This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
File:                     3139302e39342e33322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          iBz32bfkFO2tMXN3y8jyGPvyqInQ8zYGGqDduRABmYo=
Subject key identifier:   8A:01:4F:46:82:91:5E:E2:6A:9A:88:65:E8:22:2F:00:75:FD:38:BF
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       26048F7CE6D419A76CBAAFD8F0E6638515385B64
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:55 +0000
ROA not before:           Tue 06 Jan 2026 19:34:55 +0000
ROA not after:            Tue 05 Jan 2027 19:39:55 +0000
asID:                     28118
IP address blocks:        190.94.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:04:8f:7c:e6:d4:19:a7:6c:ba:af:d8:f0:e6:63:85:15:38:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:55 2026 GMT
            Not After : Jan  5 19:39:55 2027 GMT
        Subject: CN=8A014F4682915EE26A9A8865E8222F0075FD38BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:52:c3:91:35:2f:1c:55:22:be:f5:cb:be:
                    ae:d1:23:bb:92:e8:81:5c:1b:d5:be:52:ae:3a:82:
                    35:0f:1f:e1:a9:09:b2:5b:60:ff:ee:e5:20:fd:b5:
                    72:cd:1e:93:81:c2:26:c9:91:1f:1b:70:65:b6:7b:
                    01:9e:87:8e:85:d5:94:88:b8:8f:29:19:2d:e7:23:
                    3e:86:6c:bb:fc:47:9c:96:43:9c:9e:15:0b:29:30:
                    23:3c:4e:99:f3:42:ab:f2:99:fc:83:c6:49:9e:92:
                    be:16:96:be:d3:aa:05:11:bf:91:b3:b0:f5:02:26:
                    52:94:d9:91:04:6f:25:af:db:87:66:e0:65:6c:a1:
                    4b:3c:42:91:6f:8d:64:09:6f:fa:6e:04:3b:85:23:
                    88:01:1f:d8:96:68:8f:80:5a:2e:7d:64:8c:7a:4d:
                    f0:6d:54:9b:4f:a1:1c:78:ed:0c:56:28:27:cc:0e:
                    cd:bf:54:1e:66:a6:06:4c:e4:17:ae:c2:cd:63:af:
                    d1:45:29:37:d6:3a:74:0e:5c:24:8c:8a:53:55:f5:
                    d9:a7:96:e0:ba:17:f8:f9:cc:8c:3d:2d:8f:76:7e:
                    f1:4c:0d:9a:4f:bb:a8:2c:42:19:72:95:8a:69:5b:
                    0c:f6:f9:c5:48:9c:49:8f:66:d9:51:c3:70:24:5c:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:4F:46:82:91:5E:E2:6A:9A:88:65:E8:22:2F:00:75:FD:38:BF
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:f5:a0:21:f2:08:a5:ee:97:53:83:1e:e1:0a:9a:b7:0f:
         9d:43:bb:28:92:91:bc:df:72:5a:6d:dd:06:94:de:79:7d:da:
         8c:b4:d2:5f:02:d5:6d:b8:89:cb:14:e9:ab:bb:f5:bc:a6:a3:
         4f:7d:e7:d0:3c:6c:75:46:14:6e:82:af:c4:6c:32:be:92:81:
         70:1b:40:a0:17:38:b4:fc:c3:8b:27:f3:61:54:17:4f:42:0c:
         49:22:bc:f7:8d:84:a3:d6:a2:a8:da:71:96:43:c0:91:80:10:
         ef:10:a0:73:cf:15:b3:b2:f3:fd:d8:2d:cd:e4:5e:54:2b:54:
         1c:2e:c3:b2:3c:49:82:59:b8:3b:01:6e:09:46:cc:29:cd:5f:
         20:59:8c:ec:bf:01:bc:43:7d:86:07:28:b6:11:65:f3:14:56:
         89:75:fa:04:b7:46:bf:13:2a:ad:db:55:67:51:13:fc:96:7f:
         a0:bd:e9:8e:62:51:61:8a:2e:1c:51:02:a5:c3:c9:8d:32:8b:
         7f:09:ac:e2:3e:45:c2:f9:dd:7b:c8:b5:73:9a:13:52:6c:f7:
         08:f5:2a:e4:ef:b3:d1:e4:50:b3:86:f2:42:be:82:6a:94:9a:
         cb:b3:35:3e:bd:2b:ab:eb:0e:c6:71:a9:db:a7:0e:cb:5b:17:
         ae:cf:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:39 2026 by rpki-client