This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa
File:                     3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa (raw, json)
Hash identifier:          v1zCx+LPlJScAnFwaaadFzNZIuJxBhOApnlglGuBhDM=
Subject key identifier:   79:10:26:CF:4E:F7:E8:8C:0C:A5:48:7D:C1:54:05:86:8C:94:9F:D0
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       54A2040C4CC771BED0644061F8CB68F5063A296F
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa
Signing time:             Tue 06 Jan 2026 20:56:48 +0000
ROA not before:           Tue 06 Jan 2026 20:51:48 +0000
ROA not after:            Tue 05 Jan 2027 20:56:48 +0000
asID:                     28015
IP address blocks:        190.124.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a2:04:0c:4c:c7:71:be:d0:64:40:61:f8:cb:68:f5:06:3a:29:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Jan  6 20:51:48 2026 GMT
            Not After : Jan  5 20:56:48 2027 GMT
        Subject: CN=791026CF4EF7E88C0CA5487DC15405868C949FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:bf:37:9b:3c:61:ad:27:59:91:96:8f:2e:
                    a5:ac:08:a2:2f:f1:fb:74:d7:e0:49:3e:c2:d5:9d:
                    75:7e:6f:7f:a3:1c:be:ad:3d:a1:c7:d2:7a:73:71:
                    f3:15:ad:26:3b:1c:c1:f4:60:90:15:23:e9:94:39:
                    30:f2:c1:8a:ac:e1:8d:2c:98:01:21:81:4d:fc:77:
                    0b:85:40:99:ef:41:aa:a1:87:ed:55:66:f3:36:d6:
                    46:8e:85:80:f3:de:8e:15:97:ed:8d:34:1c:70:ac:
                    61:d0:83:17:2a:2b:0d:2b:d9:5e:fc:65:1c:5b:49:
                    26:a8:27:cf:e2:d8:c1:fd:6e:bb:c7:51:d8:4f:c5:
                    72:53:66:c0:76:0a:7a:07:24:29:09:4d:9b:c1:04:
                    ed:23:2d:5b:9b:e8:22:39:ae:ae:d5:a0:f1:e3:13:
                    80:d2:9b:f9:e5:01:81:fb:65:7a:e2:0e:b1:a0:bd:
                    80:43:cf:30:ef:45:f4:13:38:ba:ea:65:1e:53:1a:
                    6c:55:f7:5d:ea:a1:aa:15:e7:53:e0:0a:45:bd:01:
                    48:44:4c:43:e3:8d:49:c7:8a:38:f1:d5:0e:62:79:
                    8b:90:85:d9:cc:dc:5b:e6:f9:28:2c:3f:78:d2:2c:
                    a5:f1:49:6a:cf:54:62:e7:03:c9:88:95:01:0d:c4:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:26:CF:4E:F7:E8:8C:0C:A5:48:7D:C1:54:05:86:8C:94:9F:D0
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3135362e302f32322d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:f4:f5:d4:21:c8:19:02:02:6d:b9:ea:cc:38:df:51:14:
         41:d7:00:8e:65:d7:c5:36:97:25:87:2f:c2:34:0d:75:36:10:
         aa:ac:47:67:63:8a:56:0f:ab:dd:d7:cf:be:aa:59:cc:8b:30:
