=BBC50256222D4E6C78226279642A5FC4055FEE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:13:6c:07:98:a4:50:7b:e5:07:72:91:f6:
                    de:65:1e:a1:57:0b:26:c8:7b:03:9a:92:a4:72:dc:
                    96:70:76:ad:8e:99:87:26:dc:22:ec:89:6e:bf:06:
                    c4:a3:1a:65:2f:7e:d5:87:8e:ad:48:92:b4:51:54:
                    5f:92:8a:dd:11:8d:3c:89:cb:14:1d:66:46:44:2f:
                    3f:e4:a5:b5:09:5b:1a:e0:60:53:bb:d2:60:75:45:
                    16:dc:32:20:5d:62:7c:b1:b6:4c:51:bf:e9:e5:c0:
                    ca:61:cc:ce:c2:97:71:b9:a4:64:e1:10:1d:02:57:
                    5d:0c:bb:92:98:e2:2e:a5:9a:8e:bf:de:c5:f4:b1:
                    4c:4d:20:d0:10:7d:26:84:44:86:da:24:55:c5:c9:
                    a9:67:b3:92:81:19:07:ff:41:cf:04:56:30:f5:fd:
                    d4:a6:09:71:56:3a:56:94:5c:45:07:9c:98:eb:ef:
                    14:37:eb:31:56:02:04:7e:32:f7:db:42:e4:81:b1:
                    72:6a:2c:87:4a:97:02:68:cb:2e:ea:33:ed:2d:63:
                    b6:02:97:e0:2a:f0:1f:6b:e1:0f:9f:73:92:73:58:
                    17:87:9d:6e:65:af:45:57:ee:c6:7d:18:03:dc:9d:
                    8b:6a:7e:84:0f:71:bb:a8:8d:ce:01:18:7f:f5:e4:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:02:56:22:2D:4E:6C:78:22:62:79:64:2A:5F:C4:05:5F:EE:46
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:95:3e:ee:b8:1b:6e:01:27:30:51:8a:77:36:ee:b8:25:
         f1:f8:7c:8e:79:d0:a9:10:c9:3f:8b:0a:36:7c:77:f7:42:a4:
         af:ce:33:de:84:db:f4:94:92:71:b6:ed:dc:49:d4:61:ba:c5:
         c1:75:02:4c:f1:f5:01:9d:d4:73:01:b6:44:dd:d9:ed:aa:ee:
         69:ff:c1:44:21:fc:45:46:33:4e:a5:05:10:11:7c:ce:41:11:
         c3:26:62:19:7a:10:01:ab:b5:de:2f:50:7f:b3:28:80:cd:c7:
         e9:fe:57:b5:48:a2:bb:9f:9c:cf:c6:b6:24:0c:85:33:cc:85:
         9d:08:7a:cb:bc:54:79:de:e4:2c:12:47:1f:51:0d:10:a5:11:
         36:cb:9c:49:17:3d:9a:2c:27:b0:f6:db:5a:65:09:ec:b8:58:
         71:76:49:aa:ac:ba:0f:65:84:92:c3:bb:d8:4f:20:bd:47:a6:
         a8:f1:e2:0d:30:c0:c5:da:b8:4c:9e:fe:53:33:57:d7:e3:de:
         f7:9d:68:43:81:f8:3a:3b:1d:36:a8:2e:e9:a7:47:26:d1:08:
         1f:66:80:2d:c8:b8:fa:5d:98:01:37:69:b8:27:9d:eb:48:da:
         f3:17:b5:99:bf:ee:36:a9:ad:38:d6:d6:4d:49:26:24:99:a8:
         72:ea:9a:f1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDzYQ4bDhM0uphO+sYuFRY938/J0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZCQTc1NDlCM0MxNjk4QUEyODFCNjdBNDk2MDM0MjVC
M0IzRDU3NTAeFw0yNjAxMDYxODU0NDdaFw0yNzAxMDUxODU5NDdaMDMxMTAvBgNV
BAMTKEJCQzUwMjU2MjIyRDRFNkM3ODIyNjI3OTY0MkE1RkM0MDU1RkVFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlBNsB5ikUHvlB3KR9t5lHqFX
CybIewOakqRy3JZwdq2OmYcm3CLsiW6/BsSjGmUvftWHjq1IkrRRVF+Sit0RjTyJ
yxQdZkZELz/kpbUJWxrgYFO70mB1RRbcMiBdYnyxtkxRv+nlwMphzM7Cl3G5pGTh
EB0CV10Mu5KY4i6lmo6/3sX0sUxNINAQfSaERIbaJFXFyalns5KBGQf/Qc8EVjD1
/dSmCXFWOlaUXEUHnJjr7xQ36zFWAgR+MvfbQuSBsXJqLIdKlwJoyy7qM+0tY7YC
l+Aq8B9r4Q+fc5JzWBeHnW5lr0VX7sZ9GAPcnYtqfoQPcbuojc4BGH/15C7HAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUu8UCViItTmx4ImJ5ZCpfxAVf7kYwHwYDVR0j
BBgwFoAUVrp1SbPBaYqigbZ6SWA0JbOz1XUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzYzN0YzOTcyMzkyQzk0MDg4NDE1MDZBMDA5QzBFNTg3
OTM1NjZEQzlFQ0YxMUQyQjE5NEVEQUE3MDdEMEFFLzAvNTZCQTc1NDlCM0MxNjk4
QUEyODFCNjdBNDk2MDM0MjVCM0IzRDU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NkJBNzU0OUIzQzE2OThBQTI4
MUI2N0E0OTYwMzQyNUIzQjNENTc1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc2MzdGMzk3MjM5MkM5NDA4ODQxNTA2QTAwOUMwRTU4NzkzNTY2REM5
RUNGMTFEMkIxOTRFREFBNzA3RDBBRS8wLzMxMzkzMDJlMzgzMDJlMzAyZTMwMmYz
MTM3MmQzMjM0MjAzZDNlMjAzMTM5MzgzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHvlAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBhspU+7rgbbgEnMFGKdzbuuCXx+HyOedCpEMk/iwo2fHf3
QqSvzjPehNv0lJJxtu3cSdRhusXBdQJM8fUBndRzAbZE3dntqu5p/8FEIfxFRjNO
pQUQEXzOQRHDJmIZehABq7XeL1B/syiAzcfp/le1SKK7n5zPxrYkDIUzzIWdCHrL
vFR53uQsEkcfUQ0QpRE2y5xJFz2aLCew9ttaZQnsuFhxdkmqrLoPZYSSw7vYTyC9
R6ao8eINMMDF2rhMnv5TM1fX4973nWhDgfg6Ox02qC7pp0cm0QgfZoAtyLj6XZgB
N2m4J53rSNrzF7WZv+42qa041tZNSSYkmahy6prx
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:17:46 2026 by rpki-client