This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa
File:                     3139302e31312e3136302e302f31392d3234203d3e203532343230.roa (raw, json)
Hash identifier:          3qx/ypUJNTZkx3WRbgq9HcCQWZMRkdWOBWh6LBooUPE=
Subject key identifier:   80:4A:0A:2C:88:96:A0:3C:8A:5A:DD:86:2B:7B:56:4A:BB:37:B1:CF
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       60A941C487E8D77EB62D5F495C8381D0378A9ED2
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa
Signing time:             Tue 06 Jan 2026 20:53:58 +0000
ROA not before:           Tue 06 Jan 2026 20:48:58 +0000
ROA not after:            Tue 05 Jan 2027 20:53:58 +0000
asID:                     52420
IP address blocks:        190.11.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a9:41:c4:87:e8:d7:7e:b6:2d:5f:49:5c:83:81:d0:37:8a:9e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Jan  6 20:48:58 2026 GMT
            Not After : Jan  5 20:53:58 2027 GMT
        Subject: CN=804A0A2C8896A03C8A5ADD862B7B564ABB37B1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:45:ec:66:ce:4e:9c:fe:2e:b0:1e:35:d8:
                    cf:0e:b0:cc:f3:2c:4a:8e:c4:fa:27:c6:a9:38:a8:
                    5b:51:b3:09:d9:94:7d:c9:59:73:98:db:c7:63:85:
                    7e:ab:3d:39:d9:54:85:e7:bb:67:c0:fc:a7:d4:8a:
                    99:9b:0e:f5:41:6f:c5:0d:19:f0:1c:78:08:eb:b0:
                    38:27:f8:ae:b3:dc:72:aa:e6:88:1d:54:d8:3f:05:
                    ca:9f:da:3c:b6:eb:3c:dd:5e:16:fc:11:74:ea:ba:
                    b9:51:0e:4e:5b:1e:8d:59:a0:b3:a3:32:50:6a:8f:
                    3a:2c:d7:fe:54:2b:23:70:c5:1e:65:ce:53:52:03:
                    ae:6c:38:7e:5c:96:31:51:cb:b0:dc:9f:77:34:4d:
                    89:92:4b:e4:9e:d2:92:b8:d2:ad:7e:b3:b5:06:f5:
                    e2:eb:48:8a:f2:0a:2a:78:07:ff:c5:c8:02:91:bb:
                    c9:3a:89:7e:4d:fc:34:7d:9e:1f:54:37:2b:ed:4d:
                    95:cf:c8:b7:3c:09:3e:fc:dd:de:8e:6d:57:b4:a5:
                    ec:f6:14:95:b7:17:0e:c7:37:a8:06:b0:83:c5:79:
                    e5:45:22:8b:c1:95:c1:b5:64:24:86:2f:3f:99:96:
                    04:27:5b:d7:c6:5c:27:1b:56:d4:cf:f3:8e:2d:90:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4A:0A:2C:88:96:A0:3C:8A:5A:DD:86:2B:7B:56:4A:BB:37:B1:CF
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3136302e302f31392d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:5a:46:fa:56:a0:87:39:35:fd:c1:79:c2:92:61:5c:b6:f7:
         1b:3b:c4:4a:f9:cc:db:6e:72:e1:eb:f5:2b:7e:b6:86:2d:70:
         37:40:91:0c:5a:74:5e:77:0d:b6:b4:19:1f:7d:7a:88:35:63:
         b3:a6:d8:5f:dc:a4:ef:2d:da:ed:b9:58:b0:76:2b:98:95:30:
         15:87:0e:7e:8a:97:5e:b4:43:9f:81:c7:15:18:d3:87:76:75:
         31:0c:a2:bd:8f:c2:f2:eb:5e:c0:06:ec:21:93:45:d9:4b:90:
         a2:a6:a7:a2:77:83:1e:2e:ec:f9:d9:56:ca:0b:1a:69:aa:61:
         ec:77:43:03:79:2e:b4:54:f9:64:11:71:d0:eb:08:74:1c:6d:
         c9:75:c7:8e:29:df:10:94:db:e7:88:f5:93:48:f3:8e:b9:9f:
         95:f4:ae:1c:15:48:ed:26:59:99:c5:02:31:d6:e6:65:84:a8:
         69:70:1a:39:fb:7a:e9:0f:b9:d2:e9:90:c9:96:47:d2:a3:22:
         d4:79:8d:1f:17:2b:30:57:94:b9:7b:85:5b:01:67:b2:e9:22:
         97:82:32:cb:47:71:82:e2:92:c9:d1:de:cd:fe:4b:0d:60:2f:
         18:de:40:a4:06:59:67:f3:5e:2d:c8:90:a2:06:31:4d:ed:ff:
         1d:ac:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:53 2026 by rpki-client