This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa
File:                     3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa (raw, json)
Hash identifier:          nTzWSPXjwtuEJ0ZuLZGnrjWSc/UGwcBNjzk8qwW0xQM=
Subject key identifier:   02:15:1E:2D:6B:C4:F7:E6:3E:F0:AD:90:37:6F:85:59:0E:42:BA:BB
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       5AE058A6DD9BCB67D4852DAD0BF4385CC2E6FF09
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa
Signing time:             Tue 06 Jan 2026 20:55:09 +0000
ROA not before:           Tue 06 Jan 2026 20:50:09 +0000
ROA not after:            Tue 05 Jan 2027 20:55:09 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e0:58:a6:dd:9b:cb:67:d4:85:2d:ad:0b:f4:38:5c:c2:e6:ff:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:09 2026 GMT
            Not After : Jan  5 20:55:09 2027 GMT
        Subject: CN=02151E2D6BC4F7E63EF0AD90376F85590E42BABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:82:29:3d:92:02:12:42:a5:07:29:6d:34:
                    0f:24:49:75:ce:21:13:e5:81:27:00:fe:bd:de:64:
                    9d:8b:5e:cd:93:38:3d:1e:2f:96:0d:14:29:a5:db:
                    32:4f:20:76:fe:cc:ad:aa:5b:f3:69:b8:aa:7c:54:
                    a6:20:c2:e5:84:d0:c6:cd:ce:04:4e:dc:ad:8f:0e:
                    9a:b3:34:9f:d7:72:43:20:57:ac:df:a8:7b:aa:7f:
                    72:8d:66:b4:d5:45:50:cc:b5:38:49:d7:5b:6b:e2:
                    8f:96:0e:34:1a:54:73:0c:d4:62:17:02:35:b2:48:
                    5a:6a:b7:9c:f9:07:ef:b7:6b:eb:c4:9e:98:ed:da:
                    d1:c2:b6:06:be:b1:6a:83:6e:e1:32:51:36:29:a8:
                    31:12:da:3d:e8:52:e5:c8:00:d6:78:57:6e:d2:04:
                    6c:05:96:4e:f7:2b:1a:a0:81:96:45:dc:33:7b:8a:
                    57:1e:03:62:b3:94:d0:81:c1:30:cf:a9:61:cd:ef:
                    b2:f1:35:76:05:f1:04:1f:fc:b8:8e:6c:ee:33:dd:
                    d3:7b:ed:f2:75:c0:57:e7:7b:31:46:7c:fc:1c:72:
                    7b:a4:f8:3d:58:c0:92:36:5a:15:08:cd:95:6f:46:
                    fb:93:b9:45:1a:f3:df:1b:8b:f9:2c:d3:57:d5:30:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:15:1E:2D:6B:C4:F7:E6:3E:F0:AD:90:37:6F:85:59:0E:42:BA:BB
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:88:dc:53:6b:46:93:78:a8:39:2f:d9:b2:9a:0f:0a:68:
         41:d6:1f:3a:a4:6f:88:97:14:56:4b:8f:d3:c8:7b:7d:74:f2:
         40:12:d6:e4:27:c2:e8:95:d3:15:53:53:aa:cd:fe:e1:32:56:
         61:3d:e7:89:02:60:1a:b1:f7:0a:78:d1:e5:c2:47:70:ba:3f:
         ee:11:fd:ef:82:61:4b:70:70:cd:83:73:dc:a6:a3:88:31:5c:
         6e:3f:47:3f:13:a4:60:8d:15:3d:8b:e9:36:14:c4:36:e3:6b:
         74:f9:a3:69:da:c1:6c:82:16:3f:7a:af:25:a1:75:a1:5a:a3:
         b9:37:4a:ba:f3:d9:ad:0d:8a:47:59:2c:2c:da:57:a9:e7:11:
         28:ed:4a:16:d4:fc:ac:42:7e:db:6f:63:e0:71:d7:80:94:43:
         38:71:a7:8a:de:06:f5:04:7c:0a:9e:a3:6c:91:00:cd:f7:c7:
         36:4e:87:5e:d0:97:4c:0c:31:1d:93:f9:a9:ec:57:47:93:d5:
         b7:72:0c:56:a3:49:c9:47:39:63:d0:5f:26:97:89:a7:26:58:
         76:aa:f8:99:ed:0b:3d:f3:f3:2a:ff:f3:b5:07:87:7b:f9:33:
         b1:6f:25:13:c7:6b:1c:b8:6f:de:c6:95:1e:d2:c6:94:15:2b:
         0d:02:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:54 2026 by rpki-client