         d9:b2:12:a1:28:6e:80:04:37:0f:28:7f:b1:39:12:08:38:f0:
         20:72:ea:fb:88:9b:10:f4:62:b1:8c:ff:11:9c:f8:de:20:57:
         f0:f9:52:e0:52:cf:0a:3d:7a:29:06:56:7d:73:cd:92:7b:33:
         54:08:82:6e:03:57:6c:1d:3a:e9:48:f9:5b:26:91:a7:3e:ed:
         3a:d4:3e:44:64:5f:70:b4:95:dd:61:f0:26:5c:c5:03:04:ee:
         0c:b9:be:0a:b8:57:ca:9b:53:7e:a2:0d:34:5e:45:1a:59:78:
         7e:9d:a2:a6:49:c2:66:9e:15:7d:e0:3e:7e:bd:22:63:10:97:
         6f:40:bf:65:0d:fb:e4:cb:2f:2e:bf:d9:5d:91:c0:f1:dd:7e:
         8b:f3:c9:9b:77:1e:4f:97:e2:b7:ee:a3:ac:2d:c5:f0:aa:66:
         eb:2a:bc:d7:a2:53:b1:e0:29:5c:01:f6:39:6c:b9:bb:88:2f:
         29:26:2d:62:9e:e4:0e:8c:26:06:f3:ea:91:14:7d:74:84:e8:
         c6:0a:65:ee
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVKIEDEzHcb7QZEBh+Mto9QY6KW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDMTZBRDRGODJFNzJEOTI4N0E1RDRFQjk5NzY4QjBD
NDFDODA2MTAeFw0yNjAxMDYyMDUxNDhaFw0yNzAxMDUyMDU2NDhaMDMxMTAvBgNV
BAMTKDc5MTAyNkNGNEVGN0U4OEMwQ0E1NDg3REMxNTQwNTg2OEM5NDlGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMb83mzxhrSdZkZaPLqWsCKIv
8ft01+BJPsLVnXV+b3+jHL6tPaHH0npzcfMVrSY7HMH0YJAVI+mUOTDywYqs4Y0s
mAEhgU38dwuFQJnvQaqhh+1VZvM21kaOhYDz3o4Vl+2NNBxwrGHQgxcqKw0r2V78
ZRxbSSaoJ8/i2MH9brvHUdhPxXJTZsB2CnoHJCkJTZvBBO0jLVub6CI5rq7VoPHj
E4DSm/nlAYH7ZXriDrGgvYBDzzDvRfQTOLrqZR5TGmxV913qoaoV51PgCkW9AUhE
TEPjjUnHijjx1Q5ieYuQhdnM3Fvm+SgsP3jSLKXxSWrPVGLnA8mIlQENxBUnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeRAmz0736IwMpUh9wVQFhoyUn9AwHwYDVR0j
BBgwFoAUtsFq1Pguctkoel1OuZdosMQcgGEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EM0Q1MDBERkQ3QkIxQTZBMTMyNjQ0RDkzQ0ZERjUzMTc0
Qjg0MzVBNjQwRjhCQTc0MDJFNkU2RTEzRkIwNTM2LzAvQjZDMTZBRDRGODJFNzJE
OTI4N0E1RDRFQjk5NzY4QjBDNDFDODA2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkMxNkFENEY4MkU3MkQ5Mjg3
QTVENEVCOTk3NjhCMEM0MUM4MDYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDNENTAwREZEN0JCMUE2QTEzMjY0NEQ5M0NGREY1MzE3NEI4NDM1QTY0
MEY4QkE3NDAyRTZFNkUxM0ZCMDUzNi8wLzMxMzkzMDJlMzEzMjM0MmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzAzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnyc
MA0GCSqGSIb3DQEBCwUAA4IBAQA30PT11CHIGQICbbnqzDjfURRB1wCOZdfFNpcl
hy/CNA11NhCqrEdnY4pWD6vd18++qlnMizDZshKhKG6ABDcPKH+xORIIOPAgcur7
iJsQ9GKxjP8RnPjeIFfw+VLgUs8KPXopBlZ9c82SezNUCIJuA1dsHTrpSPlbJpGn
Pu061D5EZF9wtJXdYfAmXMUDBO4Mub4KuFfKm1N+og00XkUaWXh+naKmScJmnhV9
4D5+vSJjEJdvQL9lDfvkyy8uv9ldkcDx3X6L88mbdx5Pl+K37qOsLcXwqmbrKrzX
olOx4ClcAfY5bLm7iC8pJi1inuQOjCYG8+qRFH10hOjGCmXu
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:01 2026 by rpki-client