This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa
File:                     3139302e3132342e32372e302f32342d3234203d3e203532333034.roa (raw, json)
Hash identifier:          2DPvqa/rYJID9srdNFLQNdiO44rzbu7KsD/BK9UWIhE=
Subject key identifier:   FD:57:D7:4C:88:73:EF:29:73:28:CD:81:BB:8D:05:B0:41:AE:E6:11
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       6952764A8A662137CBFF75226AC404D00F1CCF0E
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa
Signing time:             Tue 06 Jan 2026 20:56:29 +0000
ROA not before:           Tue 06 Jan 2026 20:51:29 +0000
ROA not after:            Tue 05 Jan 2027 20:56:29 +0000
asID:                     52304
IP address blocks:        190.124.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:76:4a:8a:66:21:37:cb:ff:75:22:6a:c4:04:d0:0f:1c:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Jan  6 20:51:29 2026 GMT
            Not After : Jan  5 20:56:29 2027 GMT
        Subject: CN=FD57D74C8873EF297328CD81BB8D05B041AEE611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:07:76:ba:ff:e9:a3:f0:2d:69:64:0d:b7:
                    14:7e:a5:f3:96:88:f4:d9:8b:90:31:34:78:6f:1c:
                    1a:86:54:be:3a:d6:3e:e5:35:f8:08:98:1d:b4:62:
                    cf:1d:92:be:ef:85:58:b1:46:8e:47:0f:fc:f8:cf:
                    e2:e0:ac:a1:1a:02:c0:4f:80:9a:af:5f:2b:fd:4d:
                    36:a0:87:2a:56:90:a4:e4:05:a4:14:fa:59:59:12:
                    55:50:ce:a9:92:65:cf:11:f5:db:7c:fd:f3:51:95:
                    9e:4d:05:de:ed:46:60:52:6b:be:4a:9a:74:a8:64:
                    27:b0:96:a2:6c:b5:f2:50:e8:59:66:85:c2:7f:57:
                    6b:8b:02:2b:4e:79:48:28:46:b6:26:ff:21:d7:fd:
                    f4:da:59:7d:15:3c:87:d4:13:e0:76:09:bf:83:bb:
                    e1:85:6f:dc:0b:5b:f9:b7:51:99:c0:3b:e5:18:c1:
                    5e:e8:91:b8:e9:4e:ae:6e:3f:1d:fe:12:90:58:42:
                    73:49:3b:be:1e:a3:3c:09:b6:80:43:85:41:01:69:
                    77:29:56:1a:61:e3:76:85:bc:09:57:5a:0a:91:3d:
                    6f:b7:90:78:37:e2:5d:7b:98:00:d6:cf:0d:42:8f:
                    da:87:e0:4d:75:56:7e:d4:ad:b9:b0:0c:56:3f:d7:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:D7:4C:88:73:EF:29:73:28:CD:81:BB:8D:05:B0:41:AE:E6:11
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32372e302f32342d3234203d3e203532333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:07:84:30:98:2c:62:97:29:38:f6:7b:dd:c3:44:fa:b7:60:
         9a:d8:77:b7:ce:2a:54:b2:a5:52:1c:5d:4e:0e:86:a4:90:3b:
