This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3139302e35322e38302e302f32302d3234203d3e20323632323331.roa
File:                     3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (raw, json)
Hash identifier:          GCYuuWIahMsz7e+dVu0hpk3+KdZVK64GjUyJ0w6swOY=
Subject key identifier:   B9:E9:CD:85:14:C9:AB:C1:05:3B:29:F1:3E:77:D9:D1:17:2C:E2:CC
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       1D4CDC94C441CFF23EC09D0040707FF51F387D39
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3139302e35322e38302e302f32302d3234203d3e20323632323331.roa
Signing time:             Tue 06 Jan 2026 18:58:53 +0000
ROA not before:           Tue 06 Jan 2026 18:53:53 +0000
ROA not after:            Tue 05 Jan 2027 18:58:53 +0000
asID:                     262231
IP address blocks:        190.52.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4c:dc:94:c4:41:cf:f2:3e:c0:9d:00:40:70:7f:f5:1f:38:7d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Jan  6 18:53:53 2026 GMT
            Not After : Jan  5 18:58:53 2027 GMT
        Subject: CN=B9E9CD8514C9ABC1053B29F13E77D9D1172CE2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:7a:52:f8:54:7d:9a:a0:1e:5d:81:6c:2a:
                    44:68:5f:d8:eb:7d:50:e2:71:4c:3e:67:bf:da:c2:
                    c2:fe:cd:56:c9:ad:7c:28:66:19:d4:55:d5:3f:b0:
                    0c:ce:7a:9e:d5:ef:ed:c8:a1:25:8d:e0:e1:a7:4e:
                    67:5d:99:8e:3e:64:53:89:03:c0:a2:ae:fb:f2:2b:
                    c4:4a:3c:5c:9f:ac:29:27:93:02:05:7c:86:01:dd:
                    d2:97:70:51:e5:c0:55:08:33:37:a5:36:ff:d7:78:
                    37:cf:02:f3:4d:16:a8:f2:a9:d0:3c:8b:83:b7:c5:
                    43:b7:38:1d:73:43:cd:ba:bd:51:39:ba:cf:a0:30:
                    6d:44:28:ce:cc:82:86:49:d5:70:f0:cd:02:e2:24:
                    e1:d8:4c:8c:49:4f:d8:d8:cc:37:d8:ac:7f:c3:6c:
                    7b:5d:df:9e:1f:9e:79:4d:b3:17:66:80:ac:78:73:
                    28:fc:20:99:07:b3:3b:62:bc:e2:be:02:80:55:89:
                    a5:6f:56:c8:f6:76:5a:43:61:52:0c:5d:40:3a:33:
                    30:75:2d:f9:24:a7:a5:98:4b:1f:be:6a:5d:2c:b4:
                    55:f5:ab:e1:af:07:7d:09:aa:35:c8:0c:c7:d1:d3:
                    7b:73:55:a8:96:14:82:04:c6:94:d9:0a:f9:07:dd:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:CD:85:14:C9:AB:C1:05:3B:29:F1:3E:77:D9:D1:17:2C:E2:CC
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3139302e35322e38302e302f32302d3234203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:53:d4:16:d2:89:af:6f:71:ca:7f:78:d9:94:b4:21:1a:
         64:be:ac:57:12:3c:8e:50:de:39:82:34:d8:df:12:38:3c:c7:
         7b:16:06:14:52:bd:ea:7f:01:ad:c3:76:25:6f:3c:9c:26:26:
         ac:aa:fb:63:d9:f8:5a:2c:75:e1:aa:ef:30:99:58:1b:e6:7b:
         7b:78:48:40:42:eb:64:62:c5:60:e5:b4:fd:43:ea:3d:bd:9e:
         b5:9e:92:77:da:a4:44:c1:1e:18:39:cc:03:4b:58:55:d7:fc:
         90:9a:43:4f:1e:f0:27:88:56:e6:81:62:40:6f:cf:56:2f:05:
         0d:02:70:27:f1:c4:60:0c:be:9a:fa:75:2b:49:6e:7e:76:c9:
         f4:3c:16:df:59:20:f1:9a:4e:1d:77:60:fa:11:48:f3:83:43:
         1d:c1:72:76:59:ea:d0:71:7d:da:85:36:df:2a:5c:54:8b:f2:
         8a:71:ef:04:29:3a:ce:1c:db:b1:66:d4:d3:de:1d:4e:91:5c:
         a1:86:b0:af:da:be:b8:a2:9f:b1:c0:08:bb:d7:39:4a:c0:cb:
         f2:48:73:b7:d3:f6:a2:67:52:7d:59:44:00:27:4d:31:0d:53:
         2e:3d:88:17:b1:63:65:46:83:2f:b4:5e:ce:64:02:61:0f:cf:
         db:24:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:16 2026 by rpki-client