This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
File:                     3139302e372e3136302e302f32302d3230203d3e203237393038.roa (raw, json)
Hash identifier:          s953Iau+LEUEMVS5+HKJ/tmf9MsBiJseXOeY6aldEGw=
Subject key identifier:   F1:DE:A8:B2:CE:FD:18:7A:C8:EC:49:19:D3:E5:7A:A1:DC:84:DC:DE
Certificate issuer:       /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Certificate serial:       3DE5094D731160A1DBAB0BB023E5FB9F52A7B820
Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
Signing time:             Tue 06 Jan 2026 19:04:50 +0000
ROA not before:           Tue 06 Jan 2026 18:59:50 +0000
ROA not after:            Tue 05 Jan 2027 19:04:50 +0000
asID:                     27908
IP address blocks:        190.7.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:09:4d:73:11:60:a1:db:ab:0b:b0:23:e5:fb:9f:52:a7:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
        Validity
            Not Before: Jan  6 18:59:50 2026 GMT
            Not After : Jan  5 19:04:50 2027 GMT
        Subject: CN=F1DEA8B2CEFD187AC8EC4919D3E57AA1DC84DCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:83:e6:6e:da:ae:12:cf:7a:cd:f3:41:11:
                    60:e8:99:2d:b5:0a:9c:9d:21:f7:30:84:df:97:42:
                    37:05:65:2f:73:62:7c:57:45:89:40:b8:1f:76:0f:
                    cc:26:2b:45:ed:6c:01:77:43:aa:cd:b3:ad:79:8a:
                    e3:30:08:a3:23:d5:b8:5b:7d:95:55:37:5d:e0:a0:
                    2e:fc:03:03:9a:3a:74:8f:f1:f6:ff:b4:15:55:e0:
                    66:be:2d:58:c3:dd:8e:76:08:49:dd:da:22:1b:cd:
                    14:67:71:6f:d9:2f:05:12:42:d4:af:ce:c6:bf:d6:
                    4b:3a:81:9a:76:66:58:02:79:9a:ea:18:80:89:f5:
                    10:6f:78:58:70:28:3c:8c:ab:dd:5a:61:c4:53:4b:
                    e7:a6:eb:eb:5a:e4:b3:d5:c1:35:29:b2:77:76:0a:
                    1c:88:67:6d:93:82:84:be:66:a3:22:c1:16:1c:78:
                    df:8f:85:2e:6a:53:0c:53:a7:27:50:ab:ea:69:e3:
                    49:f9:62:49:ce:7e:db:59:e9:ce:6c:55:7c:c4:fa:
                    07:a1:ab:58:59:b7:1b:5d:19:e3:2a:41:f1:e1:fe:
                    fd:81:19:85:06:6f:21:fc:e8:e0:59:bb:de:ea:d4:
                    04:79:e0:bc:67:b7:7b:5a:39:1c:6c:82:fa:c2:13:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:A8:B2:CE:FD:18:7A:C8:EC:49:19:D3:E5:7A:A1:DC:84:DC:DE
            X509v3 Authority Key Identifier:
                keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:04:3a:9e:ce:5b:cd:35:df:65:b5:44:07:39:a3:1b:50:
         d3:e0:bc:fc:f4:6d:be:ee:f7:6b:a6:41:96:d0:d5:d5:5c:40:
         dd:77:16:d6:13:0b:33:3e:11:19:b9:a7:0e:a1:3f:f0:8e:d4:
         a5:db:1e:73:30:6b:3e:97:ad:61:66:34:49:f1:25:c6:67:54:
         62:80:b8:93:a8:f0:dd:fe:18:96:1f:a6:02:90:2a:68:f9:b4:
         15:46:cb:5c:bc:bf:c8:36:09:e6:94:e9:36:f0:02:b0:97:f2:
         0c:95:d3:13:e8:17:30:0b:ea:c3:b8:98:0c:42:84:e1:95:8c:
         22:d8:59:24:d3:a0:61:77:98:bb:6b:b6:ce:83:85:ef:48:e9:
         e8:44:11:f6:0e:2b:d7:f3:09:fd:9b:ec:ea:27:bf:78:e9:a6:
         7b:d8:8d:9c:c4:da:20:dc:64:8d:a1:c5:fb:f4:a7:d5:42:4f:
         04:f5:79:cb:64:93:be:2d:6e:88:21:84:ff:d1:5e:56:2a:c3:
         da:9e:65:62:93:aa:1d:47:df:81:2a:66:54:1e:cc:3e:34:38:
         df:44:9d:17:21:bf:b8:66:9a:99:b9:f4:85:9d:f9:4c:9b:84:
         bc:13:a0:46:67:df:17:cd:e6:22:5c:79:a6:f9:2b:6c:3b:44:
         45:86:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:51 2026 by rpki-client