This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
File:                     3139302e3132342e32342e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier:          OHZbnOYCfNKY5Awi3g6GcQOi4N9Hb7SBY1tSSOZL1X8=
Subject key identifier:   E2:DE:81:A3:EE:30:F8:02:C1:FC:27:BD:98:F0:ED:8D:5C:02:1E:2A
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       40AB40AFFCB4ECADB0BD4DDE134225D4F4C06559
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
Signing time:             Tue 06 Jan 2026 20:56:31 +0000
ROA not before:           Tue 06 Jan 2026 20:51:31 +0000
ROA not after:            Tue 05 Jan 2027 20:56:31 +0000
asID:                     27678
IP address blocks:        190.124.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ab:40:af:fc:b4:ec:ad:b0:bd:4d:de:13:42:25:d4:f4:c0:65:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Jan  6 20:51:31 2026 GMT
            Not After : Jan  5 20:56:31 2027 GMT
        Subject: CN=E2DE81A3EE30F802C1FC27BD98F0ED8D5C021E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:03:ae:37:f6:4b:e2:30:55:e6:da:b5:6a:
                    35:6b:40:a8:14:e5:87:55:ef:b5:ad:ea:99:4e:7c:
                    87:b4:f6:9b:e5:99:db:8f:d1:1e:f9:86:8f:79:b5:
                    be:c6:55:12:4d:b7:a1:7b:69:99:e1:d4:94:ee:4e:
                    30:72:d8:9c:b1:27:de:6f:c9:2a:5a:d2:dd:d0:4f:
                    50:15:14:f7:7e:0e:b8:21:31:a5:f3:3c:f9:b5:29:
                    76:ac:2f:8c:9f:7e:0a:5b:ba:f4:5b:9b:b4:52:bc:
                    f9:a9:ad:0f:f3:7c:2a:34:63:1d:d7:b0:d3:03:3c:
                    83:7a:4c:0c:65:cc:77:aa:9f:20:ff:89:f5:41:e3:
                    4b:52:e0:fb:81:9e:29:4e:15:fe:c9:26:0b:d8:e2:
                    25:01:35:88:18:e2:68:05:94:1d:9d:8e:aa:0d:90:
                    c5:9f:fa:de:31:bb:39:bb:54:d9:fb:33:6f:e0:c6:
                    f0:85:74:25:68:67:27:ac:61:b0:96:98:f0:68:a1:
                    00:bc:07:ab:6e:00:5a:3c:85:62:75:96:f0:cc:4b:
                    ce:28:14:81:bc:de:6c:38:27:2d:36:e8:e7:f5:83:
                    cb:b2:d3:94:fa:cc:e8:4c:ec:5a:a6:98:29:24:7e:
                    27:4c:55:08:14:f1:e4:6a:90:ee:1c:4b:72:de:52:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DE:81:A3:EE:30:F8:02:C1:FC:27:BD:98:F0:ED:8D:5C:02:1E:2A
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:6f:01:6c:b0:33:2f:36:de:96:f1:5f:f2:ab:ec:7f:6a:28:
         c6:a4:4d:8f:64:92:78:3b:e2:f9:27:9d:58:c9:05:03:11:5b:
         8b:18:56:d4:49:2c:56:49:e3:6a:2b:62:b7:99:ed:52:20:01:
         b7:43:90:88:29:f2:a1:87:25:e8:a4:bf:5b:5e:35:d1:c9:80:
         fc:1d:14:5e:f8:0d:a8:7e:55:79:67:68:8e:9c:55:0f:f3:be:
         4c:ae:6b:b6:14:8d:e7:a9:ad:88:a5:f8:31:08:53:b5:ca:a5:
         56:04:ab:8f:0d:88:a0:05:0b:28:98:21:c2:bc:89:27:60:25:
         34:42:b5:39:0f:b6:68:ce:0d:64:18:00:ef:b8:37:db:da:fb:
         b4:26:fa:5a:3b:3e:35:b4:af:72:9f:2e:34:c2:50:52:c2:8f:
         04:3c:77:e7:0d:9f:a5:2d:1d:e1:ec:23:11:8a:bf:40:af:a6:
         50:71:99:a5:4a:95:73:22:7d:9c:ea:62:07:fa:76:3d:42:81:
         bf:9f:62:6f:be:3b:06:61:1b:5a:d8:7c:36:72:b9:16:5e:8f:
         22:d6:4f:33:91:1a:23:da:fc:7f:6f:e5:96:41:15:2d:a8:18:
         cb:1c:9e:c7:6d:02:cb:28:b9:5d:58:82:9a:06:eb:e5:d6:c3:
         94:98:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:00 2026 by rpki-client