This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa
File:                     3139302e31352e3132382e302f32302d3234203d3e203237383431.roa (raw, json)
Hash identifier:          vWawEWbLiZiszSvHWZRgbs3vsznPGiqhsxusTgJA60g=
Subject key identifier:   9E:D8:01:AB:28:DC:A4:A6:3C:CB:16:1A:05:70:40:3B:76:84:4C:4E
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       7E23C38F5910C0A191E2D08CFAE4CEA2CB2D3FFD
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa
Signing time:             Tue 06 Jan 2026 19:12:38 +0000
ROA not before:           Tue 06 Jan 2026 19:07:38 +0000
ROA not after:            Tue 05 Jan 2027 19:12:38 +0000
asID:                     27841
IP address blocks:        190.15.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:23:c3:8f:59:10:c0:a1:91:e2:d0:8c:fa:e4:ce:a2:cb:2d:3f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jan  6 19:07:38 2026 GMT
            Not After : Jan  5 19:12:38 2027 GMT
        Subject: CN=9ED801AB28DCA4A63CCB161A0570403B76844C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:c8:01:99:d2:00:4a:dc:25:1f:01:09:7f:
                    b6:b0:09:da:cf:ef:a3:bf:f6:0a:23:20:0d:81:a4:
                    67:c3:eb:2a:3b:32:37:ff:dc:d4:9a:83:0b:4e:26:
                    f4:95:ca:7a:ba:ac:f0:8e:02:1b:a9:ba:38:c8:8c:
                    cb:06:4d:be:b5:97:60:36:b5:fe:24:d6:47:37:4f:
                    49:6c:97:da:54:84:ae:64:3c:94:c5:7c:0b:2a:84:
                    40:7a:c1:a3:2d:40:f3:55:e4:fd:e5:0f:8d:67:c5:
                    48:04:bf:3c:f4:a3:e4:ab:b9:b9:f1:af:cd:d7:db:
                    ca:02:3a:20:41:b5:6b:9d:c6:64:be:c5:fd:f1:e8:
                    03:9b:f2:50:61:55:a6:d2:2b:c9:d9:25:0c:56:c2:
                    d1:ca:7c:5d:de:6a:1c:47:4d:f1:75:61:0a:29:ab:
                    2c:6a:30:b1:2b:93:74:9e:fd:6a:e8:5f:b1:b3:6b:
                    ab:d8:48:a6:f6:d2:c6:70:3f:5c:fc:13:25:2a:ae:
                    66:24:96:03:19:51:65:8f:c6:7b:96:92:79:e8:5e:
                    b2:a9:2b:f6:e5:1e:d5:06:28:78:9d:99:5f:99:1d:
                    f2:61:18:72:a9:b8:75:e0:4e:d3:0c:fe:0a:a2:a0:
                    fe:62:0d:e4:47:db:86:79:da:36:88:a3:70:ae:6c:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:01:AB:28:DC:A4:A6:3C:CB:16:1A:05:70:40:3B:76:84:4C:4E
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:72:7d:77:88:32:b3:4a:45:70:82:fa:cd:6a:ba:a8:96:
         2f:d7:50:19:c7:ff:5f:26:18:e1:64:ce:51:ff:ef:0a:52:e7:
         39:45:f2:f4:52:7e:af:07:3f:42:97:8a:ad:0a:7b:bd:98:e2:
         8b:fd:3f:89:97:32:ab:d0:5f:48:67:98:42:f3:2c:6c:f9:9e:
         67:ef:4e:21:d7:da:09:d1:1d:8b:d8:d3:80:79:79:08:87:53:
         e7:b6:e4:10:0b:10:f4:0a:9b:3e:13:7b:5a:48:f6:37:50:4e:
         ed:4a:f4:4a:1b:18:30:cc:e4:58:fa:0f:45:66:be:2f:49:c0:
         a7:5a:dc:8d:8d:2d:d6:63:ae:b9:30:0d:aa:96:ff:36:ad:f7:
         6e:88:1d:cf:3b:30:50:ac:9e:07:d4:b8:f0:1b:98:bf:cf:4a:
         ab:7f:24:b3:c7:79:64:94:12:b8:54:cf:ce:74:9c:8c:94:68:
         aa:3e:f3:05:e8:43:18:7b:ed:b2:6b:8b:72:d6:5c:cd:98:df:
         d0:41:50:82:5e:c2:8a:f0:3e:de:fb:bd:73:23:2f:80:14:91:
         96:77:10:d5:26:b2:d1:9e:3c:b5:d1:79:23:8d:5d:28:94:11:
         43:81:1e:23:ef:42:9d:65:b7:84:16:ec:69:80:02:ce:81:49:
         39:87:82:d5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfiPDj1kQwKGR4tCM+uTOosstP/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3
NDBBOTA4NDAeFw0yNjAxMDYxOTA3MzhaFw0yNzAxMDUxOTEyMzhaMDMxMTAvBgNV
BAMTKDlFRDgwMUFCMjhEQ0E0QTYzQ0NCMTYxQTA1NzA0MDNCNzY4NDRDNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17sgBmdIAStwlHwEJf7awCdrP
76O/9gojIA2BpGfD6yo7Mjf/3NSagwtOJvSVynq6rPCOAhupujjIjMsGTb61l2A2
tf4k1kc3T0lsl9pUhK5kPJTFfAsqhEB6waMtQPNV5P3lD41nxUgEvzz0o+Srubnx
r83X28oCOiBBtWudxmS+xf3x6AOb8lBhVabSK8nZJQxWwtHKfF3eahxHTfF1YQop
qyxqMLErk3Se/WroX7Gza6vYSKb20sZwP1z8EyUqrmYklgMZUWWPxnuWknnoXrKp
K/blHtUGKHidmV+ZHfJhGHKpuHXgTtMM/gqioP5iDeRH24Z52jaIo3CubKHtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUntgBqyjcpKY8yxYaBXBAO3aETE4wHwYDVR0j
BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4
MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4
NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5
Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz
MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMxMzkzMDJlMzEzNTJlMzEzMjM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNzM4MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL4PgDAN
BgkqhkiG9w0BAQsFAAOCAQEAl+xyfXeIMrNKRXCC+s1quqiWL9dQGcf/XyYY4WTO
Uf/vClLnOUXy9FJ+rwc/QpeKrQp7vZjii/0/iZcyq9BfSGeYQvMsbPmeZ+9OIdfa
CdEdi9jTgHl5CIdT57bkEAsQ9AqbPhN7Wkj2N1BO7Ur0ShsYMMzkWPoPRWa+L0nA
p1rcjY0t1mOuuTANqpb/Nq33bogdzzswUKyeB9S48BuYv89Kq38ks8d5ZJQSuFTP
znScjJRoqj7zBehDGHvtsmuLctZczZjf0EFQgl7CivA+3vu9cyMvgBSRlncQ1Say
0Z48tdF5I41dKJQRQ4EeI+9CnWW3hBbsaYACzoFJOYeC1Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:01 2026 by rpki-client