This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
File:                     3139302e362e3132382e302f32302d3234203d3e203132303636.roa (raw, json)
Hash identifier:          eol0U9ZKrQNcqNSdoF8wAC5tgBQb7crloSnDy95uH0o=
Subject key identifier:   57:2F:B4:86:49:E8:95:E7:55:B9:0E:D0:D8:0D:34:BA:A5:91:A7:DE
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       6C4F473E6576D458E31FF4F52991F4A48EBC2281
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:54 +0000
ROA not before:           Tue 06 Jan 2026 19:34:54 +0000
ROA not after:            Tue 05 Jan 2027 19:39:54 +0000
asID:                     12066
IP address blocks:        190.6.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4f:47:3e:65:76:d4:58:e3:1f:f4:f5:29:91:f4:a4:8e:bc:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:54 2026 GMT
            Not After : Jan  5 19:39:54 2027 GMT
        Subject: CN=572FB48649E895E755B90ED0D80D34BAA591A7DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:ac:99:77:90:41:7b:44:76:4c:b3:ef:75:
                    82:88:9e:a9:a2:96:a3:a1:a1:1c:df:9d:72:65:78:
                    9d:63:54:47:07:df:95:c8:0c:f1:b1:c7:9c:ce:1e:
                    21:50:40:c2:51:da:77:b7:95:e4:bc:2a:f9:0e:ec:
                    5f:26:51:af:68:ec:23:8a:42:60:bd:c6:c3:c2:c9:
                    45:65:d8:56:4b:a8:bb:29:0a:fc:ed:dc:9a:6c:5f:
                    9c:62:22:0e:3b:ea:53:a3:f5:0b:a3:cd:e5:b2:c6:
                    a0:46:73:b4:18:6e:7a:a7:b3:9a:db:ba:2a:73:85:
                    bc:5c:43:82:17:ea:ea:74:f3:4e:4b:e3:0c:cf:15:
                    38:d8:17:ee:c3:6c:8c:87:5d:f7:ac:04:84:37:c2:
                    7c:27:a8:14:f7:b7:51:58:ad:81:50:c6:b1:c8:39:
                    c9:6b:2a:59:9c:6e:84:c2:d6:4b:08:3d:b1:74:42:
                    f6:3d:b4:93:6c:81:af:08:28:62:f1:bb:43:ee:de:
                    7b:9f:91:70:ec:9b:59:64:e6:2f:bf:8e:7f:3e:92:
                    8c:76:62:c1:09:42:ac:1e:c1:c3:1a:e8:22:4d:6f:
                    62:f9:48:24:b6:7d:35:2b:64:86:fd:dc:d5:b2:7f:
                    9c:ee:ca:3b:c2:76:5c:79:00:af:9d:22:10:3a:9d:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:B4:86:49:E8:95:E7:55:B9:0E:D0:D8:0D:34:BA:A5:91:A7:DE
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3132382e302f32302d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:e3:23:aa:4a:d1:6b:c4:7a:7d:c7:af:b4:3e:0d:7b:47:
         b3:a6:22:d2:f5:db:77:d3:49:66:50:7a:79:83:05:c2:6f:01:
         dc:4e:55:8a:76:00:90:46:2b:04:48:89:bf:fb:c6:f2:aa:38:
         d5:45:e1:d0:ef:7c:8d:51:77:d0:80:51:09:3f:94:c8:88:d0:
         dc:63:75:a8:53:92:05:a7:a7:d8:ce:c3:4d:dd:68:aa:c7:e3:
         90:e8:bd:41:25:fe:66:67:f6:d9:ad:61:3f:a4:ce:a1:6e:19:
         ca:dc:0e:63:ff:4e:3a:16:ed:93:16:e0:ae:fe:eb:06:4c:60:
         60:a9:ba:73:c9:5d:52:98:7f:ab:af:66:2c:4d:8d:0a:1e:c3:
         4b:8a:aa:64:24:30:5c:2e:74:aa:c1:52:9d:22:81:43:d6:75:
         51:38:58:22:48:e8:6f:55:1e:da:14:7d:22:ab:a4:5a:d4:dc:
         a5:6f:01:34:fa:aa:98:a5:bb:d6:d0:ce:e9:80:16:7b:58:3d:
         14:8c:f5:49:95:bf:12:ae:6b:7d:02:52:c0:3d:59:d6:de:a4:
         62:f0:8f:9e:a6:1b:2a:c5:5a:09:87:71:5c:6e:b9:32:dd:00:
         7e:e3:c4:e0:9b:44:00:6c:12:ed:3c:9e:e9:2b:0c:ce:8e:39:
         a4:b7:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:29 2026 by rpki-client