This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa
File:                     3139302e3231322e36342e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          h+LzJzMav6fHzccTwQYIdh8XKXql+en2aOx6McLqASA=
Subject key identifier:   71:9F:67:21:83:92:1C:64:79:7F:6E:B5:44:01:6A:41:EF:50:B0:70
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       10249C92184A4A86D93C1AB9E82C43E3F22F1BFE
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:11:19 +0000
ROA not before:           Tue 06 Jan 2026 19:06:19 +0000
ROA not after:            Tue 05 Jan 2027 19:11:19 +0000
asID:                     14754
IP address blocks:        190.212.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:24:9c:92:18:4a:4a:86:d9:3c:1a:b9:e8:2c:43:e3:f2:2f:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Jan  6 19:06:19 2026 GMT
            Not After : Jan  5 19:11:19 2027 GMT
        Subject: CN=719F672183921C64797F6EB544016A41EF50B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:96:f4:d1:56:43:35:b6:82:26:be:42:33:
                    97:e2:86:07:04:33:a3:a9:7d:30:ab:e7:83:79:56:
                    e0:0f:8f:63:b2:93:f8:eb:2a:82:6a:17:fb:78:d8:
                    a8:dc:3c:61:3c:9e:ca:72:62:55:0f:18:c5:92:c7:
                    ca:94:74:c7:b5:df:ee:1b:84:f9:40:58:69:36:2a:
                    f5:8e:37:99:fb:45:21:31:6a:36:30:d0:52:60:71:
                    35:b6:40:15:45:da:af:12:38:40:c2:8e:c2:f0:3a:
                    61:be:ce:0f:25:92:62:9e:30:0d:51:0b:a9:0a:c3:
                    43:31:0f:cb:77:67:53:90:33:30:99:f3:a2:ab:ca:
                    e5:00:2a:8b:36:b6:c7:e5:16:72:e3:0b:47:4f:88:
                    60:1e:ed:f7:96:36:4c:4a:2f:dc:9a:df:08:4c:60:
                    e7:4b:50:55:6b:3a:0a:13:ee:73:7a:4c:2e:6c:5c:
                    e4:f8:91:6f:c8:41:b8:e1:57:74:44:fd:0e:13:97:
                    a1:0a:b2:82:f5:e7:7a:41:e9:80:00:5e:e8:5e:d3:
                    b7:69:be:ca:b6:61:45:f0:f1:c7:11:61:b4:e5:12:
                    38:79:e5:7d:0a:6c:8c:c9:b4:5b:7a:ca:3a:ee:d7:
                    59:15:f9:7b:d1:c6:80:44:e0:6d:4e:26:12:cf:46:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:67:21:83:92:1C:64:79:7F:6E:B5:44:01:6A:41:EF:50:B0:70
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e36342e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.212.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:46:bb:37:95:67:f0:08:46:c7:96:6f:8a:7a:49:ae:ca:5e:
         e7:55:21:65:3c:36:c5:2f:5f:46:6b:c9:b0:91:3d:cf:78:56:
         98:51:ac:c2:ac:be:14:4e:78:f6:31:7e:2e:83:5d:de:dd:59:
         f0:07:a1:d9:3c:bc:3a:74:43:32:b9:e4:08:7a:01:14:29:7c:
         f0:55:ac:c9:a9:1f:d3:76:5c:f0:be:5e:9d:09:4b:fa:20:bd:
         83:d1:f5:eb:1f:f9:23:ce:a6:c3:71:c1:68:f7:d1:b2:01:b8:
         ab:e6:fa:a0:ef:e9:8c:ce:36:55:cd:c0:2b:1b:eb:ae:ab:1d:
         19:1e:86:3b:7e:1c:45:2c:6c:dd:d4:35:f5:f9:0a:8e:4c:da:
         52:d1:82:80:74:c0:49:b5:6d:c9:18:99:82:9b:f0:51:12:34:
         06:c0:12:62:ba:ad:2d:31:3d:98:60:4d:15:aa:49:cd:f3:a4:
         d9:be:cc:71:3d:d5:46:0c:7b:b3:5e:55:64:53:19:c3:4d:90:
         26:c4:4f:48:74:32:41:7c:6b:60:b3:4c:c0:94:21:67:45:55:
         f0:59:ad:70:09:58:f2:d4:f1:c9:5b:43:6c:96:27:45:05:40:
         9b:dc:fa:78:64:a0:65:c8:7b:69:c4:db:9b:17:c9:2a:16:2a:
         8d:ab:1f:bb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUECSckhhKSobZPBq56CxD4/IvG/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyRkM5QTMwNjZEMkUwQzI5NEYwRTAwMUE5NEYyRjBB
RUQ3MjcwQzAeFw0yNjAxMDYxOTA2MTlaFw0yNzAxMDUxOTExMTlaMDMxMTAvBgNV
BAMTKDcxOUY2NzIxODM5MjFDNjQ3OTdGNkVCNTQ0MDE2QTQxRUY1MEIwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVJb00VZDNbaCJr5CM5fihgcE
M6OpfTCr54N5VuAPj2Oyk/jrKoJqF/t42KjcPGE8nspyYlUPGMWSx8qUdMe13+4b
hPlAWGk2KvWON5n7RSExajYw0FJgcTW2QBVF2q8SOEDCjsLwOmG+zg8lkmKeMA1R
C6kKw0MxD8t3Z1OQMzCZ86KryuUAKos2tsflFnLjC0dPiGAe7feWNkxKL9ya3whM
YOdLUFVrOgoT7nN6TC5sXOT4kW/IQbjhV3RE/Q4Tl6EKsoL153pB6YAAXuhe07dp
vsq2YUXw8ccRYbTlEjh55X0KbIzJtFt6yjru11kV+XvRxoBE4G1OJhLPRkUVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcZ9nIYOSHGR5f261RAFqQe9QsHAwHwYDVR0j
BBgwFoAUUS/JowZtLgwpTw4AGpTy8K7XJwwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENkNCNTEzMUU2RTlGNjI4NTVEQzBFQzUwNjU1Q0Q4MTBE
RDk4NUFCQkJGRkJGNEYwQzY1Mzc5NUYyMTRFRDk5LzAvNTEyRkM5QTMwNjZEMkUw
QzI5NEYwRTAwMUE5NEYyRjBBRUQ3MjcwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTJGQzlBMzA2NkQyRTBDMjk0
RjBFMDAxQTk0RjJGMEFFRDcyNzBDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDZDQjUxMzFFNkU5RjYyODU1REMwRUM1MDY1NUNEODEwREQ5ODVBQkJC
RkZCRjRGMEM2NTM3OTVGMjE0RUQ5OS8wLzMxMzkzMDJlMzIzMTMyMmUzNjM0MmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr7UQDAN
BgkqhkiG9w0BAQsFAAOCAQEAaEa7N5Vn8AhGx5ZvinpJrspe51UhZTw2xS9fRmvJ
sJE9z3hWmFGswqy+FE549jF+LoNd3t1Z8Aeh2Ty8OnRDMrnkCHoBFCl88FWsyakf
03Zc8L5enQlL+iC9g9H16x/5I86mw3HBaPfRsgG4q+b6oO/pjM42Vc3AKxvrrqsd
GR6GO34cRSxs3dQ19fkKjkzaUtGCgHTASbVtyRiZgpvwURI0BsASYrqtLTE9mGBN
FapJzfOk2b7McT3VRgx7s15VZFMZw02QJsRPSHQyQXxrYLNMwJQhZ0VV8FmtcAlY
8tTxyVtDbJYnRQVAm9z6eGSgZch7acTbmxfJKhYqjasfuw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:35 2026 by rpki-client