This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e312e39362e302f31392d3234203d3e203133353835.roa
File:                     3139302e312e39362e302f31392d3234203d3e203133353835.roa (raw, json)
Hash identifier:          CfKyBD6h0N1x5O0hqz99T/Ob9XgSlOAN8B8EpJVDSHo=
Subject key identifier:   E4:32:4E:8B:53:5E:29:7E:D2:D5:00:1D:B2:9C:ED:EF:D2:0C:F5:AF
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       22B4143F824A2D53FCB22DADD8C7AD16D28E5E58
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e312e39362e302f31392d3234203d3e203133353835.roa
Signing time:             Tue 06 Jan 2026 20:53:57 +0000
ROA not before:           Tue 06 Jan 2026 20:48:57 +0000
ROA not after:            Tue 05 Jan 2027 20:53:57 +0000
asID:                     13585
IP address blocks:        190.1.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b4:14:3f:82:4a:2d:53:fc:b2:2d:ad:d8:c7:ad:16:d2:8e:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Jan  6 20:48:57 2026 GMT
            Not After : Jan  5 20:53:57 2027 GMT
        Subject: CN=E4324E8B535E297ED2D5001DB29CEDEFD20CF5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:53:5c:6f:6d:26:d9:00:44:9f:45:29:01:
                    34:17:e2:5a:40:c3:fc:40:14:da:74:f7:b8:b2:67:
                    f0:58:e0:97:31:51:55:18:03:7e:b2:da:7e:69:d9:
                    33:95:be:0a:f2:94:7d:f1:98:78:51:3a:92:1c:69:
                    21:d4:0f:95:14:c5:24:98:f1:4d:31:81:cd:4a:f5:
                    48:17:9e:45:b5:09:8d:22:83:d0:6f:cd:cc:04:17:
                    f0:c3:c9:a8:b2:1f:00:dd:05:72:2d:c0:ea:01:9b:
                    78:e1:ef:5c:61:e4:9b:09:23:60:ab:2c:57:05:be:
                    5f:9d:23:a7:9a:36:fb:59:14:8f:2c:2b:b9:0a:95:
                    79:b4:2b:81:bc:87:95:96:be:27:08:64:f3:08:62:
                    d3:c7:c1:71:b5:6e:29:96:fd:36:2b:bb:1a:7e:f5:
                    8b:18:0d:12:d9:2a:5b:aa:94:10:b5:a0:2e:fd:7f:
                    42:cd:c6:ca:fc:6d:a5:e0:e9:5a:8e:88:ba:f0:51:
                    ea:de:0a:5e:2b:06:57:57:15:bf:12:de:33:97:c6:
                    51:24:ca:27:1c:f5:7a:e8:4e:a1:84:b5:b6:24:b3:
                    9c:e7:50:fe:e9:c4:5e:a7:0c:0d:8a:56:ef:6c:77:
                    18:98:84:97:64:f5:93:bd:0f:b1:03:95:1a:59:ad:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:4E:8B:53:5E:29:7E:D2:D5:00:1D:B2:9C:ED:EF:D2:0C:F5:AF
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e312e39362e302f31392d3234203d3e203133353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:82:8c:8e:86:c6:8f:5a:55:44:1c:11:e8:a8:f7:2c:2b:
         b3:3e:17:81:d1:b7:27:85:76:50:97:e4:95:3c:82:a5:f6:bc:
         fa:c9:db:5e:ca:96:64:ab:fd:c2:63:2d:1d:28:7a:b8:20:d9:
         ef:18:0e:11:e7:db:cd:97:85:45:5b:b0:34:29:5f:d3:6a:a5:
         2d:f0:a8:24:21:21:9e:47:24:1b:ef:ea:43:f1:96:31:0b:fa:
         c3:4e:2e:37:36:8e:fc:98:b7:9b:31:39:84:cb:23:bb:9a:da:
         0b:8e:da:5b:2c:e1:55:32:83:76:fa:47:25:7a:40:b6:04:c9:
         31:b3:1d:14:b3:76:ec:b5:a5:50:85:db:f6:20:a3:b4:4d:ad:
         be:48:e3:aa:89:0c:ef:26:15:3f:99:7b:5f:d8:ec:59:51:9d:
         7b:c5:f1:57:a6:40:98:15:1f:ed:20:b6:7d:80:6e:5c:58:8c:
         69:32:b4:35:e1:9a:80:15:fa:71:e2:a2:31:c7:83:09:2b:41:
         a7:58:c4:fb:fa:10:ab:4d:5f:c5:d6:94:ed:31:80:6b:72:9c:
         38:e6:9b:e2:d1:01:49:27:9b:e9:b0:1a:c6:b8:09:75:b9:06:
         87:06:a0:6d:0b:bf:54:f7:03:a0:d3:bd:da:5d:f3:c8:f4:cd:
         d5:2b:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:48 2026 by rpki-client