This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa
File:                     3139302e362e3134342e302f32302d3234203d3e203238313138.roa (raw, json)
Hash identifier:          +ItuFajFcP4+L/zYGuxv0go24ZNeSJULZiFEdJTjHlc=
Subject key identifier:   CE:D5:D9:E8:B8:6B:4F:48:7A:C0:E3:48:E4:D1:6D:81:56:3B:7F:00
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       086A11F3AD4BC2F0437BAD671A09E82A47F155E5
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:55 +0000
ROA not before:           Tue 06 Jan 2026 19:34:55 +0000
ROA not after:            Tue 05 Jan 2027 19:39:55 +0000
asID:                     28118
IP address blocks:        190.6.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6a:11:f3:ad:4b:c2:f0:43:7b:ad:67:1a:09:e8:2a:47:f1:55:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:55 2026 GMT
            Not After : Jan  5 19:39:55 2027 GMT
        Subject: CN=CED5D9E8B86B4F487AC0E348E4D16D81563B7F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:84:a6:00:f3:5c:65:b5:34:1b:21:d0:72:
                    10:eb:fd:1c:e5:89:01:da:60:c3:db:6a:12:ed:8a:
                    8d:3b:96:ae:b9:a1:96:ef:70:53:cc:5b:b7:9f:61:
                    09:9b:82:c0:65:bb:bd:b0:08:7b:02:02:e4:c0:8a:
                    38:bb:d2:b7:1e:b9:60:02:41:b4:5d:0d:53:59:65:
                    b5:9b:9d:57:93:7e:01:a4:61:6c:f8:af:8d:fb:fa:
                    dc:55:1e:06:20:ed:24:3b:86:cd:c9:73:f1:da:6b:
                    21:9f:e2:1a:a6:ba:0f:36:b5:de:88:05:9f:e2:f0:
                    73:b0:bd:0f:07:71:92:93:fb:6e:92:e9:e8:91:8e:
                    87:21:90:a6:22:f3:05:5c:bd:8f:1f:f1:00:ac:59:
                    1d:ad:fe:62:a2:25:d0:16:d1:b4:83:77:d1:e4:82:
                    d9:eb:52:cc:0f:60:82:67:21:3d:72:73:12:19:9a:
                    9f:73:79:bd:d8:ba:51:67:0d:04:dd:d6:dd:b7:ea:
                    38:03:02:52:b3:01:28:62:3e:7c:97:ef:bb:5d:13:
                    77:41:3f:3a:10:dc:0c:88:f9:26:46:52:a9:58:cd:
                    21:17:9a:b6:a5:77:cf:b0:24:82:f0:51:65:95:6a:
                    16:91:7c:40:d7:a4:bc:b1:e7:02:ca:72:db:ea:e7:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:D9:E8:B8:6B:4F:48:7A:C0:E3:48:E4:D1:6D:81:56:3B:7F:00
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e362e3134342e302f32302d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:8e:d7:18:a9:63:50:4b:9b:4a:e9:45:43:72:5a:a6:ca:
         e6:9b:49:58:1a:a7:9b:d5:13:cb:97:49:b8:6c:70:40:5f:ed:
         da:68:76:f6:38:f5:85:5e:26:58:d0:d6:47:d0:c3:07:7b:d6:
         2f:89:6d:16:9d:78:37:51:62:47:b8:a1:c3:37:cf:46:a9:04:
         62:09:2a:c7:a8:8b:1d:26:e8:0a:99:ac:0e:b8:df:f9:c2:96:
         59:02:d8:79:8d:2c:90:8e:3a:0c:1c:11:62:73:30:7b:a8:44:
         16:96:a3:dd:31:f5:60:61:d4:46:b2:17:76:60:d6:1a:39:cc:
         3f:21:a0:0c:fc:a3:49:fa:0c:8d:61:f8:72:97:40:96:25:2c:
         6f:89:d7:d7:04:5d:c0:ba:f8:c5:38:e4:ad:e2:95:d2:cd:94:
         34:5f:8a:ba:ad:28:e0:96:a0:a6:58:ec:b0:92:ee:0f:16:fb:
         23:c0:00:e0:f3:a7:20:aa:ef:0f:70:d2:f6:48:a8:3b:76:95:
         ee:c5:26:38:bc:43:75:c4:ad:54:cd:e1:77:3b:da:87:8d:b3:
         bc:20:43:42:93:b7:68:52:96:3d:e3:25:99:31:8e:70:63:75:
         d9:ef:a3:bb:ee:41:a0:70:6f:0f:f1:0d:ab:bb:0f:56:44:72:
         4a:24:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:42 2026 by rpki-client