This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203133353835.roa
File:                     3139302e31312e3136302e302f31392d3234203d3e203133353835.roa (raw, json)
Hash identifier:          SJiDBNDEF5YhTmGBnFJfb9sCW1Cj2Wd/4F9/mBBMSmQ=
Subject key identifier:   C3:73:2A:FA:A8:4B:14:B8:9A:20:67:6B:C4:38:D6:16:E8:8B:F2:96
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       26D612ED4C82037A83D202BFECE4AC80F4C1CE91
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203133353835.roa
Signing time:             Tue 06 Jan 2026 20:53:58 +0000
ROA not before:           Tue 06 Jan 2026 20:48:58 +0000
ROA not after:            Tue 05 Jan 2027 20:53:58 +0000
asID:                     13585
IP address blocks:        190.11.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:12:ed:4c:82:03:7a:83:d2:02:bf:ec:e4:ac:80:f4:c1:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Jan  6 20:48:58 2026 GMT
            Not After : Jan  5 20:53:58 2027 GMT
        Subject: CN=C3732AFAA84B14B89A20676BC438D616E88BF296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:9a:96:58:12:56:6c:0c:03:89:94:5b:30:
                    9f:17:8f:b3:56:1a:03:61:2a:ed:2c:c7:76:06:6f:
                    be:c5:68:ec:3b:0d:30:61:51:b6:2d:7b:38:11:24:
                    86:41:51:9e:2e:3a:ba:a5:a5:35:d1:6a:67:6e:3b:
                    52:1d:e7:d6:17:df:76:34:bf:9f:a1:63:d6:20:88:
                    fc:ac:59:71:79:2d:5a:c9:c1:47:e5:a7:89:84:57:
                    61:e9:18:5d:5c:bf:bd:45:2c:5e:b6:61:53:82:2e:
                    5d:39:c4:f2:0b:91:69:a2:40:40:f3:d2:80:cb:db:
                    ad:ac:b9:d0:ba:8a:a5:3e:79:de:51:e8:f0:b4:0d:
                    2c:01:c7:f5:01:5f:65:ad:bf:4b:65:58:94:0b:d8:
                    21:73:cb:9d:13:98:83:19:f3:ba:84:35:4b:3b:20:
                    63:ab:f0:3a:89:1d:76:d9:a2:80:f7:57:63:e8:ef:
                    1c:84:8f:83:13:1d:4b:35:17:af:1f:bc:f5:76:9b:
                    99:0a:aa:fb:25:20:f7:83:11:da:ef:9c:14:68:97:
                    db:cd:5d:48:fa:80:b3:59:1b:24:9d:e4:cf:86:19:
                    f3:77:9f:49:a1:a8:0a:37:76:02:39:6c:b6:3a:be:
                    0e:f5:31:0a:6a:d2:21:f5:66:5c:8d:b9:c7:e1:ed:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:2A:FA:A8:4B:14:B8:9A:20:67:6B:C4:38:D6:16:E8:8B:F2:96
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203133353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:05:65:af:66:51:73:39:96:24:97:6f:51:88:43:9d:59:
         8f:bf:da:ea:44:72:d8:86:a4:3e:00:be:44:f4:ae:51:5c:46:
         a4:c8:dd:1a:a1:24:f5:15:18:eb:f7:20:69:79:b1:38:c2:1e:
         d9:71:47:29:e8:48:9d:5c:3e:1f:eb:84:81:f8:75:25:71:6b:
         3e:53:9f:5e:bb:06:3e:ec:f0:d2:f5:bd:fa:30:fb:f9:aa:46:
         e0:3b:f9:01:ca:0d:65:76:d7:be:c4:e2:3d:78:42:db:24:c8:
         f1:f3:48:92:3a:26:3c:88:db:e7:9f:c5:f2:a1:83:3d:51:73:
         9c:a8:d6:e7:39:52:f0:f6:3a:93:a7:b7:64:0a:31:c9:87:a1:
         06:c2:b1:3d:ed:10:4a:b1:3b:dc:7c:d6:22:bc:f5:a1:93:30:
         f3:2c:03:30:55:85:7e:75:f2:3d:e5:fc:13:c3:80:fb:15:80:
         ba:36:d4:f2:b0:16:fc:74:37:d8:01:50:a4:31:aa:9b:78:67:
         ce:7e:dc:8b:6d:41:59:a8:c9:5e:17:37:78:5b:54:3d:15:7e:
         e3:f4:29:f6:91:19:61:53:9d:dd:37:e5:34:69:94:9e:b3:17:
         9d:87:81:d8:f2:80:af:52:ba:42:0b:5a:67:9b:9e:7f:e0:cc:
         b0:e5:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:25 2026 by rpki-client