         68:ac:8d:2f:7e:7a:af:fa:50:86:73:3c:67:44:1b:45:2f:b2:
         be:05:e1:79:5f:bd:2c:4f:f8:41:b9:ff:54:bc:8c:09:fe:2d:
         f1:53:b1:f8:00:33:61:eb:ac:23:18:5f:6c:92:7c:94:a1:6b:
         21:07:e3:98:b3:5d:de:07:a3:fb:67:77:df:d4:16:12:09:f0:
         3d:e8:86:e0:13:7a:79:8c:99:8d:59:f8:89:ad:aa:2a:70:12:
         d6:39:95:35:87:81:85:40:5c:04:83:a0:19:02:32:9a:98:8e:
         4e:d7:76:c1:2b:28:dc:50:1c:f4:7c:4a:aa:96:b7:d3:01:57:
         6a:da:6b:f0:98:10:35:37:ed:7b:1b:18:3d:49:f0:49:d1:32:
         74:ba:03:6e:c4:84:73:2b:d9:ed:95:a3:c9:84:1d:0f:a1:3e:
         82:96:ea:de:a5:74:e4:84:26:e7:0f:1c:99:77:20:85:63:43:
         04:5f:3c:52:01:35:cb:3d:b1:67:2b:44:ee:65:73:48:94:76:
         6e:0f:15:77:f9:80:2e:2d:1b:fe:81:18:b6:4d:bd:c1:cc:33:
         d3:22:33:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaVJ2SopmITfL/3UiasQE0A8czw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RkMyNjQ2QTlGQzg5MjlCNjk0QUFBRTA0RDUyMDIz
QUE0NjgwQzAeFw0yNjAxMDYyMDUxMjlaFw0yNzAxMDUyMDU2MjlaMDMxMTAvBgNV
BAMTKEZENTdENzRDODg3M0VGMjk3MzI4Q0Q4MUJCOEQwNUIwNDFBRUU2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xAd2uv/po/AtaWQNtxR+pfOW
iPTZi5AxNHhvHBqGVL461j7lNfgImB20Ys8dkr7vhVixRo5HD/z4z+LgrKEaAsBP
gJqvXyv9TTaghypWkKTkBaQU+llZElVQzqmSZc8R9dt8/fNRlZ5NBd7tRmBSa75K
mnSoZCewlqJstfJQ6FlmhcJ/V2uLAitOeUgoRrYm/yHX/fTaWX0VPIfUE+B2Cb+D
u+GFb9wLW/m3UZnAO+UYwV7okbjpTq5uPx3+EpBYQnNJO74eozwJtoBDhUEBaXcp
Vhph43aFvAlXWgqRPW+3kHg34l17mADWzw1Cj9qH4E11Vn7UrbmwDFY/1wTlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU/VfXTIhz7ylzKM2Bu40FsEGu5hEwHwYDVR0j
BBgwFoAU41/CZGqfyJKbaUqq4E1SAjqkaAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDBFMDU0NjIzQUM5MDQzQzBFMjk5QzJDOTBCMTQzODAz
QkQ4OTEyNUIwRTg2Mzg1NUM0OUMzQjczRjdCQUExLzAvRTM1RkMyNjQ2QTlGQzg5
MjlCNjk0QUFBRTA0RDUyMDIzQUE0NjgwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVGQzI2NDZBOUZDODkyOUI2
OTRBQUFFMDRENTIwMjNBQTQ2ODBDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QwRTA1NDYyM0FDOTA0M0MwRTI5OUMyQzkwQjE0MzgwM0JEODkxMjVC
MEU4NjM4NTVDNDlDM0I3M0Y3QkFBMS8wLzMxMzkzMDJlMzEzMjM0MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL58GzAN
BgkqhkiG9w0BAQsFAAOCAQEAVweEMJgsYpcpOPZ73cNE+rdgmth3t84qVLKlUhxd
Tg6GpJA7aKyNL356r/pQhnM8Z0QbRS+yvgXheV+9LE/4Qbn/VLyMCf4t8VOx+AAz
YeusIxhfbJJ8lKFrIQfjmLNd3gej+2d339QWEgnwPeiG4BN6eYyZjVn4ia2qKnAS
1jmVNYeBhUBcBIOgGQIympiOTtd2wSso3FAc9HxKqpa30wFXatpr8JgQNTftexsY
PUnwSdEydLoDbsSEcyvZ7ZWjyYQdD6E+gpbq3qV05IQm5w8cmXcghWNDBF88UgE1
yz2xZytE7mVzSJR2bg8Vd/mALi0b/oEYtk29wcwz0yIz/w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:23 2026 by rpki-client